Lucene search
+L

7625 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2022/06/20 8:11 p.m.7 views

Malicious code in bitcoin-json-rpc-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6343f2f77d5f772e6b17c00fed2653e9c0c887f0e0ae1fda00de4b0cde9f8ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References1
OSV
OSV
added 2022/06/20 8:11 p.m.21 views

MAL-2022-1585 Malicious code in bitcoin-json-rpc-adapter (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6343f2f77d5f772e6b17c00fed2653e9c0c887f0e0ae1fda00de4b0cde9f8ca5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
NVD
NVD
added 2022/06/17 1:15 p.m.26 views

CVE-2018-25040

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the publ...

8.8CVSS0.00887EPSS
SaveExploits1References3
NVD
NVD
added 2022/06/17 1:15 p.m.31 views

CVE-2018-25041

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

8.8CVSS0.00995EPSS
SaveExploits1References4
Prion
Prion
added 2022/06/17 1:15 p.m.34 views

Privilege escalation

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

6.8CVSS8.6AI score0.00995EPSS
SaveExploits1References4
Prion
Prion
added 2022/06/17 1:15 p.m.24 views

Privilege escalation

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the publ...

6.8CVSS8.7AI score0.00887EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/06/17 4:45 a.m.36 views

CVE-2018-25041 uTorrent JSON RPC Server privileges management

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

6.3CVSS8.8AI score0.00995EPSS
SaveExploits1References4
CVE
CVE
added 2022/06/17 4:45 a.m.63 views

CVE-2018-25041

A vulnerability in uTorrent’s JSON RPC Server allows remote privilege escalation. The issue affects an unspecified functionality of the JSON RPC Server; exploit has been disclosed publicly. Upgrading the affected component is recommended as the remediation; exact patched version is not specified ...

8.8CVSS7.5AI score0.00995EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/17 4:45 a.m.10 views

CVE-2018-25041 uTorrent JSON RPC Server privileges management

A vulnerability was found in uTorrent. It has been rated as critical. Affected by this issue is some unknown functionality of the component JSON RPC Server. The manipulation leads to privilege escalation. The attack may be launched remotely. The exploit has been disclosed to the public and may be...

6.3CVSS8.9AI score0.00995EPSS
SaveExploits1References4
Vulnrichment
Vulnrichment
added 2022/06/17 4:45 a.m.9 views

CVE-2018-25040 uTorrent Web HTTP RPC Server privileges management

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the publ...

6.3CVSS9AI score0.00887EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2022/06/17 4:45 a.m.32 views

CVE-2018-25040 uTorrent Web HTTP RPC Server privileges management

A vulnerability was found in uTorrent Web. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the component HTTP RPC Server. The manipulation leads to privilege escalation. The attack can be launched remotely. The exploit has been disclosed to the publ...

6.3CVSS8.8AI score0.00887EPSS
SaveExploits1References3
CVE
CVE
added 2022/06/17 4:45 a.m.55 views

CVE-2018-25040

The CVE-2018-25040 issue affects uTorrent Web and involves the HTTP RPC Server component. The documented vulnerability allows privilege escalation via manipulation of an unknown functionality in the RPC server, with remote exploitation. Multiple sources corroborate that the exploit has been discl...

8.8CVSS7.6AI score0.00887EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2022/06/14 12:00 a.m.13 views

Denial of service vulnerability in gozero framework

go-zero is a web and rpc framework that integrates various engineering practices. A denial of service vulnerability exists in the gozero framework that can be exploited by an attacker to cause a denial of service attack...

6.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2022/06/13 11:08 a.m.325 views

Exploit for CVE-2022-26809

PoC-CVE-2022-26809 PoC for CVE-2022-26809, analisys and consi...

10CVSS10AI score0.90961EPSS
SaveExploits14
Github Security Blog
Github Security Blog
added 2022/06/03 12:01 a.m.53 views

Flower OAuth authentication bypass

All versions of Flower, a web UI for the Celery Python RPC framework, as of 05-02-2022 are vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes. A fix was...

8.6CVSS8.5AI score0.01057EPSS
SaveExploits1References7Affected Software1
OSV
OSV
added 2022/06/03 12:01 a.m.198 views

GHSA-Q4QM-XHF9-4P8F Flower OAuth authentication bypass

All versions of Flower, a web UI for the Celery Python RPC framework, as of 05-02-2022 are vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes. A fix was...

8.8CVSS8.6AI score0.01057EPSS
SaveExploits1References7
NVD
NVD
added 2022/06/02 2:15 p.m.29 views

CVE-2022-30034

Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes...

8.6CVSS0.01057EPSS
SaveExploits1References2
UbuntuCve
UbuntuCve
added 2022/06/02 2:15 p.m.40 views

CVE-2022-30034

Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes...

8.6CVSS7.3AI score0.01057EPSS
SaveExploits1References3
Prion
Prion
added 2022/06/02 2:15 p.m.17 views

Authentication flaw

Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes...

7.5CVSS8.6AI score0.01057EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2022/06/02 2:15 p.m.18 views

UBUNTU-CVE-2022-30034

Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke arbitrary Celery RPC calls or deny service by shutting down Celery task nodes...

8.6CVSS7.4AI score0.01057EPSS
SaveExploits1References4
Rows per page
Query Builder