PT-2022-32076

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.197 Description The issue is related to netfilter: conntrack, where a re-fetch of conntrack after insertion is required. The actual impact and attack plausibility have not yet been proven. Recommendations Fo...

CVE-2022-30619

Editable SQL Queries behind Base64 encoding sending from the Client-Side to The Server-Side for a particular API used in legacy Work Center module. He attack is available for any authenticated user, in any kind of rule. under the function : /AgilePointServer/Extension/FetchUsingEncodedData in the...

Malicious code in mitui-util-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e46f48ec28cd3be6ebaa4cd8d2e4d9ae3a0d627267fb5bcdf6d6063b6a6931d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4629 Malicious code in mitui-util-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9e46f48ec28cd3be6ebaa4cd8d2e4d9ae3a0d627267fb5bcdf6d6063b6a6931d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in buffer-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e069e0b257c2c44767bc83c877dfad638c54bed27449cb150292068db051c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1715 Malicious code in buffer-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 90e069e0b257c2c44767bc83c877dfad638c54bed27449cb150292068db051c7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3991 Malicious code in iv-node-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d22d43dc3fae73889f4b570379c506d709ce7f2d3602149f92e1c15176125cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in iv-node-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7d22d43dc3fae73889f4b570379c506d709ce7f2d3602149f92e1c15176125cf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in merlin-products-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc2949d7ccace2a49fa195114fa2ec70249c0da126015d8633f6780145cf0e7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4562 Malicious code in merlin-products-fetch (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cc2949d7ccace2a49fa195114fa2ec70249c0da126015d8633f6780145cf0e7e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in brock-fetch-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06927b0ede8157ec71afd11ae6cacba244b713b63cfb70e6a5ae52949cdfc78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1690 Malicious code in brock-fetch-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 06927b0ede8157ec71afd11ae6cacba244b713b63cfb70e6a5ae52949cdfc78b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

@3xanax/youtube-stream-status (>=1.0.0, <=1.0.3), @about7sharks/get-articles (>=0.0.24, <=0.0.39) +682 more potentially affected by CVE-2022-32210 via undici (>=4.9.3, <=5.4.0)

undici NPM version =4.9.3, =1.0.0, =0.0.24, =0.0.0, =0.7.1, =1.0.0, =1.0.0-beta.15, =1.0.0, =1.0.0, =0.0.1, =0.0.2, =2.9.7, =0.1.1, =1.0.0, =1.4.0 and more Source cves: CVE-2022-32210 Source advisory: OSV:GHSA-PGW7-WX7W-2W33...

CVE-2022-31827

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...

CVE-2022-31827

MonstaFTP v2.10.3 was discovered to contain a Server-Side Request Forgery SSRF via the function performFetchRequest at HTTPFetcher.php...

Important: Red Hat Security Advisory: Red Hat Advanced Cluster Management 2.5 security updates, images, and bug fixes

Red Hat Advanced Cluster Management for Kubernetes 2.5.0 is now generally available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2022-31796

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use...

UBUNTU-CVE-2022-31796

libjpeg 1.63 has a heap-based buffer over-read in HierarchicalBitmapRequester::FetchRegion in hierarchicalbitmaprequester.cpp because the MCU size can be different between allocation and use...

HTML2WP <= 1.0.0 - Subscriber+ Arbitrary File Deletion

The plugin does not have authorisation and CSRF checks in an AJAX action, available to any authenticated users such as subscriber, which could allow them to delete arbitrary file To delete the license.txt at the root of the blog: await...

GHSA-PJ65-3PF6-C5Q4 python-apt Does Not Check Hash Signature

Python-apt doesn't check if hashes are signed in Version.fetchbinary and Version.fetchsource of apt/package.py or in fetcharchives of apt/cache.py in version 1.9.3ubuntu2 and earlier. This allows downloads from unsigned repositories which shouldn't be allowed and has been fixed in verisions 1.9.5...