Lucene search
+L

5053 matches found

OSSF Malicious Packages
OSSF Malicious Packages
•added 2024/01/01 12:40 a.m.•13 views

Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

6.9AI score
SaveExploits0
osv_mal
osv_mal
•added 2024/01/01 12:40 a.m.•33 views

MAL-2024-1 Malicious code in squaredev-next-online-payments-example (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c12aadbc7b6d08bd4746e705c7507074eb759ac60f260bdf9a59cd85d966a45b The OpenSSF Package Analysis project identified 'squaredev-next-online-payments-example' @ 99.0.0 npm as malicious. It is considered malicious...

7.1AI score
SaveExploits0
SUSE CVE
SUSE CVE
•added 2023/12/28 2:22 a.m.•13 views

SUSE CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

6.1CVSS6.8AI score0.01079EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/12/27 1:08 a.m.•4 views

Malware in next-id-doc

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_ghsa
osv_ghsa
•added 2023/12/27 12:30 a.m.•47 views

GHSA-672H-6X89-76M5 Open redirect vulnerability in Flask-Security-Too

An open redirect vulnerability in the python package Flask-Security-Too =2.1.0 the autocorrectlocationheader configuration was changed to False - which means that location headers in redirects are relative by default. Thus, this issue may impact applications that were previously not impacted, if...

6.1CVSS6AI score0.01079EPSS
SaveExploits1References6
NVD
NVD
•added 2023/12/26 10:15 p.m.•36 views

CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

6.1CVSS0.01079EPSS
SaveExploits1References4
PyPA
PyPA
•added 2023/12/26 10:15 p.m.•15 views

PYSEC-2023-248

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

6.1CVSS6.8AI score0.01079EPSS
SaveExploits1References5Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/26 12:00 a.m.•6 views

CVE-2023-49438: URL Redirection to Untrusted Site

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

6.1CVSS6.1AI score0.01079EPSS
SaveExploits1References2
Mend
Mend
•added 2023/12/26 12:00 a.m.•4 views

CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

6.1CVSS0.01079EPSS
SaveExploits1References9
CNNVD
CNNVD
•added 2023/12/26 12:00 a.m.•18 views

Flask Middleware Flask-security Security Vulnerabilities

Flask Middleware Flask-security is a Python-based codebase from the Flask Middleware organization that provides security features for Flask applications. Flask Middleware Flask-security A security vulnerability exists in Flask-Security-Too 5.3.2 and earlier versions that originates from a...

6.1CVSS6.5AI score0.01079EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2023/12/26 12:00 a.m.•53 views

CVE-2023-49438

An open redirect vulnerability in the python package Flask-Security-Too =5.3.2 allows attackers to redirect unsuspecting users to malicious sites via a crafted URL by abusing the ?next parameter on the /login and /register routes...

6.2AI score0.01079EPSS
SaveExploits1References3
OSSF Malicious Packages
OSSF Malicious Packages
•added 2023/12/22 12:35 p.m.•11 views

Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
SaveExploits0References1
osv_mal
osv_mal
•added 2023/12/22 12:35 p.m.•24 views

MAL-2023-8734 Malicious code in next-id-doc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 78b8ec553ac410688ce195e0361743232f4c5c356df00d5dfb465da50060f8eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
attackerkb
attackerkb
•added 2023/12/21 1:15 a.m.•7 views

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

9.8CVSS7.4AI score0.0103EPSS
SaveExploits1References3
NVD
NVD
•added 2023/12/21 1:15 a.m.•50 views

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

9.8CVSS0.0103EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/12/21 1:15 a.m.•21 views

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

9.8CVSS5.8AI score0.0103EPSS
SaveExploits1References1
Prion
Prion
•added 2023/12/21 1:15 a.m.•28 views

Design/Logic Flaw

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component...

7.5CVSS7.4AI score0.0103EPSS
SaveExploits1References1Affected Software1
CVE
CVE
•added 2023/12/21 12:00 a.m.•118 views

CVE-2023-29486

The CVE-2023-29486 entry concerns Heimdal Thor agent for Windows, affected in versions 3.4.2 and earlier than 3.7.0. The issue allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via the Next-Gen Antivirus component. Red Hat and Ubuntu ecos...

9.8CVSS9.6AI score0.0103EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/12/21 12:00 a.m.•33 views

CVE-2023-29486

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

9.7AI score0.0103EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/21 12:00 a.m.•8 views

CVE-2023-29486: Inefficient Regular Expression Complexity

An issue was discovered in Heimdal Thor agent versions 3.4.2 and before 3.7.0 on Windows, allows attackers to bypass USB access restrictions, execute arbitrary code, and obtain sensitive information via Next-Gen Antivirus component. NOTE: Heimdal argues that the limitation described here is a...

9.8CVSS8.4AI score0.0103EPSS
SaveExploits1References3
Rows per page
Query Builder