EUVD-2024-3178

Malicious code in bioql PyPI...

Compositing Engine machine stuck with error "Lifetime validation failed. The token is expired"

Offload compositing getting stuck with error "Lifetime validation failed. The token is expired" and the compositing engine machine gets deleted after 20 mins. ELM fails with error: The compositing engine failed to initialize after "00:20:00". Screenshot:...

Cross site request forgery (csrf)

diagcommand.php in pfSense 2.4.4-p3 allows CSRF via the txtCommand or txtRecallBuffer field, as demonstrated by executing OS commands. This occurs because csrfcallback produces a "CSRF token expired" error and a Try Again button when a CSRF token is missing...