[SECURITY] Fedora 36 Update: golang-x-exp-0-0.42.20220330git053ad81.fc36

This subrepository holds experimental and deprecated packages. The idea for this subrepository originated as the pkg/exp directory of the ma in repository, but its presence there made it unavailable to users of the binary downloads of the Go installation. The subrepository has therefore been...

nav.2-0-2-2.inter-sys.funewa.com Cross Site Scripting vulnerability OBB-2565380

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-27925

Zimbra Collaboration aka ZCS 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts files from it. An authenticated user with administrator rights has the ability to upload arbitrary files to the system, leading to directory traversal. Recent assessments: rbowes-r7 a...

The More You Know, The More You Know You Don’t Know

A Year in Review of 0-days Used In-the-Wild in 2021 Posted by Maddie Stone, Google Project Zero This is our third annual year in review of 0-days exploited in-the-wild 2020, 2019. Each year we’ve looked back at all of the detected and disclosed in-the-wild 0-days as a group and synthesized what w...

Setting the minter address to address(0) can lead to breaking the contract set.

Lines of code Vulnerability details Impact The highlighted issue can lead to breaking the functionality of the contract set. Proof of Concept At certain set functions in the codebase, we are allowing setting the values to address0 or the case where old address = new address. This was observed in...

Apple Rushes Out Patches for 0-Days in MacOS, iOS

Apple rushed out patches for two zero-days affecting macOS and iOS Thursday, both of which are likely under active exploitation and could allow a threat actor to disrupt or access kernel activity. Apple released separate security updates for the bugs – a vulnerability affecting both macOS and iOS...

Update on 0-day vulnerabilities in Spring (Spring4Shell and CVE-2022-22963)

Quick update There are two vulnerabilities: one 0-day in Spring Core which is named Spring4Shell very severe, exploited in the wild no CVE yet and another one in Spring Cloud Function less severe, CVE-2022-22963 Wallarm has rolled out the update to detect and mitigate both vulnerabilities No...

Exploit for Code Injection in Vmware Spring_Cloud_Function

CVE-2022-22963 CVE-2022-22963 PoC Slight modified for Englis...

CVE-2021-43666

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

CVE-2021-43666: Improper Handling of Length Parameter Inconsistency

A Denial of Service vulnerability exists in mbed TLS 3.0.0 and earlier in the mbedtlspkcs12derivation function when an input password's length is 0...

PT-2022-11878

Name of the Vulnerable Software and Affected Versions WebRun version 3.6.0.42 Description The issue allows for SQL Injection via the P 0 parameter, which is used to set the username during the login process. No information is provided about the estimated number of potentially affected devices...

Debian DLA-2956-1 : wordpress - LTS security update

The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2956 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVEL 70300 C Tenable Network Security...

CVE-2021-44032: Undefined Security Weakness

TP-Link Omada SDN Software Controller before 5.0.15 does not check if the authentication method specified in a connection request is allowed. An attacker can bypass the captive portal authentication process by using the downgraded "no authentication" method, and access the protected network. For...

PT-2022-1817

Name of the Vulnerable Software and Affected Versions TP-Link Omada SDN Software Controller versions prior to 5.0.15 Description The issue is related to errors in processing authentication requests in the TP-Link Omada SDN software controller. This can allow a remote attacker to gain access to a...

PT-2022-16332

Name of the Vulnerable Software and Affected Versions Weblate versions 0 through 4.11.1 Description The issue allows Remote Code Execution RCE via argument injection when using git or mercurial repositories. Authenticated users can change the behavior of the application in an unintended way,...

AIX 7.3 TL 0 : audit (IJ38121)

https://vulners.com/cve/CVE-2021-38955 https://vulners.com/cve/CVE-2021-38955 IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...

PT-2022-28829

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.11 Description The issue is related to a use-after-free condition for realloc..., 0 in libsubcmd. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-28628

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.181 Description The issue is related to a use-after-free condition for realloc..., 0 in libsubcmd. The actual impact and attack plausibility have not yet been proven. It was introduced in version v4.5 and...

PT-2022-28605

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.231 Description The issue is related to a use-after-free condition for realloc..., 0 in libsubcmd. The actual impact and attack plausibility have not yet been proven. Recommendations For versions prior to...

Solaris/SPARC - setuid(0) + chmod (/bin/ksh) + exit(0) Shellcode

/ sparcsolarischmod.c - Solaris/SPARC chmod shellcode Copyright c 2022 Marco Ivaldi Solaris/SPARC setuid/chmod/exit shellcode. Tested on: SunOS 5.10 GenericVirtual sun4u sparc SUNW,SPARC-Enterprise / char sc = / Solaris/SPARC chmod shellcode 12 + 32 + 20 = 64 bytes / / setuid0 / "\x90\x08\x3f\xff...