2139 matches found
EUVD-2024-2006
Malicious code in bioql PyPI...
EUVD-2022-5249
Malicious code in bioql PyPI...
EUVD-2022-7065
Malicious code in bioql PyPI...
EUVD-2024-0446
Malicious code in bioql PyPI...
EUVD-2024-2404
Malicious code in bioql PyPI...
EUVD-2024-2772
Malicious code in bioql PyPI...
EUVD-2023-2663
Malicious code in bioql PyPI...
EUVD-2024-39295
Malicious code in bioql PyPI...
EUVD-2022-4486
Malicious code in bioql PyPI...
Security Bulletin: Multiple vulnerabilities in IBM Aspera Console
Summary Multiple vulnerabilities were addressed in IBM Aspera Console version 3.4.7. Vulnerability Details CVEID:CVE-2022-44566 DESCRIPTION: A denial of service vulnerability present in ActiveRecord's PostgreSQL adapter 7.0.4.1 and 6.1.7.1. When a value outside the range for a 64bit signed intege...
Linux Distros Unpatched Vulnerability : CVE-2019-25025
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The activerecord-sessionstore aka Active Record Session Store component through 1.1.3 for Ruby on Rails does not use a constant-time approach when delivering...
Exploit for Improper Input Validation in Rubyonrails Rails
🔐 Black Box Penetration Test on DVWA This repository document...
Linux Distros Unpatched Vulnerability : CVE-2024-32978
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Kaminari is a paginator for web app frameworks and object relational mappings. A security vulnerability involving insecure file permissions has been identified ...
Thor 操作系统命令注入漏洞
Thor is a Ruby on Rails open source toolkit for building command line interfaces. An operating system command injection vulnerability exists in versions of Thor prior to 1.4.0, which stems from constructing insecure shell commands from library input and could lead to command injection...
The vulnerability of the Ruby on Rails software platform, related to the manipulation of cross-site requests, allows attackers to send CSRF tokens to incorrect domains.
The vulnerability of the Ruby on Rails software platform is related to the manipulation of cross-site requests. Exploiting this vulnerability allows a malicious actor to remotely send CSRF tokens to incorrect domains...
The vulnerability of the Ruby on Rails software platform, related to the， CSRF token。
The vulnerability of the Ruby on Rails software platform is related to the manipulation of inter-site requests in the authenticitytoken metagestion. Exploiting this vulnerability allows a malicious actor to forge the valid CSRF token remotely...
The vulnerability of the Ruby on Rails software platform, related to improper authentication, allows a hacker to trigger a service failure.
The vulnerability of the Ruby on Rails software platform is related to improper authentication. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...
CISA Adds Four Critical Vulnerabilities to KEV Catalog Due to Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Monday added four security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. The list of flaws is as follows - CVE-2014-3931 CVSS score: 9.8 - A buffer overflow...
ROS-20250625-04
A vulnerability in the Ruby on Rails software platform is related to a CSRF vulnerability in the rails-ujs module. Exploitation of the vulnerability could allow an attacker acting remotely to send CSRF tokens to the wrong domains. invalid domains...
ROS-20250625-07
Vulnerability of translate function from translationhelper.rb of Ruby on Rails software platform is related to flaws in the measures used to protect web page structures. Exploitation of the vulnerability allows an attacker acting remotely to affect data integrity...