6117 matches found
CVE-2023-40356 PingOne MFA Integration Kit MFA bypass
PingOne MFA Integration Kit contains a vulnerability related to the Prompt Users to Set Up MFA configuration. Under certain conditions, this configuration could allow for a new MFA device to be paired with a target user account without requiring second-factor authentication from the target’s...
CVE-2023-40702
CVE-2023-40702 affects PingOne MFA Integration Kit (Ping Identity). The vulnerability arises from misconfiguration of the skipMFA action, allowing a bypass of second-factor authentication so a threat actor with knowledge of a target user’s first-factor credentials can authenticate as that user. R...
PYSEC-2024-55
Malicious package. Exfiltrated secrets to a target server...
PYSEC-2024-55
Malicious package. Exfiltrated secrets to a target server...
PT-2024-40901 · Pypi · Cipherbcrypt
Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned. Description: The issue involves a malicious package that exfiltrates secrets to a target server. No further details are provided about the nature of the issue or its potential impact. Recommendation...
PT-2024-37416 · Citrix · Citrix Provisioning
Name of the Vulnerable Software and Affected Versions: Citrix Provisioning affected versions not specified Description: A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning. Recommendations: At the moment, there is no information about a newer version...
CVE-2023-50381
Three os command injection vulnerabilities exist in the boa formWsc functionality of Realtek rtl819x Jungle SDK v3.4.11. A specially crafted series of HTTP requests can lead to arbitrary command execution. An attacker can send a series of HTTP requests to trigger these vulnerabilities.This comman...
git: additional local RCE
A flaw was found in Git in a full copy of a Git repository. A prerequisite for this vulnerability is for an unauthenticated attacker to place a specialized repository on their target's local system. If the victim were to clone this repository, it could result in arbitrary code execution...
Exploit for Race Condition in Openbsd Openssh
cve-2024-6387-poc a signal handler race condition in OpenSSH...
Exploit for Race Condition in Openbsd Openssh
cve-2024-6387-poc a signal handler race condition in OpenSSH...
Exploit for Improper Restriction of XML External Entity Reference in Adobe Commerce
CVE-2024-34102 Usage bash python3 CVE-2024-34102.py...
PVS Configuration Wizard does not display dialogues to configure DHCP or PXE services
Citrix Provisioning Configuration wizard does not display dialogues to configure DHCP servers and PXE Services. The configuration wizard begins by directly showing the Farm Configuration dialogue. If DHCP servers and PXE Services are not configured, PVS target devices which rely on those services...
Malicious code in common-dep-target (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-2003 Malicious code in common-dep-target (npm)
--- -= Per source details. Do not edit below this line.=-...
git: additional local RCE
A flaw was found in Git in a full copy of a Git repository. A prerequisite for this vulnerability is for an unauthenticated attacker to place a specialized repository on their target's local system. If the victim were to clone this repository, it could result in arbitrary code execution...
git: symlink bypass
A vulnerability was found in Git. This flaw allows an unauthenticated attacker to place a repository on their target's local system that contains symlinks. During the cloning process, Git could be tricked into creating hardlinked arbitrary files into their repository's objects/ directory, impacti...
dnsmasq: default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232
A flaw was found in Dnsmasq. The default maximum EDNS.0 UDP packet size was set to 4096 but should be 1232 because of DNS Flag Day 2020...
Exploit for SQL Injection in Opencart
CVE-2024-21514 PoC and Bulk Scanner !Bannerscreens/screen...
CVE-2024-21518
This affects versions of the package opencart/opencart from 4.0.0.0. A Zip Slip issue was identified via the marketplace installer due to improper sanitization of the target path, allowing files within a malicious archive to traverse the filesystem and be extracted to arbitrary locations. An...