Vim ins_bytes() Buffer Overflow

The vulnerability of the insbytes function in the Vim text editor is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Geo SCADA Mobile Boundary Deficiency

The vulnerability of the remote monitoring and control system Geo SCADA Mobile previously known as ClearSCADA Mobile is related to deficiencies in the system’s boundary settings. Exploiting this vulnerability allows an attacker to compromise the integrity, accessibility, and confidentiality of th...

gnome-control-center bug fix and enhancement update

An update is available for gnome-control-center. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...

gnome-control-center bug fix and enhancement update

An update is available for gnome-control-center. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-control-center package contains configuration utilitie...

Critical address change

Lines of code Vulnerability details Impact Changing critical addresses in contracts should be a two-step process. in order to prevent changing admin by mistake Proof of Concept check these links: OpenZeppelin/openzeppelin-contracts1488 OpenZeppelin/openzeppelin-contracts2369 Tools Used Manual...

CVE-2022-29526

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

CVE-2022-29526

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

AZL-37490 CVE-2022-29526 affecting package golang for versions less than 1.21.6-1

Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat function could incorrectly report that a file is accessible...

You can be tracked online using your Chrome browser extensions

A researcher has found a way to generate a fingerprint of your device from your installed Google Chrome extensions, and then use that fingerprint to track you online. Fingerprinting is a way of figuring out what makes your device unique and then using that to identify you as you move around the...

Malicious code in accessibility-insights-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff9d7a6118e0380b071890cdb0ef4f4e1d7332a28db76b3487854da7ebbcc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-821 Malicious code in accessibility-insights-web (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cff9d7a6118e0380b071890cdb0ef4f4e1d7332a28db76b3487854da7ebbcc16 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in owa-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb14eb03fe7358a1ac71f7f835357d50ed868b0f387e5d731feb76664e174b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5160 Malicious code in owa-accessibility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fb14eb03fe7358a1ac71f7f835357d50ed868b0f387e5d731feb76664e174b84 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in accessibility-insights-action (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 70fa4b2f484aad665f3124f9af98e3ad554f5268f846db8f95956c49e6ee82e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MaliBot: A New Android Banking Trojan Spotted in the Wild

A new strain of Android malware has been spotted in the wild targeting online banking and cryptocurrency wallet customers in Spain and Italy, just weeks after a coordinated law enforcement operation dismantled FluBot. The information stealing trojan, codenamed MaliBot by F5 Labs, is as feature-ri...

Description of the security update for SharePoint Server 2019: June 14, 2022 (KB5002212)

None None...

Google Chrome Tab Groups Data Compromise

The vulnerability of Google Chrome’s Tab Groups component is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

Core Oracle WebLogic Server Code Execution

The vulnerability of the Core component of the Oracle WebLogic Server software platform within Oracle Fusion Middleware exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely, as well as compromise the...

ArgoCD Service Data Protection

The vulnerability of the application deployment automation tool in Kubernetes ArgoCD is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information through a...

GHSA-RM4M-39FJ-288C Incorrect permission checks in Jenkins Role-based Authorization Strategy Plugin may allow accessing some items

Items like jobs can be organized hierarchically in Jenkins, using the Folders Plugin or something similar. An item is expected to be accessible only if all its ancestors are accessible as well. Role-based Authorization Strategy Plugin 3.1 and earlier does not correctly perform permission checks t...