Quart is an async Python web microframework. Using Quart you can, * render and serve HTML templates, * write (RESTful) JSON APIs, * serve WebSockets, * stream request and response data, * d ...
Continue ReadingNovember 05, 2024
Summary OSS Scan Vulnerability - Apache Tomcat 8.5.70 & Apache Tomcat 8.5.75 with multiple CVEs and affecting Sterling Control Center v6.2.1. Vulnerability Details CVEID:CVE-2021-42340 DESCRIP ...
Continue ReadingNovember 05, 2024
gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebS ...
Continue ReadingNovember 04, 2024
gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebS ...
Continue ReadingNovember 04, 2024
gaizhenbiao/chuanhuchatgpt project, version <=20240802 is vulnerable to stored Cross-Site Scripting (XSS) in WebSocket session transmission. An attacker can inject malicious content into a WebS ...
Continue ReadingNovember 04, 2024
The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-20 ...
Continue ReadingNovember 04, 2024
The mod_h2 Apache httpd module implements the HTTP2 protocol (h2+h2c) on top of libnghttp2 for httpd 2.4 servers. Security Fix(es): mod_http2: DoS by null pointer in websocket over HTTP/2 (CVE-20 ...
Continue ReadingNovember 04, 2024
Impact A community member disclosed an issue where verification signatures for requests sent to Reverb's Pusher-compatible API were not being verified. This API is used in scenarios such as broad ...
Continue ReadingNovember 01, 2024
Back to Main