Oceanic Software ValeApp 安全漏洞

ValeApp is a mobile application from Oceanic Software for providing convenient and fast parking services. A security vulnerability previously existed in Oceanic Software ValeApp version 2.0.0, which originated from the inclusion of a sensitive information leak that could lead to JavaScript...

WordPress Oceanic theme <= 1.0.48 - Cross Site Request Forgery (CSRF) vulnerability

Cross Site Request Forgery CSRF vulnerability discovered by Dhabaleshwar Das Patchstack Alliance in WordPress Theme Oceanic versions = 1.0.48...

WordPress Oceanic Theme <= 1.0.48 is vulnerable to Cross Site Request Forgery (CSRF)

Software Oceanic Type Theme Vulnerable versions = 1.0.48 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-38765 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 6ee0cfa1c57a Credits Dhabaleshwar Das Required...

GHSA-5H5V-HW44-F6GG Oceanic allows unsanitized user input to lead to path traversal in URLs

Impact Input to functions such as Client.rest.channels.removeBan is not url-encoded, resulting in specially crafted input such as ../../../channels/id being normalized into the url /api/v10/channels/id, and deleting a channel rather than removing a ban. Workarounds Sanitizing user input, ensuring...

CVE-2024-34712 Oceanic allows unsanitized user input to lead to path traversal in URLs

Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as Client.rest.channels.removeBan is not url-encoded, resulting in specially crafted input such as ../../../channels/id being normalized into the url /api/v10/channels/id, and deleting a...

CVE-2024-34712

Oceanic (NodeJS) vulnerability CVE-2024-34712 affects versions prior to 1.10.4. Input to functions like Client.rest.channels.removeBan is not URL-encoded, allowing crafted input such as ../../../channels/{id} to be normalized into /api/v10/channels/{id}, potentially causing unintended channel act...

CVE-2024-34712 Oceanic allows unsanitized user input to lead to path traversal in URLs

Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as Client.rest.channels.removeBan is not url-encoded, resulting in specially crafted input such as ../../../channels/id being normalized into the url /api/v10/channels/id, and deleting a...

CVE-2024-34712 Oceanic allows unsanitized user input to lead to path traversal in URLs

Oceanic is a NodeJS library for interfacing with Discord. Prior to version 1.10.4, input to functions such as Client.rest.channels.removeBan is not url-encoded, resulting in specially crafted input such as ../../../channels/id being normalized into the url /api/v10/channels/id, and deleting a...

PT-2024-26126 · Oceanic · Oceanic

Name of the Vulnerable Software and Affected Versions: Oceanic versions prior to 1.10.4 Description: The issue arises from the lack of url-encoding for input to certain functions, such as Client.rest.channels.removeBan. This allows specially crafted input, like ../../../channels/id, to be...

Oceanic 安全漏洞

Oceanic is a NodeJS library for interacting with Discord open-sourced by Oceanic. A security vulnerability exists in Oceanic versions prior to 1.10.4, which stems from uncleaned user input that may result in URL path traversal...

SQL Injection Vulnerability in the Website Building System of Changzhou Oceanic Network Technology Co.

Changzhou Oceanus Network Technology Co., Ltd. was founded in March 2005, is committed to creating a corporate brand website custom design and development of the industry's influential brand enterprises. There is a SQL injection vulnerability in the website system of Changzhou Oceanic Network...

NOAA, Satellite Data, Riddled with Vulnerabilities

The informational systems that the National Oceanic and Atmospheric Administration NOAA run are fraught with vulnerabilities and what the U.S. Department of Commerce deems “significant security deficiencies” that could leave it vulnerable to cyber attacks. That’s according to the findings of an...

Unfixed XSS vulnerability at www.oceanicengineering.org

Security researcher Narcoticxs, has submitted on 28/09/2007 a cross-site-scripting XSS vulnerability affecting www.oceanicengineering.org, which at the time of submission ranked 11551928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 02/10/200...