CVE-2022-29842

CVE-2022-29842 affects Western Digital My Cloud OS 5 devices, prior to version 5.26.119. The issue is a Command Injection vulnerability in the CGI file (account_mgr) that can allow an attacker to execute code in the root context. Some sources describe this as remote code execution with network ac...

MAL-2023-275 Malicious code in dow-load-bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c1f27534f61fe998b24891e900eee38f6e2897120c4bf7c40bf3f41abe8f46d6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-140 Malicious code in bound-to-the-past-stronghold-5-by-golden-angel-on-textbook-new-edition- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0c2a2c44d99a498d4ef01c5298b14a9eb8bc90d2d2613d1ed92da9390469d4fd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-709 Malicious code in pucked-off-pucked-5-by-helena-hunting-on-audiobook-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71b979714a561c451bcc357192abbc2aee479ab7c13fc449c8e9364bd1c70aeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

2023 年 5 月のセキュリティ更新プログラム (月例)

2023 年 5 月 9 日 米国時間、マイクロソフトは、マイクロソフト製品に影響する脆弱性を修正するために、セキ...

CVE-2023-22813 Device API endpoint missing access controls on Western Digital Mobile and Web Apps

A device API endpoint was missing access controls on Western Digital My Cloud OS 5 iOS and Anroid Mobile Apps, My Cloud Home iOS and Android Mobile Apps, SanDisk ibi iOS and Android Mobile Apps, My Cloud OS 5 Web App, My Cloud Home Web App and the SanDisk ibi Web App. Due to a permissive CORS...

5-anker.com Cross Site Scripting vulnerability OBB-3307318

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cedarriverclinics.org Cross Site Scripting vulnerability OBB-3297677

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

citadelinsurance.be Cross Site Scripting vulnerability OBB-3297489

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

anitaliangarage.com Cross Site Scripting vulnerability OBB-3296476

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

seamarkzm.com Cross Site Scripting vulnerability OBB-3296293

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fzmiopio.ba Cross Site Scripting vulnerability OBB-3295657

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

boutiqueyentl.be Cross Site Scripting vulnerability OBB-3295269

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ahava.be Cross Site Scripting vulnerability OBB-3294876

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-25977

creationtimestamp| type| source ---|---|--- 2023-05-05 00:37:09+00:00| seen| https://t.me/cibsecurity/63323...

MAL-2023-1315 Malicious code in tempomati-omega-5-emcuf311 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 865979d6590ceed06ce4e4e3bcc1ad05be4caec6967f82f7654fa9e709ca97fc The OpenSSF Package Analysis project identified 'tempomati-omega-5-emcuf311' @ 1.0.1 npm as malicious. It is considered malicious because: - The...

Debian: Security Advisory (DSA-2044-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 2.9.1 : samba (EulerOS-SA-2023-1630)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code...

EulerOS Virtualization 2.9.0 : samba (EulerOS-SA-2023-1664)

According to the versions of the samba packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code...

EulerOS Virtualization 2.9.0 : krb5 (EulerOS-SA-2023-1672)

According to the versions of the krb5 packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - PAC parsing in MIT Kerberos 5 aka krb5 before 1.19.4 and 1.20.x before 1.20.1 has integer overflows that may lead to remote code...