-
Hello.
I would like to start implementing a plugin to detect CVE-2023-49070,This vulnerability should be relatively new and has been patched.
- https://github.com/advisories/GHSA-9rm6-p86c-42xm
…
-
Hi there.
I would like to start implementing a plugin to detect Apache Ofbiz Authentication Bypass Leads to RCE (CVE-2023-51467). This vulnerability was published in 26/Dec/2023.
Reference:
htt…
-
### What happened?
I started to use AppSec component 1 month ago and everything went well.
However, I found After starting AppSec, the /tmp folder will quickly increase with a large number of files,…
-
### What happened?
When creating Docker container for the first time, you can see some warnings/errors in logs like
```
time="2024-07-08T08:53:48Z" level=warning msg="scenario list is empty, will n…
-
```
E:\me\pocs\wy876>git clone https://github.com/wy876/POC
Cloning into 'POC'...
remote: Enumerating objects: 2572, done.
remote: Counting objects: 100% (1305/1305), done.
remote: Compressing …
kN6jq updated
5 months ago
-
**Describe the bug** 🐛
I'm running Traefik with this plugin & CrowdSec + AppSec in my docker environment.
Whenever I use `crowdSecMode: none` the system seems to work as intended. If i trigger App…
-
## Summary
https://blog.sonicwall.com/en-us/2023/12/sonicwall-discovers-critical-apache-ofbiz-zero-day-authbiz/
https://thehackernews.com/2023/12/critical-zero-day-in-apache-ofbiz-erp.html
h…
-
### What happened?
I receive github webhooks, but those get a 403 from crowdsec, even after removing the db and starting fresh without any blocklists.
### What did you expect to happen?
No 403?
#…
-
Shadowserver sees possible in-the-wild exploitation of a critical Apache OFBiz vulnerability tracked as CVE-2023-49070.
The post [Critical Apache OFBiz Vulnerability in Attacker Crosshairs](https:/…
-
A new zero-day security flaw has been discovered in the Apache OfBiz, an open-source Enterprise Resource Planning (ERP) system that could be exploited to bypass authentication protections.
The vulne…