15203 matches found
CVE-2022-39251 Matrix Javascript SDK vulnerable to Olm/Megolm protocol confusion
Matrix Javascript SDK is the Matrix Client-Server SDK for JavaScript. Prior to version 19.7.0, an attacker cooperating with a malicious homeserver can construct messages that legitimately appear to have come from another person, without any indication such as a grey shield. Additionally, a...
pyFlipper - Unoffical Flipper Zero Cli Wrapper Written In Python
Unoffical Flipper Zero cli wrapper written in Python Functions and characteristics: Flipper serial CLI wrapper Websocket client interface Setup instructions: $ git clone https://github.com/wh00hw/pyFlipper.git $ cd pyFlipper $ python3 -m venv venv $ source venv/bin/activate $ pip install -r...
PT-2022-15495 · Carlo Gavazzi · Carlo Gavazzi Uwp3.0
Name of the Vulnerable Software and Affected Versions: Carlo Gavazzi UWP3.0 affected versions not specified CPY Car Park Server version 2.8.3 Description: The issue allows a remote attacker with admin rights to execute arbitrary commands due to missing input sanitization in the backup restore...
Build Numbers and Versions of Veeam Plug-in for oVirt KVM
This KB article lists all versions of the Veeam Plug-in for oVirt KVM and their respective appliance build numbers. Starting with Veeam Backup & Replication 12.3, the Release Notes for Veeam Plug-in for oVirt KVM , are included in the Veeam Backup & Replication Release Notes. Note: Prior to versi...
VMware Cloud Director 10.4 Compatibility Patches
Hotfix for Veeam Backup & Replication 11.0.1.1261 P20230227 The hotfix on this article has been rebuilt as of 2023-11-24 to be compatible only with Veeam Backup & Replication build 11.0.1.1261 P20230227. This is the second such rebuild; the last rebuild was on 2023-03-16. Note: If an older versio...
BlackCat Ransomware Attackers Spotted Fine-Tuning Their Malware Arsenal
The BlackCat ransomware crew has been spotted fine-tuning their malware arsenal to fly under the radar and expand their reach. "Among some of the more notable developments has been the use of a new version of the Exmatter data exfiltration tool, and the use of Eamfo, information-stealing malware...
Zero-Day vulnerability in WPGateway Plugin compromises WordPress sites
Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The recently uncovered CVE-2022-3180 zero-day vulnerability allows an unauthenticated attacker to add an administrator account to WPGateway-powered websites. WPGateway is a commercial plugin that...
Veritas Backup Exec Agent Remote Code Execution
frozenstringliteral: true This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Veritas Backup Exec Agent Remote Code Execution', 'Description' = %q Veritas Backup Exec Agent supports multiple...
Veritas Backup Exec Agent Remote Code Execution Exploit
Veritas Backup Exec Agent supports multiple authentication schemes and SHA authentication is one of them. This authentication scheme is no longer used within Backup Exec versions, but had not yet been disabled. An attacker could remotely exploit the SHA authentication scheme to gain unauthorized...
CVE-2022-38079
Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...
CVE-2022-38079
Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...
Cross site request forgery (csrf)
Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...
CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...
CVE-2022-38079 WordPress Backup Scheduler plugin <= 1.5.13 - Cross-Site Request Forgery (CSRF) vulnerability
Cross-Site Request Forgery CSRF vulnerability Backup Scheduler plugin = 1.5.13 at WordPress...
CVE-2022-38079
CVE-2022-38079 concerns a Cross-Site Request Forgery (CSRF) in the WordPress Backup Scheduler plugin, versioned
CVE-2022-41320
Veritas System Recovery VSR versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windows user who has sufficient privileges to access a network file system that they were not authorized...
CVE-2022-41320
Veritas System Recovery VSR versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windows user who has sufficient privileges to access a network file system that they were not authorized...
CVE-2022-41320
Veritas System Recovery VSR versions 18 and 21 store a network destination password in the Windows registry during configuration of the backup configuration. This vulnerability could provide a Windows user who has sufficient privileges to access a network file system that they were not authorized...
WordPress plugin Backup Scheduler 跨站请求伪造漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...
