Malicious code in streamer-market-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c6f1e291b3a5d435c62a8477ffbbb7e62e15250973dd23955f3bea0baff557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-6323 Malicious code in streamer-market-dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e6c6f1e291b3a5d435c62a8477ffbbb7e62e15250973dd23955f3bea0baff557 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

XML Entity Expansion

xlsx-streamer is vulnerable to XML entity expansion which is also known as XML Bombs. Lack of necessary settings to prevent XML Entity Expansion issues allows an attacker to pass malicious XML object via XML parser...

CVE-2022-23640: Improper Restriction of XML External Entity Reference

Excel-Streaming-Reader is an easy-to-use implementation of a streaming Excel reader using Apache POI. Prior to xlsx-streamer 2.1.0, the XML parser that was used did apply all the necessary settings to prevent XML Entity Expansion issues. Upgrade to version 2.1.0 to receive a patch. There is no...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

Directory traversal

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

The CVE-2021-42712 issue affects Splashtop Streamer up to version 3.4.8.3, where the application creates temporary files in a directory with insecure permissions. This root cause can lead to unauthorized access to temporary data and potential impact to confidentiality, integrity, and availability...

PT-2022-11667

Name of the Vulnerable Software and Affected Versions Splashtop Streamer versions 3.4.8.3 and earlier Description The issue is related to the creation of a temporary file in a directory with insecure permissions. This could potentially lead to security issues, but specific details about...

Splashtop Streamer 安全漏洞

Splashtop Streamer is a remote access and remote support software from the American company Splashtop. It is installed on the computer on the controlled end. A security vulnerability exists in Splashtop Streamer that stems from Splashtop Streamer version 3.4.8.3 creating temporary files in...

CVE-2021-42712: Exposure of Resource to Wrong Sphere

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2020-7881

The vulnerability function is enabled when the streamer service related to the AfreecaTV communicated through web socket using 21201 port. A stack-based buffer overflow leading to remote code execution was discovered in strcpy operate by "FanTicket" field. It is because of stored data without...

Twitch hacked- Source code and Streamer payment figures leaked

By Waqas Twitch has undergone a massive hack resulting in leaking the source code for its unreleased streaming service, creator payout details, and other sensitive information. This is a post from HackRead.com Read the original post: Twitch hacked- Source code and Streamer payment figures leaked...

Cross-Site Request Forgery (CSRF) in azuracast/azuracast

✍️ Description Attacker able to enable any Streamer/DJ account section with CSRF attack. It does not matter at all that your application run in localhost or elsewhere, just it is enough to run on a browser and another low privilege user or attackers know the IP address or hostname of your...

Command Execution Vulnerability in Splashtop Streamer

Splashtop Streamer is a remote control system. Splashtop Streamer suffers from a command execution vulnerability. An attacker can exploit this vulnerability to gain server privileges...

pygments:pygments_fuzzer: Uncaught exception in popstate_tag_callback

Project: https://github.com/pygments/pygments.git Detailed Report: https://oss-fuzz.com/testcase?key=5950214416498688 Project: pygments Fuzzing Engine: libFuzzer Fuzz Target: pygmentsfuzzer Job Type: libfuzzerasanpygments Platform Id: linux Crash Type: Uncaught exception Crash Address: Crash Stat...

serenity:FuzzBMPLoader: Heap-buffer-overflow in Gfx::Streamer::read_u8

Project: https://github.com/SerenityOS/serenity.git Detailed Report: https://oss-fuzz.com/testcase?key=6281654599155712 Project: serenity Fuzzing Engine: afl Fuzz Target: FuzzBMPLoader Job Type: aflasanserenity Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x6110000002...

The vulnerability of the configd Streamer Log component in the JunOS Evolved operating system, related to insufficient protection of registration data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the configd component in the Streamer Log system of the JunOS Evolved operating system is related to insufficient protection for registration data. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information...