MAL-2022-3140 Malicious code in free-fortnite-accounts-no-human-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32b44ddb8d82f4b7d6daac9a990e3fc2bb496d756105f6edf4147d296b42eead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-accounts-no-human-verification (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 32b44ddb8d82f4b7d6daac9a990e3fc2bb496d756105f6edf4147d296b42eead Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3139 Malicious code in free-fortnite-accounts-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ace3abf0b4240a6a13eb4442c02d52464c01459e3af6a06d9ab05a1edb52df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in free-fortnite-accounts-2022 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a3ace3abf0b4240a6a13eb4442c02d52464c01459e3af6a06d9ab05a1edb52df Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Infiray IRAY-A8Z3 1.0.957 Code Execution / Overflow / Hardcoded Credentials

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Infiray IRAY-A8Z3 thermal camera vulnerable version: V1.0.957 fixed version: None CVE number: CVE-2022-31208, CVE-2022-31209,...

BitTorrent uTorrent 安全漏洞

BitTorrent uTorrent is a suite of BitTorrent client software written in C++ by the American company BitTorrent. BitTorrent uTorrent suffers from a security vulnerability that stems from certain unknown handling of component guest accounts. A remote attacker could exploit the vulnerability to caus...

CVE-2022-26173

JForum v2.8.0 was discovered to contain a Cross-Site Request Forgery CSRF via http://targethost:port/jforum-2.8.0/jforum.page, which allows attackers to arbitrarily add admin accounts...

CVE-2022-26173

CVE-2022-26173 affects JForum v2.8.0, where a Cross-Site Request Forgery vulnerability on /jforum.page allows attackers to arbitrarily add admin accounts. The provided sources confirm the impact but do not specify a patch version or remediation steps. Exploitation details beyond the CSRF descript...

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

Design/Logic Flaw

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

CVE-2022-31294

An issue in the saveusers function of Online Discussion Forum Site 1 allows unauthenticated attackers to arbitrarily create or update user accounts...

CVE-2022-31294

The CVE-2022-31294 issue affects Online Discussion Forum Site 1.0 (Sourcecodester). A flaw in the save_users() function allows unauthenticated attackers to arbitrarily create or update user accounts, enabling potential account takeover. Documents confirm the vulnerability path and mention an expl...

SUSE-SU-2022:2109-1 Security update for 389-ds

This update for 389-ds fixes the following issues: - CVE-2021-3652: Fixed disabled accounts may be able to bind with crypt passwords bsc1188455. - CVE-2022-1949: Fixed full access control bypass with simple crafted query bsc1199889. - CVE-2021-4091: Fixed double free in psearch bsc1195324...

PT-2022-3530 · Schneider Electric · Ecostruxure Cybersecurity Admin Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Cybersecurity Admin Expert CAE versions prior to 2.2 Description: A vulnerability exists that could cause legitimate users to be locked out of devices or facilitate backdoor account creation by spoofing a device on the local...

Updated nats-server packages fix security vulnerability

NATS nats-server before 2.7.2 has Incorrect Access Control. Any authenticated user can obtain the privileges of the System account by misusing the "dynamically provisioned sandbox accounts" feature. CVE-2022-24450...

Reflected Cross-Site Scripting (XSS)

facturascripts/facturascripts is vulnerable to reflected cross-site scripting XSS attacks. A malicious user is able to inject and execute arbitrary javascript through the codbalance parameter in test function in Balance.php file, which could lead to compromised user accounts/devices...

The vulnerability of the Tuleap lifecycle management system, which arises from the failure to take measures to neutralize special elements, allows a perpetrator to forcibly suspend an account or gain control over another account.

The vulnerability of the Tuleap application lifecycle management system exists due to the failure to take measures to neutralize specific elements. Exploiting this vulnerability can allow a malicious actor, operating remotely and with administrative privileges, to temporarily disable a user accou...

Generation of Error Message Containing Sensitive Information

Description The software generates an error message that includes sensitive information about its environment, users, or associated data. Proof of Concept When logging in, the login page will tell you whether or not a username exists which is a vulnerability since it can be paired with the lack o...