5891 matches found
How to Support Agile Development Through Cybersecurity Best Practices
Understanding other peoples problems It’s often said that people only notice cybersecurity when it fails, or when it gets in the way of them doing their jobs. Organizations, and especially software development teams, want to be able to develop quickly and easily to stay ahead of their competition...
Pegasystem PEGA Platform Cross-Site Request Forgery Vulnerability
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications such as BPM Business Process Management, Case Management, Real-Time Decision Making and CRM Customer Relationship Management.A cross-site request forgery...
Pegasystem PEGA Platform Cross-Site Scripting Vulnerability (CNVD-2023-12002)
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications such as BPM business process management, case management, real-time decision making and CRM customer relationship management.Pegasystem Pega Platform suffers...
Pegasystem PEGA Platform 跨站脚本漏洞
Pegasystem PEGA Platform is a suite of application development platforms from Pegasystem UK. The platform is used to develop applications such as BPM business process management, case management, real-time decision making and CRM customer relationship management.Pegasystem PEGA Platform has a...
Sql injection
This Rails gem adds two methods to the ActiveRecord::Base class that allow you to update many records on a single database hit, using a case sql statement for it. Before version 0.1.3 updatebycase gem used custom sql strings, and it was not sanitized, making it vulnerable to sql injection. Upgrad...
SQL Injection
Overview updatebycase is an a package that allows you to update multiple ActiveRecord records based on case values on a single database hit Affected versions of this package are vulnerable to SQL Injection in the UpdateByCase and Utils classes, which accept and process SQL strings without...
Meta Just Happens to Expand Messenger’s End-to-End Encryption
The company says an expansion of privacy features in Messenger is unrelated to a high-profile Nebraska abortion case...
PT-2022-23056 · Unknown · Update By Case
Name of the Vulnerable Software and Affected Versions: update by case gem versions prior to 0.1.3 Description: The issue concerns a SQL injection vulnerability due to the use of custom, unsanitized SQL strings in the update by case gem. This vulnerability allows for potential SQL injection attack...
FreeBSD -- AIO credential reference count leak
Problem Description: The aioaqueue function, used by the liolistio system call, fails to release a reference to a credential in an error case. Impact: An attacker may cause the reference count to overflow, leading to a use after free UAF...
CVE-2022-34844
creationtimestamp| type| source ---|---|--- 2022-08-04 22:20:07+00:00| seen| https://t.me/cibsecurity/47583 2022-08-08 12:56:33+00:00| seen| https://t.me/ctinow/56783...
CVE-2022-35864
creationtimestamp| type| source ---|---|--- 2022-08-03 20:18:50+00:00| seen| https://t.me/cibsecurity/47508...
pcre2: Out-of-bounds read in compile_xclass_matchingpath in pcre2_jit_compile.c
An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the pcre2jitcompile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in...
CVE-2022-2273
creationtimestamp| type| source ---|---|--- 2022-08-01 16:17:09+00:00| seen| https://t.me/cibsecurity/47327...
GSD-2022-1004923 usbnet: fix memory leak in error case
usbnet: fix memory leak in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.323 by commit 3eed421ca5c809da93456f69203d164d5220be3...
GSD-2022-1004873 usbnet: fix memory leak in error case
usbnet: fix memory leak in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.288 by commit...
GSD-2022-1004805 usbnet: fix memory leak in error case
usbnet: fix memory leak in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.252 by commit...
GSD-2022-1004717 usbnet: fix memory leak in error case
usbnet: fix memory leak in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.205 by commit 04894ab34faf40ab72a8a5ab5b404bb0606bbbf...
GSD-2022-1004592 usbnet: fix memory leak in error case
usbnet: fix memory leak in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.130 by commit...
GSD-2022-1004425 usbnet: fix memory leak in error case
usbnet: fix memory leak in error case This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.54 by commit db89582ff330556188da856e01382ccbf3a5e70...