6771 matches found
MAL-2023-215 Malicious code in criteo-static-variables-datasource (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65ae832c9a084b0c39c57bf3bb68ff1877e5f1370b9c29e564368e0a2d224d9b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
vertx-web: StaticHandler disclosure of classpath resources on Windows when mounted on a wildcard route
A flaw was found in Vert.X Web. When running the application that serves files using StaticHandler on Windows Operating Systems and Windows File Systems, if the mount point is a wildcard , an attacker can exfiltrate any class path resource...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal due to improper input sanitization passed via the validPath function of server.js. PoC 1 Make sure you have a public/ directory with files in it. 2 Make sure you have a public-isprivate directory with files in it. 3...
CXF: directory listing / code exfiltration
A vulnerability was found in Apache CXF that could allow an attacker to perform a remote directory listing or code exfiltration. This issue only applies when the CXFServlet is configured with both the static-resources-list and redirect-query-check attributes. These attributes are not supposed to ...
Amazon Linux 2023 : libcap, libcap-devel, libcap-static (ALAS2023-2023-195)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2023-195 advisory. libcap is vulnerable to a denial of service caused by the error handling in wrappthreadcreate function, which will cause memory to be leaked in the case of an error. CVE-2023-2602 Tenable has extracted...
CVE-2023-33283
Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key...
CVE-2023-33283
Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key...
Code injection
Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key...
CVE-2023-33283
Marval MSM through 14.19.0.12476 uses a static encryption key for secrets. An attacker that gains access to encrypted secrets can decrypt them by using this key...
CVE-2023-33283
CVE-2023-33283 affects Marval MSM up to version 14.19.0.12476, where a static encryption key is used to protect secrets. The underlying issue is the use of a hard-coded/static key for encryption-at-rest, enabling an attacker who gains access to encrypted secrets to decrypt them. The available sou...
PT-2023-24268 · Marval · Marval Msm
Name of the Vulnerable Software and Affected Versions: Marval MSM versions 14.19.0.12476 and earlier Description: The issue concerns the use of a static encryption key for secrets in Marval MSM. An attacker who gains access to encrypted secrets can decrypt them by using this key. Recommendations:...
Linux / Unix Network Config Enumeration
Enumerates Linux / Unix network configuration details. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid176476; scriptversion"1.1"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/07/29"; scriptnameenglish:"Linux / Unix Network Config Enumeration";...
CVE-2021-27825
A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...
CVE-2021-27825
A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...
Directory traversal
A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...
CVE-2021-27825
A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...
CVE-2021-27825
A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-static/ URL...
CVE-2021-27825
CVE-2021-27825 applies to Mercury MAC1200R devices, describing a directory traversal vulnerability that allows attackers to read arbitrary files via the web-static/ URL. Multiple connected sources (PacketStorm exploit info and Exploit-DB entry) corroborate a path traversal flaw affecting Mercury ...
PT-2023-12123 · Mercury · Mercury Mac1200R
Name of the Vulnerable Software and Affected Versions: Mercury MAC1200R devices affected versions not specified Description: A directory traversal issue allows attackers to read arbitrary files via a web-static/ URL. This affects Mercury MAC1200R devices, enabling attackers to access files they...
[SECURITY] Fedora 37 Update: python-starlette-0.20.4-3.fc37
Starlette is a lightweight ASGI framework/toolkit, which is ideal for building async web services in Python. It is production-ready, and gives you the following: =EF=BF=BD=EF=BF=BD=EF=BF=BD A lightweight, low-complexity HTTP web framewor k. =EF=BF=BD=EF=BF=BD=EF=BF=BD WebSocket support...