1371 matches found
GHSA-X72P-G37Q-4XR9 Withdrawn: SFTPGo's JWT implmentation lacks certain security measures
Withdrawn: The attack vector described in the backing report required that an attacker gain access to a user's session cookie. By gaining access to the session cookie the attacker is for all intents and purposes the valid user and any access to user data would be expected. In SFTPGo 2.6.2, the JW...
Withdrawn: SFTPGo's JWT implmentation lacks certain security measures
Withdrawn: The attack vector described in the backing report required that an attacker gain access to a user's session cookie. By gaining access to the session cookie the attacker is for all intents and purposes the valid user and any access to user data would be expected. In SFTPGo 2.6.2, the JW...
CVE-2024-40430
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2024-40430
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...
CVE-2024-40430
CVE-2024-40430 is rejected and not an active vulnerability entry.
BELL-CVE-2024-40923
Bulletin has no description...
CGA-9C8X-GHW4-J2Q7
Bulletin has no description...
Exploit for Code Injection in Geoserver
RCE vulnerability in GeoServer CVE-2024-36401 - detection sc...
Hidden between the tags: Insights into spammers’ evasion techniques in HTML Smuggling
Cisco Talos has spotted several malicious email campaigns over the past few months that disguise JavaScript code within HTML email attachments, a technique commonly known as "HTML Smuggling." Cisco Talos has noticed that some industry verticals were targeted more than others by email threats usin...
Blueprint for Success: Implementing a CTEM Operation
The attack surface isn't what it once was and it's becoming a nightmare to protect. A constantly expanding and evolving attack surface means risk to the business has skyrocketed and current security measures are struggling to keep it protected. If you've clicked on this article, there's a good...
MAL-2024-7198 Malicious code in @zitterorg/error-quisquam (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c551ad7c762ab7c8fb3fa485a06a56f36eecbed77978447c95958cd5ab4fbb45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2024-37089 · Devika · Devika
Name of the Vulnerable Software and Affected Versions: stitutionai/devika version latest Description: A Cross-Site Request Forgery CSRF issue was identified, allowing attackers to perform unauthorized actions in the context of a victim's browser, such as deleting projects or changing application...
Essential Strategies to Secure Your Web Applications and APIs in a Modern Application Development World
In today’s interconnected digital world, the role of web applications and APIs has become central to business operations, acting as gateways to vast amounts of valuable data and services. However, their widespread use and accessibility make them prime targets for cybercriminals, posing substantia...
BELL-CVE-2024-38600
Bulletin has no description...
TotalCloud Insights: Protect Your AWS Environment by Managing Access Keys Securely
Introduction With the average cost of a data breach coming in at $4.45M in 2023, safeguarding sensitive information and maintaining the security of cloud environments is more critical than ever. Instances of compromised access keys, not exclusive to AWS Amazon Web Services but prevalent across...
Fuji Electric Tellus Lite V-Simulator
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.5 ATTENTION : Low attack complexity Vendor : Fuji Electric Equipment : Tellus Lite V-Simulator Vulnerabilities : Out-of-Bound Write, Stack-based Buffer Overflow 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a local...