MAL-2025-38553 Malicious code in void-perseus-rocket-zenobia (npm)

The package void-perseus-rocket-zenobia was found to contain malicious code...

MAL-2025-17889 Malicious code in cygnus-rocket-rate-limiter-library (npm)

The package cygnus-rocket-rate-limiter-library was found to contain malicious code...

Malicious code in aldebaran-rocket-hyperion-wezen (npm)

The package aldebaran-rocket-hyperion-wezen was found to contain malicious code...

Malicious code in rocket-xanthus-changelog-quark (npm)

The package rocket-xanthus-changelog-quark was found to contain malicious code...

Malicious code in toml-karma-nodejs-rocket (npm)

The package toml-karma-nodejs-rocket was found to contain malicious code...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

CVE-2024-45955

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

Rocket Software Rocket Zena 安全漏洞

Rocket Software Rocket Zena is a workload automation software from Rocket Software, USA. A security vulnerability exists in Rocket Software Rocket Zena version 4.4.1.26, which stems from improper handling of the filter parameter and can lead to SQL injection attacks...

CVE-2024-45955

Rocket Software Rocket Zena version 4.4.1.26 is vulnerable to SQL Injection due to the improper handling of the filter parameter. This security flaw could allow an attacker to execute malicious SQL commands. No information is currently available regarding a newer version that contains a fix for t...

CVE-2024-45955: Improper Neutralization of Special Elements used in an SQL Command

Rocket Software Rocket Zena 4.4.1.26 is vulnerable to SQL Injection via the filter parameter...

PT-2025-30610 · Rocket · Rocket Zena

Name of the Vulnerable Software and Affected Versions: Rocket Software Rocket Zena version 4.4.1.26 Description: Rocket Software Rocket Zena version 4.4.1.26 is vulnerable to SQL Injection via the filter parameter. Recommendations: At the moment, there is no information about a newer version that...

rocket.chat Incorrect Authorization Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of rocket.chat. Authentication is not required to exploit this vulnerability. The specific flaw exists within the web service, which listens on TCP port 3000 by default. The issue results from...

Incorrect Privilege Assignment

Overview Affected versions of this package are vulnerable to Incorrect Privilege Assignment due to improper retention of the mstatus.SUM bit, which remains set contrary to privileged specification constraints. An attacker can gain unauthorized access to physical memory by exploiting this improper...

CVE-2024-8270 macOS Rocket.Chat: TCC Policy Bypass via Dylib Injection Due to Missing Code Signing Flags and Dangerous Entitlements

The macOS Rocket.Chat application is affected by a vulnerability that allows bypassing Transparency, Consent, and Control TCC policies, enabling the exploitation or abuse of permissions specified in its entitlements e.g., microphone, camera, automation, network client. Since Rocket.Chat was not...

Rocket.Chat 安全漏洞

Rocket.Chat is a chat program from Rocket.Chat, Inc. A security vulnerability exists in Rocket.Chat versions 7.6.1 and earlier, which stems from inefficient regular expression complexity due to incorrect manipulation of the parameter line in file...

CVE-2024-9697

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the tweetsettingssave and tweetsettingsupdate functions in all versions up to, and including, 1.3.4. This makes it possible for authenticated...

CVE-2024-9702

The Social Rocket – Social Sharing Plugin plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's 'socialrocket-floating' shortcode in all versions up to, and including, 1.3.4 due to insufficient input sanitization and output escaping on user supplied attributes. This...