CVE-2023-39325 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

CVE-2023-39325 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1. An upgraded version of the package is available that resolves this issue...

BGP Routing and RHI Functionality in NetScaler

This article provides information about BGP routing in NetScaler and some of the sample BGP configurations. It gives a brief overview of the RHI functionality. Route Health Injection RHI The primary purpose of dynamic routing in NetScaler is to communicate the state or health of VIPs to the...

Malicious code in down_load_ebook_vip_by_jackie_d_voucl (npm)

--- -= Per source details. Do not edit below this line.=-...

After on-prem NetScaler Console (formerly ADM) upgraded to 14.1-21.60 VIP Licenses reduced warning

Duringupgrade from on-prem NetScaler Console formerly ADM version 13.0/13.1 to build 14.1-21.60 below warning is showed: Warning Text: Default NetScaler Console VIP Licenses will be reduced to 2 after the upgrade After upgrade from on-prem NetScaler Console formerly ADM version 13.0/13.1 to build...

vip-ag.com Cross Site Scripting vulnerability OBB-3915081

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New Wave of JSOutProx Malware Targeting Financial Firms in APAC and MENA

Financial organizations in the Asia-Pacific APAC and Middle East and North Africa MENA are being targeted by a new version of an "evolving threat" called JSOutProx. "JSOutProx is a sophisticated attack framework utilizing both JavaScript and .NET," Resecurity said in a technical report published...

AZL-38623 CVE-2023-45288 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

An attacker may cause an HTTP/2 endpoint to read arbitrary amounts of header data by sending an excessive number of CONTINUATION frames. Maintaining HPACK state requires parsing and processing all HEADERS and CONTINUATION frames on a connection. When a request's headers exceed MaxHeaderBytes, no...

CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12

CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12. A patched version of the package is available...

AZL-35844 CVE-2024-28180 affecting package kube-vip-cloud-provider for versions less than 0.0.2-19

Package jose aims to provide an implementation of the Javascript Object Signing and Encryption set of standards. An attacker could send a JWE containing compressed data that used large amounts of memory and CPU when decompressed by Decrypt or DecryptMulti. Those functions now return an error if t...

AZL-35661 CVE-2024-24786 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

The protojson.Unmarshal function can enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set...

vip-ziedi.lv Improper Access Control vulnerability OBB-3859111

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vip-class.ru Cross Site Scripting vulnerability OBB-3858520

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-44716 affecting package kube-vip-cloud-provider for versions less than 0.0.2-16

CVE-2021-44716 affecting package kube-vip-cloud-provider for versions less than 0.0.2-16. A patched version of the package is available...

vipautosd.com Cross Site Scripting vulnerability OBB-3851065

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-21698 affecting package kube-vip-cloud-provider for versions less than 0.0.2-14

CVE-2022-21698 affecting package kube-vip-cloud-provider for versions less than 0.0.2-14. A patched version of the package is available...

vip-sun.de Improper Access Control vulnerability OBB-3777657

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

vip.chatc.vip Cross Site Scripting vulnerability OBB-3771804

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12

CVE-2023-44487 affecting package kube-vip-cloud-provider for versions less than 0.0.2-12. A patched version of the package is available...

Cross Site Scripting (XSS) Identifies NetScaler Redirect VIP as Vulnerable

NetScaler Virtual IP VIP configured for redirect is being labeled as vulnerable by Security Scanners for Cross Site Scripting XSS...

AZL-34892 CVE-2023-39325 affecting package kube-vip-cloud-provider for versions less than 0.0.10-1

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...