EUVD-2018-20263

Malware in sbrugna...

EUVD-2021-27548

Malicious code in bioql PyPI...

GridPro Request Management For Windows Azure Pack 2.0.7905 Directory Traversal Vulnerability

GridPro Request Management for Windows Azure Pack versions 2.0.7905 and below suffer from a traversal vulnerability that can allow for arbitrary execution of Powershell scripts. PRODUCT : GridPro Request Management for Windows Azure Pack VENDOR : GridPro Software SEVERITY : Critical AFFECTED...

CVE-2021-40371

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap...

CVE-2021-40371

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap...

CVE-2021-40371

CVE-2021-40371 affects GridPro Request Management for Windows Azure Pack; vulnerable in versions before 2.0.7912. The flaw is a directory traversal in handling a scriptName JSON value in ServiceManagerTenant/GetVisibilityMap, enabling remote code execution. Patch is 2.0.7912. If exploited, it cou...

CVE-2021-40371

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap...

CVE-2021-40371: Improper Limitation of a Pathname to a Restricted Directory

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution, as demonstrated by ..\ in a scriptName JSON value to ServiceManagerTenant/GetVisibilityMap...

GridPro Request Management For Windows Azure Pack 2.0.7905 Directory Traversal

Certitude Securtiy Advisory - CSA-2021-003 PRODUCT : GridPro Request Management for Windows Azure Pack VENDOR : GridPro Software SEVERITY : Critical AFFECTED VERSION : =2.0.7905 IDENTIFIERS : CVE-2021-40371 PATCH VERSION : 2.0.7912 FOUND BY : Giulian Guran, Certitude Lab Introduction ------------...

Update Rollup 13.1 for Windows Azure Pack Web Sites version 2

None None...

KLA11655 A remote code execution vulnerability in Microsoft Azure

A remote code execution vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2019-1372 Exploitation Related products Microsoft-Windows Microsoft-Azure CVE list CVE-2019-1372 critical KB list Solution Install...

The vulnerability of the Windows Azure Pack cloud platform arises from the lack of measures taken to protect the website structure. This allows attackers to execute cross-site scripting attacks with elevated privileges.

The vulnerability of the Windows Azure Pack cloud platform exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks with elevated privileges...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

CVE-2018-8652

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

CVE-2018-8652

CVE-2018-8652 describes a cross-site scripting (XSS) vulnerability in Windows Azure Pack Rollup 13.1 where input is not properly sanitized. An authenticated attacker could exploit a crafted payload to execute script in the context of a user visiting the compromised page, potentially reading data,...

CVE-2018-8652: Improper Neutralization of Input During Web Page Generation

A Cross-site Scripting XSS vulnerability exists when Windows Azure Pack does not properly sanitize user-provided input, aka "Windows Azure Pack Cross Site Scripting Vulnerability." This affects Windows Azure Pack Rollup 13.1...

Script injection of certain symbols bypass portal UI restrictions in Update Rollup 13 for Windows Azure Pack

None None...

PT-2018-2036

Name of the Vulnerable Software and Affected Versions Windows Azure Pack versions prior to Rollup 13.1 Description A Cross-site Scripting XSS issue exists due to improper sanitization of user-provided input. This allows a remote attacker to perform cross-site scripting attacks with elevated...