CVE-2022-1706

A vulnerability was found in Ignition where ignition configs are accessible from unprivileged containers in VMs running on VMware products. This issue is only relevant in user environments where the Ignition config contains secrets. The highest threat from this vulnerability is to data...

CVE-2022-24765 Uncontrolled search for the Git directory in Git for Windows

Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where untrusted parties have write access to the same hard disk. Those untrusted parties could create the folder C:.git, which would be picked up by Git operation...

Eigen NLP 安全漏洞

Eigen NLP is a natural language processing system. Eigen NLP suffers from a security vulnerability that stems from the lack of access control to auth v1 sso config, where the sso config endpoint allows any logged in user guest, standard, or admin to view and modify information...

prodlenka.org Improper Access Control vulnerability OBB-1885256

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| prodlenka.org ---|--- Open Bug Bounty...