Eclipse Jetty Canonical Repository =============================...Read More ...
Continue ReadingDecember 14, 2023
Cap'n Proto is a data interchange format and capability-based RPC system. In versions 1.0 and 1.0.1, when using the KJ HTTP library with WebSocket compression enabled, a buffer underrun can be ca ...
Continue ReadingDecember 14, 2023
Tokio binding for Tungstenite, the Lightweight stream-based WebSocket implementation.Read More ...
Continue ReadingDecember 14, 2023
The version of tomcat installed on the remote host is prior to 8.5.72-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2TOMCAT8.5-2023-006 advisory. - The fix for bug 63362 ...
Continue ReadingDecember 14, 2023
Eclipse Jetty Canonical Repository =============================...Read More ...
Continue ReadingDecember 14, 2023
Summary The runTailscalePing method of the TailscalePing class injects the hostname parameter inside a shell command, leading to a command injection and the possibility to run arbitrary commands on th ...
Continue ReadingDecember 14, 2023
home-assistant/core and home-assistant-js-websocket are vulnerable to XSS attack.The vulnerability occurs due to a loophole in Websocket authentication logic. The logic utilises a `state` parameter wh ...
Continue ReadingDecember 14, 2023
Summary The runTailscalePing method of the TailscalePing class injects the hostname parameter inside a shell command, leading to a command injection and the possibility to run arbitrary commands on th ...
Continue ReadingDecember 14, 2023
Back to Main