CVE-2022-23434

The CVE-2022-23434 issue affects Samsung Bixby Vision prior to versions 3.7.60.8 (Android S/12) and 3.7.50.6 (Android R/11 and older). The root cause is improper use of PendingIntent, allowing an attacker to hijack and modify the intent to trigger a privileged action. The available sources descri...

CVE-2021-44111

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

CVE-2021-44111

CVE-2021-44111 is a directory traversal vulnerability in S-Cart 6.7 allowing path traversal via the download function in sc-admin/backup. Public reports (CNVD/CNNVD/OSV/GHSA) describe the flaw as enabling access to sensitive information due to insufficient input filtering. The NVD entry lists the...

CVE-2021-44111

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

S-cart 路径遍历漏洞

S-cart, a Php-based e-commerce management platform from the S-cart community, suffers from a path traversal vulnerability that stems from the failure of a web-based system or product to properly filter special elements in the path of a resource or file. An attacker could exploit the vulnerability...

PT-2022-11991

Name of the Vulnerable Software and Affected Versions S-Cart version 6.7 Description A Directory Traversal issue exists, allowing unauthorized access to files. This is possible via the download functionality in the sc-admin/backup area. Recommendations For S-Cart version 6.7, update to a newer...

CVE-2022-24001: Exposure of Sensitive Information to an Unauthorized Actor

Information disclosure vulnerability in Edge Panel prior to Android S12 allows physical attackers to access screenshot in clipboard via Edge Panel...

CVE-2021-44111: Improper Limitation of a Pathname to a Restricted Directory

A Directory Traversal vulnerability exists in S-Cart 6.7 via download in sc-admin/backup...

CVE-2022-24925: Improper Input Validation

Improper input validation vulnerability in SettingsProvider prior to Android S12 allows privileged attackers to trigger a permanent denial of service attack on a victim's devices...

SUSE: Security Advisory (SUSE-SU-2022:0359-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-22542

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitl...

Information disclosure

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitl...

CVE-2022-22542

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitl...

CVE-2022-22542

Technical details about CVE-2022-22542 are not publicly provided in the supplied documents. Monitor SAP advisories and vendor pages for updates on affected versions, exploit status, and fixes.

Iranian Hackers Using New Marlin Backdoor in 'Out to Sea' Espionage Campaign

An advanced persistent threat APT group with ties to Iran has refreshed its malware toolset to include a new backdoor dubbed Marlin as part of a long-running espionage campaign that started in April 2018. Slovak cybersecurity company ESET attributed the attacks — codenamed "Out to Sea" — to a...

CVE-2022-22542: Exposure of Sensitive Information to an Unauthorized Actor

S/4HANA Supplier Factsheet exposes the private address and bank details of an Employee Business Partner with Supplier Role, AND Enterprise Search for Customer, Supplier and Business Partner objects exposes the private address fields of Employee Business Partners, to an actor that is not explicitl...

KB5010351: Windows 10 version 1809 / Windows Server 2019 Security Update (February 2022)

The remote Windows host is missing security update 5010351. It is, therefore, affected by multiple vulnerabilities %NASLMINLEVEL 70300 C Tenable, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid157432; scriptversion"1.17";...

PT-2022-36790

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the s hex process, s exD process, and sreadbuf functions. Recommendations At the...

habitat-rescue-lion-s-pride.relaxlet.com Cross Site Scripting vulnerability OBB-2356968

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Cross-site Scripting (XSS) - Stored in s-cart/s-cart

Description Stored XSS in S-Cart Version 6.8.3 affecting Product and Category module. Proof of Concept Product version: S-Cart Version 6.8.3 core 6.8.10 , https://github.com/s-cart/s-cart/releases/tag/v6.8.3 Vulnerability 1: Stored XSS In Product module 1 Endpoint: POST...