Lucene search
K

7411 matches found

OSSF Malicious Packages
OSSF Malicious Packages
added 2023/12/30 6:27 a.m.2 views

Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.8AI score
Exploits0References1
OSV
OSV
added 2023/12/30 6:27 a.m.16 views

MAL-2023-8774 Malicious code in unit-testing-controllers (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 206ebabfab4ea20b85ed6293c085ea8a6c0c0d85a70a1616a1963ac8556cf315 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
Exploits0References1
NVD
NVD
added 2023/12/28 4:16 p.m.11 views

CVE-2023-50267

MeterSphere is a one-stop open source continuous testing platform. Prior to 2.10.10-lts, the authenticated attackers can update resources which don't belong to him if the resource ID is known. This issue if fixed in 2.10.10-lts. There are no known workarounds...

4.3CVSS0.00338EPSS
Exploits0References1
GithubExploit
GithubExploit
added 2023/12/28 4:24 a.m.427 views

Exploit for Deserialization of Untrusted Data in Apache Kafka_Connect

This tool is intended for security testing purposes only. Do not...

8.8CVSS8.4AI score0.95302EPSS
Exploits7
Fedora
Fedora
added 2023/12/28 12:55 a.m.29 views

[SECURITY] Fedora 38 Update: python3.8-3.8.18-3.fc38

Python 3.8 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.8, see other distributions that support it, such as an older Fedora release...

5.3CVSS5.4AI score0.02507EPSS
Exploits1
OpenVAS
OpenVAS
added 2023/12/28 12:0 a.m.10 views

Fedora: Security Advisory for python3.6 (FEDORA-2023-b245e992ea)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS6.1AI score0.02507EPSS
Exploits1References2
Qualys Blog
Qualys Blog
added 2023/12/26 2:6 p.m.36 views

Yet Another Apache Struts 2 Vulnerability – CVE-2023-50164

Apache Struts is a popular open-source web application framework used to develop MVC-based web applications. The widespread adoption of the Apache Struts framework has resulted in the related applications being targeted by malicious actors over the years. The popularity of the framework results i...

7.5CVSS8.1AI score0.80819EPSS
Exploits15
Fedora
Fedora
added 2023/12/26 1:47 a.m.44 views

[SECURITY] Fedora 39 Update: python3.6-3.6.15-22.fc39

Python 3.6 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.6, see other distributions that support it, such as CentOS or RHEL with Software...

5.3CVSS5.4AI score0.02507EPSS
Exploits1
Fedora
Fedora
added 2023/12/26 1:47 a.m.22 views

[SECURITY] Fedora 39 Update: python3.8-3.8.18-3.fc39

Python 3.8 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.8, see other distributions that support it, such as an older Fedora release...

5.3CVSS5.4AI score0.02507EPSS
Exploits1
Fedora
Fedora
added 2023/12/26 1:47 a.m.21 views

[SECURITY] Fedora 39 Update: python3.9-3.9.18-3.fc39

Python 3.9 package for developers. This package exists to allow developers to test their code against an older version of Python. This is not a full Python stack and if you wish to run your applications with Python 3.9, see other distributions that support it, such as CentOS or RHEL or older Fedo...

5.3CVSS5.4AI score0.02507EPSS
Exploits1
OSV
OSV
added 2023/12/25 3:15 a.m.4 views

CVE-2023-7099

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiate...

9.8CVSS5.7AI score
Exploits0References4
NVD
NVD
added 2023/12/25 3:15 a.m.10 views

CVE-2023-7099

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiate...

9.8CVSS0.00553EPSS
Exploits0References4
Prion
Prion
added 2023/12/25 3:15 a.m.13 views

Sql injection

A vulnerability, which was classified as critical, has been found in PHPGurukul Nipah Virus Testing Management System 1.0. This issue affects some unknown processing of the file bwdates-report-result.php. The manipulation of the argument fromdate leads to sql injection. The attack may be initiate...

6.5CVSS7.7AI score0.00553EPSS
Exploits0References4Affected Software1
CVE
CVE
added 2023/12/25 2:31 a.m.41 views

CVE-2023-7099

CVE-2023-7099 affects PHPGurukul Nipah Virus Testing Management System 1.0. The issue is a SQL injection in the bwdates-report-result.php file caused by manipulating the fromdate parameter, with remote attack potential. Multiple connected sources corroborate the vulnerable component and root caus...

9.8CVSS8.3AI score0.00553EPSS
Exploits0References4Affected Software1
CNNVD
CNNVD
added 2023/12/25 12:0 a.m.4 views

Nipah virus Testing Management System SQL Injection Vulnerability

Nipah Virus Testing Management System is an online virus diagnostic platform. A SQL injection vulnerability exists in version 1.0 of the PHPGurukul Nipah Virus Testing Management System, which stems from some unknown processing in bwdates-report-result.php that leads to SQL injection via the...

9.8CVSS8AI score0.00553EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/12/24 12:0 a.m.4 views

PT-2023-32873 · Unknown · Phpgurukul Nipah Virus Testing Management System

Name of the Vulnerable Software and Affected Versions: PHPGurukul Nipah Virus Testing Management System version 1.0 Description: A critical issue has been found in the processing of the file bwdates-report-result.php. The manipulation of the fromdate argument leads to SQL injection. The attack ca...

9.8CVSS8.1AI score0.00553EPSS
Exploits0References8
Code423n4
Code423n4
added 2023/12/21 12:0 a.m.11 views

Business Logic Vulnerability in dropTopVotedPiece Function

Lines of code Vulnerability details Potential Risk: The dropTopVotedPiece function in the CultureIndex contract allows the dropperAdmin to drop the top-voted piece. While the function checks if the caller is the dropperAdmin, there is a potential business logic vulnerability. The function only...

7.3AI score
Exploits0
Code423n4
Code423n4
added 2023/12/21 12:0 a.m.10 views

Signature Verification for voteForManyWithSig Function

Lines of code Vulnerability details Potential Risk: The voteForManyWithSig function in the CultureIndex contract allows users to vote on multiple pieceIds using a provided signature. While it attempts to verify the signature, there are some potential risks associated with signature verification...

7.4AI score
Exploits0
Kitploit
Kitploit
added 2023/12/18 11:30 a.m.18 views

MacMaster - MAC Address Changer

MacMaster is a versatile command line tool designed to change the MAC address of network interfaces on your system. It provides a simple yet powerful solution for network anonymity and testing. Features Custom MAC Address: Set a specific MAC address to your network interface. Random MAC Address:...

7.3AI score
Exploits0References1
The Hacker News
The Hacker News
added 2023/12/15 7:23 a.m.16 views

Google's New Tracking Protection in Chrome Blocks Third-Party Cookies

Google on Thursday announced that it will start testing a new feature called "Tracking Protection" starting January 4, 2024, to 1% of Chrome users as part of its efforts to deprecate third-party cookies in the web browser. The setting is designed to limit "cross-site tracking by restricting websi...

6.7AI score
Exploits0
Rows per page
Query Builder