-
Please provide an email to send security disclosure to. Will be publicly shared on 90 days as is standard with CVEs with no communication.
-
The details have been sent to jc21's email.
-
# Problem/Motivation
Ive got strange network traffic inside my company after installing NPM.
Its supposely going to the TOR network.
When i stop NPM the alarms from my monitoring Software stop.…
-
# RCE vulnerability in Subrion CMS 4.2.1
Affected version
- Subrion CMS 4.2.1
Source code: https://subrion.org/download/
Exploiting vulnerabilities:
1、login address:
~~~
http://127.…
-
## Summary
3 new RCEs in Apache Kafka UI
### Basic example
https://github.blog/security/vulnerability-research/3-ways-to-get-remote-code-execution-in-kafka-ui/
### Motivation
RCE is k…
-
Hi Team,
I would like to develop a plugin for Apache DolphinScheduler weak credentials Tester. for , Apache DolphinScheduler an open-source distributed workflow scheduler designed to manage complex d…
-
### Description
## Version of the vulnerability
-
Hi Team,
I would like to implement a plugin to detect CVE-2024-27348 which is related to Apache HugeGraph.
Details:
https://nvd.nist.gov/vuln/detail/CVE-2024-27348
https://github.com/advisories/…
-
> [!CAUTION]
> U need to make a separate environment , i mean a sandbox ..
-
PAN-OS Firewall is a popular firewall with more than 40K instances on the internet.
the exploit is easy to trigger it is a simple post request.
due to active exploitation, I think it is better to le…