Atlassian Confluence 8.0 < 8.5.4 (CONFSERVER-93833) (Direct Check)

Binary data confluencecve202322527.nbin...

LODEINFO Fileless Malware Evolves with Anti-Analysis and Remote Code Tricks

Cybersecurity researchers have uncovered an updated version of a backdoor called LODEINFO that's distributed via spear-phishing attacks. The findings come from Japanese company ITOCHU Cyber & Intelligence, which said the malware "has been updated with new features, as well as changes to the...

[SECURITY] Fedora 39 Update: python-jinja2-3.1.3-1.fc39

Jinja2 is a template engine written in pure Python. It provides a Django inspired non-XML syntax but supports inline expressions and an optional sandboxed environment. If you have any exposure to other text-based template languages, such as Smarty or Django, you should feel right at home with...

Fedora: Security Advisory (FEDORA-2024-6026572e7d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GitHub: Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection and audit-forward

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring audit log forwarding. This vulnerability affected all versions of GitH...

GitHub: Management Console Editor Privilege Escalation to Root SSH Access in GitHub Enterprise Server via nomad template injection

A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring SMTP options. This vulnerability affected all versions of GitHub...

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 CVE-2023-22527 - Server-side Template Inje...

RHCOS 4 : OpenShift Container Platform 4.14.2 (RHSA-2023:6840)

The remote Red Hat Enterprise Linux CoreOS 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:6840 advisory. - golang: net/http: insufficient sanitization of Host header CVE-2023-29406 - golang: crypto/tls: slow verification of certificate...

RHCOS 4 / 9 : OpenShift Container Platform 4.14.0 (RHSA-2023:5009)

The remote Red Hat Enterprise Linux CoreOS 4 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:5009 advisory. - golang: net/http: handle server errors after sending GOAWAY CVE-2022-27664 - kube-apiserver: Bypassing policies imposed by the...

RHCOS 4 / 9 : OpenShift Container Platform 4.13.3 (RHSA-2023:3536)

The remote Red Hat Enterprise Linux CoreOS 4 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3536 advisory. - golang: net/http, net/textproto: denial of service from excessive memory allocation CVE-2023-24534 - golang: net/http,...

Atlassian Confluence Data Center and Server Template Injection Vulnerability

Atlassian Confluence Data Center and Server contain an unauthenticated OGNL template injection vulnerability that can lead to remote code execution...

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 This repository presents a proof-of-concept of...

Exploit for Injection in Atlassian Confluence_Data_Center

CVE-2023-22527 !...

Malicious code in cagov-template-development (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 618cc8a0ff5658fdddb6296278644b3e69634530941e19fd1b9985c757df7888 The OpenSSF Package Analysis project identified 'cagov-template-development' @ 9.2.1 npm as malicious. It is considered malicious because: - The...

Malicious code in california-state-web-template-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a0432190eb409c84a7c6bf3c06b34d9b7c4571be93f31b3635a925f4a4099e The OpenSSF Package Analysis project identified 'california-state-web-template-react' @ 9.2.1 npm as malicious. It is considered malicious...

MAL-2024-151 Malicious code in california-state-web-template-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 91a0432190eb409c84a7c6bf3c06b34d9b7c4571be93f31b3635a925f4a4099e The OpenSSF Package Analysis project identified 'california-state-web-template-react' @ 9.2.1 npm as malicious. It is considered malicious...

Malicious code in cagov-template-v6 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3e81e15d59085cf12a3a46a1dc253df8e81c9ff8756d76f8ab9db14b82caab8 The OpenSSF Package Analysis project identified 'cagov-template-v6' @ 9.1.1 npm as malicious. It is considered malicious because: - The package...

Malicious code in cagov-template-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-138 Malicious code in cagov-template-v5 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 041aa485b2de4fd90575bf3656a8dee0ce0c0a4319b0919b62d35f6b98b090c6 The OpenSSF Package Analysis project identified 'cagov-template-v5' @ 19.2.0 npm as malicious. It is considered malicious because: - The package...

CVE-2024-0705

creationtimestamp| type| source ---|---|--- 2024-01-19 11:26:27+00:00| seen| https://t.me/ctinow/170149 2024-01-22 18:27:42+00:00| published-proof-of-concept| https://t.me/codeb0ss/1362 2024-01-26 17:35:17+00:00| seen| https://t.me/arpsyndicate/3015 2024-02-12 18:16:51+00:00| seen|...