Library Management System With QR Code 1.0 Cross Site Scripting Vulnerability

Title: Library Management System with QR code Attendance 1.0 Stored Cross-Site Scripting Author: Ashish Kumar https://www.linkedin.com/in/ashish-kumar-0b65a3184 Vendor: https://www.sourcecodester.com/users/kingbhob02 Software:...

UBUNTU-CVE-2022-32207

When curl 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally widen the permissions for the target file, leaving the...

Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : curl vulnerabilities (USN-5495-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5495-1 advisory. Harry Sintonen discovered that curl incorrectly handled certain cookies. An attacker could possibly use this issue to cause a...

IBM Jazz Team Server 安全漏洞

IBM Jazz Team Server is an application server from IBM America, Inc. provides base services that enable a group of tools to work together as a single logical server, and includes any number of Jazz Team Server Extensions that provide tool-specific functionality.A security vulnerability exists in...

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition Information Disclosure Vulnerability

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An information disclosure vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems fr...

MAL-2022-791 Malicious code in @yoyo-games/webcomponent-cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 827811552cdc4c4eec4608bc98a0a5c3c46106873086727d16e3bafa21150546 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gatsby-plugin-consent-cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a19ed1bf09e125c50513619ef93e0d9510ef156a0026affd22f03da9f0dadc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3281 Malicious code in gatsby-plugin-consent-cookies (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2a19ed1bf09e125c50513619ef93e0d9510ef156a0026affd22f03da9f0dadc5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

[SECURITY] Fedora 36 Update: rubygem-mechanize-2.8.5-1.fc36

The Mechanize library is used for automating interaction with websites. Mechanize automatically stores and sends cookies, follows redirects, can follow links, and submit forms. Form fields can be populated and submitted. Mechanize also keeps track of the sites that you have visited as a history...

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

Improper access control

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

CVE-2022-31876

netgear wnap320 router WNAP320V2.0.3firmware is vulnerable to Incorrect Access Control via /recreate.php, which can leak all users cookies...

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition 安全漏洞

ASG technologies ASG-Zena Cross Platform Server Enterprise Edition is a modern multi-platform workload automation solution from ASG technologies, Inc. An information disclosure vulnerability exists in ASG technologies ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1, which stems fr...

PT-2022-12291

Name of the Vulnerable Software and Affected Versions ASG-Zena Cross Platform Server Enterprise Edition version 4.2.1 Description The issue concerns the cleartext storage of sensitive information in a cookie, which can be exploited. There is a potential for XSS to RCE exploitation in Zena, referr...

Information Disclosure

@ffdc/nestjs-proxy is vulnerable to information disclosure. The vulnerability exists due to lack of sanitization in session cookies which allows an unauthorized user to access sensitive information in the system...

CVE-2022-31070

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block sensitive cookies e.g. session cookies from being forwarded to backend services configured by the application developer. This could have led to sensitive cooki...

Default configuration

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block sensitive cookies e.g. session cookies from being forwarded to backend services configured by the application developer. This could have led to sensitive cooki...

CVE-2022-31070 Potential Sensitive Cookie Exposure in NPM Packages @finastra/nestjs-proxy, @ffdc/nestjs-proxy

NestJS Proxy is a NestJS module to decorate and proxy calls. Prior to version 0.7.0, the nestjs-proxy library did not have a way to block sensitive cookies e.g. session cookies from being forwarded to backend services configured by the application developer. This could have led to sensitive cooki...

CVE-2022-31070

The CVE-2022-31070 issue affects the NestJS Proxy library. Prior to 0.7.0, nestjs-proxy could forward sensitive cookies (e.g., session cookies) to backend services, risking exposure. The fix is in @finastra/nestjs-proxy v0.7.0, which blocks cookies by default; an allowedCookies whitelist can be c...