The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD lies in the lack of limits on authentication attempts. This allows a perpetrator to circumvent security restrictions or cause service failures.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD lies in the absence of restrictions on authentication attempts when processing the defaultMaxCacheSize parameter. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions or cause servic...

Hackers Found a Way to Open Any of 3 Million Hotel Keycard Locks in Seconds

The company behind the Saflok-brand door locks is offering a fix, but it may take months or years to reach some hotels...

Customer Support System 安全漏洞

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in the v1 version of Customer Support System, which...

lagom 安全漏洞

lagom is a PyTorch infrastructure for rapid prototyping of reinforcement learning algorithms from the Xingdong Zuo personal developer. A security vulnerability exists in lagom version v.0.1.2, which stems from a vulnerability that allows a local attacker to execute arbitrary code via the picklelo...

School Fees Management System 安全漏洞

School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System version v1.0 that originates from a broken access control in /admin/management/users...

Customer Support System 安全漏洞

Customer Support System is a customer support system by oretnom23 Individual Developer that helps a particular business or company to provide customer support after a customer has purchased a product from them. A security vulnerability exists in Customer Support System v1 version, which stems fro...

Likeshop 安全漏洞

Likeshop is a complete solution for social commerce strategies from Likeshop Open Source. A security vulnerability exists in Likeshop versions prior to 2.5.7 that stems from the presence of a server-side request forgery SSRF vulnerability that allows an attacker to view sensitive information via...

School Fees Management System 安全漏洞

School Fees Management System is a tuition management system. A security vulnerability exists in School Fees Management System v1.0, which originates from a cross-site scripting XSS vulnerability in /management/class...

Campcodes Complete Online Beauty Parlor Management System 安全漏洞

Campcodes Complete Online Beauty Parlor Management System is an online beauty parlor management system from Campcodes, Inc. A security vulnerability exists in Campcodes Complete Online Beauty Parlor Management System version 1.0, which originates from an SQL injection vulnerability in the email...

Devklans Alma Security Breach

Devklans Alma is a blogging platform. A security vulnerability exists in Devklans Alma version 2.1.10 and earlier, which stems from the presence of an access control error vulnerability...

CVE-2024-25654

Insecure permissions for log files of AVSystem Unified Management Platform UMP 23.07.0.16567LTS allow members with local access to the UMP application server to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database...

FitNesse Security Breach

FitNesse is a fully integrated standalone wiki and acceptance testing framework. A security vulnerability exists in versions prior to FitNesse 20220319, which stems from a cross-site scripting vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary scripts on a...

Discourse Security Breach

Discourse is an open source community discussion platform. The platform includes features such as communities, email and chat rooms. Discourse suffers from a security vulnerability. An attacker exploiting the vulnerability could learn about the existence of a secret category when setting a contex...

Discourse Security Breach

Discourse is an open source community discussion platform. The platform includes features such as communities, email and chat rooms. Discourse suffers from a security vulnerability that stems from the use of parameters that allow the injection of arbitrarily large amounts of data...

AbemaTV ABEMA Security Breach

AbemaTV ABEMA is a Japanese Internet television station by AbemaTV Japan. It provides live movie streaming services on computers and smartphones. A security vulnerability exists in AbemaTV ABEMA prior to version 10.65.0, which stems from an inability to restrict access and vulnerability to phishi...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

Desdev DedeCMS Security Breach

Desdev DedeCMS Dream Weaving Content Management System is a PHP-based open-source content management system CMS of China Zhuozhuo network Desdev company. The system has the functions of content publishing, content management, content editing and content retrieval. A security vulnerability exists ...

PHOENIX CONTACT CHARX SEC Security Breach

PHOENIX CONTACT CHARX SEC is a series of AC charge controllers from PHOENIX CONTACT, Germany. A security vulnerability exists in the PHOENIX CONTACT CHARX SEC, which stems from a lack of encryption of sensitive data in the MITM, resulting in an unauthenticated, remote attacker being able to...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc USA. Google Pixel suffers from a security vulnerability that stems from the presence of a missing bounds check in the TBD module, which could result in out-of-bounds reads...

Google Pixel Security Breach

Google Pixel is a smartphone from Google Inc. in the United States. Google Pixel suffers from a security vulnerability that originates in the onSkipButtonClick method of the FaceEnrollFoldPage.java file has a possible way to access the application...