Design/Logic Flaw

With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...

CVE-2024-0243 Server-side Request Forgery In Recursive URL Loader

With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...

CVE-2024-0243 Server-side Request Forgery In Recursive URL Loader

With the following crawler configuration: python from bs4 import BeautifulSoup as Soup url = "https://example.com" loader = RecursiveUrlLoader url=url, maxdepth=2, extractor=lambda x: Soupx, "html.parser".text docs = loader.load An attacker in control of the contents of https://example.com could...

PT-2024-15407

Name of the Vulnerable Software and Affected Versions langchain versions prior to the version that includes the fix from https://github.com/langchain-ai/langchain/pull/15559 Description The issue arises when an attacker controls the contents of a website, such as https://example.com, and places a...

Security Bulletin: Multiple Oracle Outside In Technology vulnerabilities in IBM Engineering Requirements Management DOORS Next

Summary Multiple security vulnerabilities in Oracle Outside In Technology affect IBM Engineering Requirements Management DOORS Next. Vulnerability Details CVEID:CVE-2021-35573 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component cou...

CVE-2023-42838

An access issue was addressed with improvements to the sandbox. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.1, macOS Monterey 12.7.2. An app may be able to execute arbitrary code out of its sandbox or with certain elevated privileges...

MAL-2024-1032 Malicious code in testconfusiontestt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 68716301fda6917d0a2abf5455e1ab2d5780d533eb27a1033a84888b0f9677eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1014 Malicious code in ts-patch-mongoos (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9d01c75529c60a175f933cf4ab12fc25b4aff8c32811e792b80af094da34b3c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerabilities of PDF viewing and editing programs like Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, and Adobe Acrobat 2020/Adobe Acrobat Reader 2020 involve an exploit where operations are performed outside the buffer in memory, allowing attackers to execute arbitrary code.

The vulnerabilities of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 are related to the execution of operations beyond the buffer in memory. Exploiting these vulnerabilities can allow...

MAL-2024-1021 Malicious code in analysis-shared-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6b5ec306ddd836199e002421ad6971e233057a594e310d51a70904ca62a8ce9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1005 Malicious code in ts-patch-mongose (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 51bc93e8c8d28afed9e08e35605df0343e47bb7e02ccd33e5f7cb1f56c7099ac Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-23607

A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read files outside the QKView directory. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

F5 F5OS Path Traversal Vulnerability

F5 F5OS is a proprietary operating system that runs on F5 Corporation's F5 devices to support its application delivery control and security features. A security vulnerability exists in the F5 F5OS QKView utility that originates from allowing an authenticated attacker to read files outside of the...

PT-2024-19961 · F5 · F5Os Qkview Utility

Name of the Vulnerable Software and Affected Versions: F5OS QKView utility affected versions not specified Description: A directory traversal vulnerability exists in the F5OS QKView utility, allowing an authenticated attacker to read files outside the QKView directory. Note that software versions...

registry-support Security Vulnerabilities

registry-support is a Devfile open source library . It provides support for the devfile registry. registry-support security vulnerability , the vulnerability stems from an unauthenticated remote attacker to trick the user to open a specially modified tar archive , resulting in the cleanup process...

MAL-2024-996 Malicious code in vtuancuti (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b03a47e97430787e0ff4368de00faaa5660d41aeb26f22c0cf3a0e0df89d55e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-997 Malicious code in vtuandz00 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 40326c62447e4c0afa817e4131690933922ce0212952668133c68f550f1c34db Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-985 Malicious code in iris-front-test-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ed1b8ea683be3ab1a06938511d841bfbd293b36b9a8bcccedd6d794a2af3f85 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-22021

Vulnerability CVE-2024-22021 allows a Veeam Recovery Orchestrator user with a low privileged role Plan Author to retrieve plans from a Scope other than the one they are assigned to...

Cisco Expressway Series 跨站请求伪造漏洞

Cisco Expressway Series is a software for accessing devices outside the firewall from Cisco USA. A cross-site request forgery vulnerability exists in Cisco Expressway Series, which can be exploited by an attacker to modify sensitive information or perform unauthorized operations...