Alert: Million of GitHub Repositories Likely Vulnerable to RepoJacking Attack

Millions of software repositories on GitHub are likely vulnerable to an attack called RepoJacking , a new study has revealed. This includes repositories from organizations such as Google, Lyft, and several others, Massachusetts-based cloud-native security firm Aqua said in a Wednesday report. The...

oldcastlecoop.ie Cross Site Scripting vulnerability OBB-3415121

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-16658 · Trellix · Ta

Name of the Vulnerable Software and Affected Versions: TA for mac-OS versions prior to 5.7.9 Description: A command injection issue allows local users to place an arbitrary file into the /Library/Trellix/Agent/bin/ folder. The malicious file is executed by running the TA deployment feature locate...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS, which stems from a denial of service issue in the fingerprint old service interface of the HarmonyOS...

WordPress plugin Blogger Importer 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

oldspitalfieldsmarket.com Cross Site Scripting vulnerability OBB-3380942

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-25743

A lack of in app notification for entering fullscreen mode could have lead to a malicious website spoofing browser chrome. This bug only affects Firefox Focus. Other versions of Firefox are unaffected.. This vulnerability affects Firefox 110 and Firefox ESR 102.8...

CVE-2023-33778

Draytek Vigor Routers firmware versions below 3.9.6/4.2.4, Access Points firmware versions below v1.4.0, Switches firmware versions below 2.6.7, and Myvigor firmware versions below 2.3.2 were discovered to use hardcoded encryption keys which allows attackers to bind any affected device to their o...

PT-2023-23964 · Unknown · Parse Javascript Sdk +1

Name of the Vulnerable Software and Affected Versions: Parse Server versions prior to 5.4.4 and 6.1.1 Description: The issue involves a phishing attack vulnerability where a malicious user can upload an HTML file to Parse Server via its public API. This uploaded HTML file can then be accessed at...

Session Fixation

org.apache.inlong is vulnerable to Session Fixation. The vulnerability exists due to insufficient session expiration, which allows an attacker to use old sessions even after the user has been deleted or the password has been changed...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

Old Age Home Management SQL注入漏洞

PHPGurukul Old Age Home Management System is a nursing home management system from PHPGurukul, Inc. A security vulnerability exists in Old Age Home Management version 1.0, which stems from a problem with the username parameter and can be exploited by an attacker to conduct an SQL injection attack...

CVE-2023-33338

CVE-2023-33338 refers to the Old Age Home Management System v1.0, where the username parameter is vulnerable to SQL Injection (CWE-89). The issue allows an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage or data manipulation, with CVSS v3.1 metr...

CVE-2023-33338

Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter...

PT-2023-24305 · Unknown · Old Age Home Management

Name of the Vulnerable Software and Affected Versions: Old Age Home Management version 1.0 Description: The issue concerns SQL Injection via the username parameter. This allows for potential unauthorized access or manipulation of data. Recommendations: For Old Age Home Management version 1.0,...

WordPress Plugin Brands for WooCommerce 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

GHSA-M974-XJ4J-7QV5 Boxo bitswap/server: DOS unbounded persistent memory leak

Impact An attacker is able allocate arbitrarily many bytes in the Bitswap server by sending many WANTBLOCK and or WANTHAVE requests which are queued in an unbounded queue, with allocations that persist even if the connection is closed. This affects users accepting untrusted connections with the...

Boxo bitswap/server: DOS unbounded persistent memory leak

Impact An attacker is able allocate arbitrarily many bytes in the Bitswap server by sending many WANTBLOCK and or WANTHAVE requests which are queued in an unbounded queue, with allocations that persist even if the connection is closed. This affects users accepting untrusted connections with the...

PT-2023-22999 · Mutagen +1 · Mutagen +1

Name of the Vulnerable Software and Affected Versions: Mutagen versions prior to 0.16.6 Mutagen versions prior to 0.17.1 mutagen-compose versions prior to 0.17.1 Description: The issue affects Mutagen's list and monitor commands, making them susceptible to control characters provided by remote...