CVE-2026-44364: Cross-Site Request Forgery (CSRF)

MISP modules are autonomous modules that can be used to extend MISP for new services. In 3.0.7 and earlier, a Cross-Site Request Forgery vulnerability in the MISP Modules website allowed an attacker to cause an authenticated user to submit unintended requests to the home endpoint. The vulnerabili...

Astra Linux – Vulnerability in Zabbix

The WebDriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. However, this function can fail for various reasons without an error description. As a result, wd-error will be NULL, and attempting to access it will cause a crash...

EUVD-2024-39883

Malicious code in bioql PyPI...

The vulnerability of the webdriver_session_query function in the universal monitoring system Zabbix allows a attacker to trigger a Denial-of-Service Attack (DoS).

The vulnerability of the webdriversessionquery function in the universal monitoring system Zabbix is related to the assignment of a null pointer. Exploiting this vulnerability can allow an attacker to trigger a Denial-of-Service Attack...

SUSE CVE-2024-42329

The webdriver for the Browser object expects an error object to be initialized when the webdriversessionquery function fails. But this function can fail for various reasons without an error description and then the wd-error will be NULL and trying to read from it will result in a crash...