Ausnahme gefangen: SSL certificate problem: certificate is not yet valid 📌 CVE-2022-31051 | semantic-release up to 19.0.2 on npm Repository URL information disclosure (GHSA-x2pg-mjhr-2m5x)
Team IT Security Nachrichtenportal Logo

🏠 Team IT Security News

TSecurity.de ist eine Online-Plattform, die sich auf die Bereitstellung von Informationen,alle 15 Minuten neuste Nachrichten, Bildungsressourcen und Dienstleistungen rund um das Thema IT-Sicherheit spezialisiert hat.
Ob es sich um aktuelle Nachrichten, Fachartikel, Blogbeiträge, Webinare, Tutorials, oder Tipps & Tricks handelt, TSecurity.de bietet seinen Nutzern einen umfassenden Überblick über die wichtigsten Aspekte der IT-Sicherheit in einer sich ständig verändernden digitalen Welt.

16.12.2023 - TIP: Wer den Cookie Consent Banner akzeptiert, kann z.B. von Englisch nach Deutsch übersetzen, erst Englisch auswählen dann wieder Deutsch!

Google Android Playstore Download Button für Team IT Security
RSS Feed Symbol für Team IT Security 800+ IT News als RSS Feed abonnieren



📚 CVE-2022-31051 | semantic-release up to 19.0.2 on npm Repository URL information disclosure (GHSA-x2pg-mjhr-2m5x)


💡 Newskategorie: Sicherheitslücken
🔗 Quelle: vuldb.com

A vulnerability classified as problematic was found in semantic-release up to 19.0.2. This vulnerability affects unknown code of the component Repository URL Handler. The manipulation leads to information disclosure. This vulnerability was named CVE-2022-31051. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component. ...



Sharing is caring on Social Media

🔗 Reddit
🔗 Telegram
🔗 LinkedIn
🔗 Xing
🔗 Twitter
🔗 Whatsapp
🔗 Facebook
🔗 Flipboard

Join the Team IT Security Community

🔗 "IT Sicherheit" Reddit-Gruppe
🔗 "IT Sicherheit" Telegramm-Seite

📌 On trusting NPM: Early in the month, Lance R. Vick noticed that the maintainer of the NPM foreach package let their personal email domain expire, so they bought it and now “controls foreach on NPM and the 36,826 projects that depend on it”.


📈 37.29 Punkte

📌 CVE-2024-22402 | NextCloud Guests up to 2.4.0/2.5.0/3.0.0 Request URL url encoding (GHSA-v3qw-7vgv-2fxj)


📈 27.99 Punkte

📌 CVE-2023-43799 | Altair up to 5.2.4 URL information disclosure (GHSA-9m5v-vrf6-fmvm)


📈 27.12 Punkte

📌 Gitls - Enumerate Git Repository URL From List Of URL / User / Org


📈 27.12 Punkte

📌 GiveMeSecrets - Use Regular Expressions To Get Sensitive Information From A Given Repository (GitHub, Pip Or Npm)


📈 26.35 Punkte

📌 Medium CVE-2020-7614: Npm-programmatic project Npm-programmatic


📈 26.04 Punkte

📌 Semantic sm short url script v2.0 Sql injection Vulnerability


📈 25.91 Punkte

📌 KDE 4.10.0/4.10.1/4.10.2/4.10.3 kioslave/http/http.cpp m_request.url.url information disclosure


📈 24.54 Punkte

📌 CVE-2019-10769 | safer-eval on npm Sandbox input validation (GHSA-v63x-xc9j-hhvq)


📈 23.48 Punkte

📌 gitlabhook up to 0.0.17 on npm Repository Name command injection


📈 22.6 Punkte

📌 Attackers Flood NPM Repository with Over 15,000 Spam Packages Containing Phishing Links


📈 22.6 Punkte

📌 Malicious npm package ‘fallguys’ removed from the official repository


📈 22.6 Punkte

📌 Malicious npm library removed from the repository due to backdoor capabilities


📈 22.6 Punkte

📌 Software Composition Analysis Mitigates Systemic Risk in the Popular NPM Repository


📈 22.6 Punkte

📌 Large-scale cryptomining campaign is targeting the NPM JavaScript package repository


📈 22.6 Punkte

📌 CVE-2020-8124 | url-parse up to 1.4.4 on npm Security Check input validation


📈 22.08 Punkte

📌 CVE-2023-46498 | EverShop NPM up to 1.0.0-rc.7 route.json information disclosure


📈 21.21 Punkte

📌 CVE-2023-42282 | NPM IP Package up to 1.1.8 isPublic information disclosure


📈 21.21 Punkte

📌 Fudan University Researchers Introduce SpeechGPT-Gen: A 8B-Parameter Speech Large Language Model (SLLM) Efficient in Semantic and Perceptual Information Modeling


📈 21.18 Punkte

📌 simple-npm-registry on Node.js URL directory traversal


📈 20.9 Punkte

📌 Reset Local Repository Branch to be Just Like Remote Repository HEAD: A Step-by-Step Guide


📈 20.35 Punkte

📌 Serve 6.5.3 on npm Ignore information disclosure


📈 20.03 Punkte

📌 Harp Module up to 0.29.0 on npm Server Rule Directory information disclosure


📈 20.03 Punkte

📌 Actions http-client up to 1.0.7 on npm Authorization Header information disclosure


📈 20.03 Punkte

📌 CVE-2021-36395 | Moodle File Repository URL Parser resource consumption


📈 19.83 Punkte

📌 IBM InfoSphere Information Server URL information disclosure


📈 19.81 Punkte

📌 IBM InfoSphere Information Server URL Information Disclosure


📈 19.81 Punkte

📌 CVE-2023-22468 | Discourse up to 2.8.12/3.0.0.beta15 URL cross site scripting (GHSA-8mr2-xf8r-wr8m)


📈 19.52 Punkte

📌 CVE-2023-22722 | GLPI up to 10.0.5 URL cross site scripting (GHSA-352j-wr38-493c)


📈 19.52 Punkte

📌 CVE-2023-25167 | Discourse Git URL redos (GHSA-4w55-w26q-r35w)


📈 19.52 Punkte

📌 CVE-2023-24811 | Misskey up to 13.3.1 URL Preview cross site scripting (GHSA-vc39-c453-67g3)


📈 19.52 Punkte

📌 CVE-2023-45813 | Torbot up to 3.x URL Validation torbot.modules.validators.validate_link redos (GHSA-72qw-p7hh-m3ff)


📈 19.52 Punkte

📌 CVE-2024-26481 | Kirby CMS 4.1.0 URL Parameter cross site scripting (GHSA-57f2-8p89-66x6)


📈 19.52 Punkte

📌 CVE-2024-27291 | jhpyle docassemble up to 1.4.96 URL redirect (GHSA-7wxf-r2qv-9xwr)


📈 19.52 Punkte

📌 CVE-2023-46950 | Contribsys Sidekiq 6.5.8 URL filter cross site scripting (GHSA-cmh9-rx85-xj38)


📈 19.52 Punkte











matomo

Kontakt

24/7 kontakt@tsecurity.de

Weitere Informationen

Google Android Playstore Download Button für Team IT Security
🔗 Impressum
🔗 Datenschutz
Paypal Spenden für Projekt

Social Media

🔗 Facebook
🔗 Reddit
🔗 Team IT Security als Elektron App
🔗 © 2015-2023 Team IT Security Nachrichtenportal über Cybersecurity
🔗 CMS "myDraft" a PHP Portal Software