The U.S. Justice Department (DoJ) on Friday announced the seizure of online infrastructure that was used to sell a remote access trojan (RAT) called Warzone RAT.
The domains – www.warzone[.]ws and three others – were “used to sell comput…
I was going through this link https://medium.com/@renwa/bypass-samesite-cookies-default-to-lax-and-get-csrf-343ba09b9f2b to understand CSRF using samesite. Does that mean that the LAX+POST issue has been resolved by Chrome, which means tha…
A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginId leads to path traversal.
This vulnerability is uniquely identified as CVE-2024-1433. It is possible to initiate the attack remotely. There is no exploit available.
This requires write access to user’s home or the installation of third party global themes.
It is recommended to apply a patch to fix this issue.
A vulnerability, which was classified as problematic, has been found in dbartholomae lambda-middleware frameguard up to 1.0.4. Affected by this issue is some unknown functionality of the file packages/json-deserializer/src/JsonDeserializer.ts of the co…
A vulnerability classified as problematic was found in diffoscope up to 255. Affected by this vulnerability is an unknown functionality of the component GPG File Handler. The manipulation leads to path traversal.
This vulnerability is known as CVE-202…
A vulnerability classified as problematic has been found in Glewlwyd SSO Server up to 2.7.6. Affected is the function redirect_uri. The manipulation leads to open redirect.
This vulnerability is traded as CVE-2024-25715. The attack needs to be initiat…
A vulnerability was found in QAnything up to 1.1.x. It has been rated as critical. This issue affects some unknown processing of the file qanything_kernel/connector/database/mysql/mysql_client.py. The manipulation leads to sql injection.
The identific…
A vulnerability was found in Ghost up to 5.76.0. It has been declared as problematic. This vulnerability affects unknown code of the component SVG Profile Picture Handler. The manipulation leads to cross site scripting.
This vulnerability was named CV…
A vulnerability was found in http-swagger up to 1.2.5. It has been classified as problematic. This affects an unknown part of the component HTTP PUT Method Handler. The manipulation leads to cross site scripting.
This vulnerability is uniquely identif…
A vulnerability was found in Samly up to 1.3.x on Elixir and classified as problematic. Affected by this issue is the function Samly.State.Store.get_assertion. The manipulation leads to session expiration.
This vulnerability is handled as CVE-2024-257…
