MAL-2024-10878 Malicious code in @ba-ui-toolkit/ba-graphics (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis cecc8f033039168aed0576db76b1cae3235b3ec9b6634c22a38c1696a4a80fc1 The OpenSSF Package Analysis project identified '@ba-ui-toolkit/ba-graphics' @ 7.1.11 npm as malicious. It is considered malicious because: - Th...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 is a serious vulnerability in the Web UI function...

PT-2024-35692 · Sentry · Sentry

Name of the Vulnerable Software and Affected Versions: Sentry version 24.11.0 Description: Sentry is an error tracking and performance monitoring platform. A specific error message generated by the Sentry platform could include a plaintext Client ID and Client Secret for an application integratio...

GHSA-49CC-XRJF-9QF7 SFTPGo allows administrators to restrict command execution from the EventManager

Impact One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in all software similar to SFTPGo and is generally unrestricted. However, any SFTPGo administrator with permission to run a...

SFTPGo allows administrators to restrict command execution from the EventManager

Impact One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in all software similar to SFTPGo and is generally unrestricted. However, any SFTPGo administrator with permission to run a...

CVE-2024-52309

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

CVE-2024-52309 SFTPGo allows administrators to restrict command execution from the EventManager

SFTPGo is a full-featured and highly configurable SFTP, HTTP/S, FTP/S and WebDAV server - S3, Google Cloud Storage, Azure Blob. One powerful feature of SFTPGo is the ability to have the EventManager execute scripts or run applications in response to certain events. This feature is very common in...

Progress Telerik UI for WinForms < 2024.4.1113 Unsafe Deserialization

The version of Progress Telerik UI for WinForms installed on the remote host is prior to 2024.4.1113. It is, therefore, affected by the following vulnerability: - In Progress Telerik UI for WinForms versions prior to 2024 Q4 2024.4.1113, a code execution attack is possible through an insecure...

CVE-2024-45194

CVE-2024-45194 affects Zimbra Collaboration (ZCS) 9.0–10.0, where the Webmail Modern UI stores XSS payloads injected by an admin via the Administration Panel. The vulnerability results in stored XSS executed in the victim’s browser when interacting with web interface elements. According to PT-202...

Telerik UI for WPF < 2024.4.1111 Unsafe Deserialization

The version of Progress Telerik UI for WPF installed on the remote Windows host is prior to 2024 Q4 2024.4.1111. It is, therefore, affected by the following: - In Progress Telerik UI for WPF versions prior to 2024 Q4 2024.4.1111, a code execution attack is possible through an insecure...

Searching Opencast may cause a denial of service

Impact First noticed in Opencast 13 and 14, Opencast's Elasticsearch integration may generate syntactically invalid Elasticsearch queries in relation to previously acceptable search queries. From Opencast version 11.4 and newer, Elasticsearch queries are retried a configurable number of times in...

Malicious code in ssc-ui-react-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9775050abb607b2118679f39c8bbf0f5ed85054e67ed46e97049ad4316af8c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10867 Malicious code in ssc-ui-react-next (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9775050abb607b2118679f39c8bbf0f5ed85054e67ed46e97049ad4316af8c15 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ssc-ui-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b4692057b25c7aae827dac87ce67a36581c27a8efdadf6083a3bdc9787be42d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10859 Malicious code in shopee-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b383eb61614247f3d87c14552e274da7f57ca4cd4061c90bececbef66f44ea3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b383eb61614247f3d87c14552e274da7f57ca4cd4061c90bececbef66f44ea3e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10858 Malicious code in shopee-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993bcd6e55a784b07d25bde8752b92602b018036f8ba3de7fd78e85addad1634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in shopee-form-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 993bcd6e55a784b07d25bde8752b92602b018036f8ba3de7fd78e85addad1634 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in filter-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c494b140465be2de8cadcbe5fcaf5f82d7980ca863eeb3cba9e6d9e0e762ebc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10853 Malicious code in filter-engine-ui (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c494b140465be2de8cadcbe5fcaf5f82d7980ca863eeb3cba9e6d9e0e762ebc9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...