CVE-2022-1853

Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

CVE-2022-1853

Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

Malicious code in db-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f31c91df2858e430559be9af39930325d40063e82634ee7dff673a2d7fab5cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2363 Malicious code in db-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f31c91df2858e430559be9af39930325d40063e82634ee7dff673a2d7fab5cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1853: Use After Free

Use after free in Indexed DB in Google Chrome prior to 102.0.5005.61 allowed a remote attacker to potentially perform a sandbox escape via a crafted HTML page...

[PNM-003] The preimage DB (i.e., NameWrapper.names) can be maliciously manipulated/corrupted

Lines of code Vulnerability details Description By design, the NameWrapper.names is used as a preimage DB so that the client can query the domain name by providing the token ID. The name should be correctly stored. To do so, the NameWrapper record the domain's name every time it gets wrapped. And...

WordPress Elementor Contact Form DB <= 1.7 - Reflected Cross-Site Scripting (XSS) vulnerability

Reflected Cross-Site Scripting XSS vulnerability discovered by ZhongFu Su aka JrXnm WuHan University in WordPress Elementor Contact Form DB versions = 1.7. Solution Update the WordPress Elementor Contact Form DB plugin to the latest available version at least 1.8...

GHSA-5PGM-3J3G-2RC7 Valinor error messages leading to potential data exfiltration before v0.12.0

php registerConstructorMoney::class, 'fromString' -mapper; try vardump$mapper-mapFoo::class, 'a' = 'HAHA', 'b' = '100 EUR', 'c' = 'USD 100' ; catch MappingError $e $messages = new NodeTraverserfunction Node $node foreach $node-messages as $message vardump '$message', $message-path, $message-body ...

AZL-10606 CVE-2022-32081 affecting package mariadb for versions less than 10.6.9-1

MariaDB v10.4 to v10.7 was discovered to contain an use-after-poison in prepareinplaceaddvirtual at /storage/innobase/handler/handler0alter.cc...

CVE-2022-32084

MariaDB v10.2 to v10.7 was discovered to contain a segmentation fault via the component subselect...

WiFi Mouse 1.7.8.5 - Remote Code Execution Exploit (2)

Exploit Title: WiFi Mouse 1.7.8.5 - Remote Code Execution Author: H4rk3nz0 Vendor Homepage: http://necta.us/ Software Link: http://wifimouse.necta.us/download Version: 1.7.8.5 Tested on: Windows Enterprise Build 17763 ​ Python 3 port done by RedHatAugust Original exploit:...

db-ekvipage.dk Cross Site Scripting vulnerability OBB-2693364

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Detecting malicious key extractions by compromised identities for Azure Cosmos DB

Azure Cosmos DB is a fully managed NoSQL cloud database service for modern app development. It offers a variety of advanced built-in features, such as automatic worldwide data replication, lightning-fast response types, and a variety of APIs. In this blog post, we describe security practices for...

Detecting malicious key extractions by compromised identities for Azure Cosmos DB

Azure Cosmos DB is a fully managed NoSQL cloud database service for modern app development. It offers a variety of advanced built-in features, such as automatic worldwide data replication, lightning-fast response types, and a variety of APIs. In this blog post, we describe security practices for...

The vulnerability of the Oracle XML DB component of the Oracle Database Server database management system allows a perpetrator to execute arbitrary code.

The vulnerability of the Oracle XML DB component of the Oracle Database Server management system exists due to insufficient validation of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using the Oracle Net protocol...

MAL-2022-7004 Malicious code in vulncode-db (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 57dbdec7987784a8097ecee4051fd2b4a62363a548b0e62f53aa50bf0933f3b4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-facs-db-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 638561b93842e8f2c98e08524c7f17cce709403b130b68ca4440d89942614e17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1521 Malicious code in bfx-facs-db-sqlite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 638561b93842e8f2c98e08524c7f17cce709403b130b68ca4440d89942614e17 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in bfx-facs-db-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02ff9c143cc6b331a8c8e647b49c98df6b7f0dbcebd169cd58b998ebae8adca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1520 Malicious code in bfx-facs-db-mysql (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 02ff9c143cc6b331a8c8e647b49c98df6b7f0dbcebd169cd58b998ebae8adca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...