8168 matches found
Description of the security update for SharePoint Enterprise Server 2013: November 8, 2022 (KB5002235)
None None...
Description of the security update for Excel 2013: November 8, 2022 (KB5002275)
Description of the security update for Excel 2013: November 8, 2022 KB5002275 Summary This security update resolves a Microsoft Excel remote code execution vulnerability and Microsoft Excel security feature bypass vulnerability. To learn more about the vulnerabilities, see the following security...
Description of the security update for SharePoint Foundation 2013: November 8, 2022 (KB5002303)
Description of the security update for SharePoint Foundation 2013: November 8, 2022 KB5002303 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
Description of the security update for SharePoint Server Subscription Edition: November 8, 2022 (KB5002296)
None None...
Description of the security update for SharePoint Server Subscription Edition Language Pack: November 8, 2022 (KB5002291)
None None...
Hacker can front-run the L2 ERC20 token deployment.
Lines of code Vulnerability details Impact hacker can front-run the L2 ERC20 token deployment to block L2 ERC20 token finalizeDeposit Proof of Concept I intend to prove this piece of code is front-runnable by hacker: /// @notice Finalize the deposit and mint funds /// @param l1Sender The account...
Fedora 访问控制错误漏洞
Fedora is a set of Linux operating systems from the Fedora community. Fedora CoreOS has a security vulnerability that stems from the fact that it allows to boot a non-default OSTree deployment without entering a password. This allows users with access to the GRUB menu to boot into an older versio...
reentrancyGuardInitializer modifier used on constructor and Initialize functions
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. In L1ERC20Bridge.sol there are two places where the reentrancyGuardInitializer modifier is used. It's found on both the constructor function and also on the initialize function. This is a problem becaus...
reentrancyGuardInitializer modifier used on constructor and Initialize functions
Lines of code Vulnerability details Impact Detailed description of the impact of this finding. In L1EthBridge.sol there are two places where the reentrancyGuardInitializer modifier is used. It's found on both the constructor function and also on the initialize function. This is a problem because...
Why Agentless DAM is a Better Option for Securing Cloud Data
In the context of on-premises database activity monitoring DAM, security teams use agents to enable them to see all requests coming into the databases as well as all responses going out of the databases. In other words, the agent-based approach enables database activity monitoring independent of...
PT-2022-6764 · Vmware · Vmware Tanzu Application Service For Vms +1
Name of the Vulnerable Software and Affected Versions: VMware Tanzu Application Service for VMs and Isolation Segment affected versions not specified Description: The issue is related to an information disclosure vulnerability due to the logging of credentials in hex encoding in platform system...
GHSA-HFF2-X2J9-GXGV Keylime: unhandled exceptions could lead to invalid attestation states
Impact This vulnerability creates a false sense of security for keylime users -- i.e. a user could query keylime and conclude that a parcitular node/agent is correctly attested, while attestations are not in fact taking place. Short explanation: the keylime verifier creates periodic reports on th...
Raspberry Robin Operators Selling Cybercriminals Access to Thousands of Endpoints
The Raspberry Robin worm is becoming an access-as-a-service malware for deploying other payloads, including IcedID, Bumblebee, TrueBot aka Silence, and Clop ransomware. It is "part of a complex and interconnected malware ecosystem, with links to other malware families and alternate infection...
CVE-2022-24669
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services...
Code injection
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services...
CVE-2022-24669 Anonymous users can register / de-register for configuration change notifications
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services...
CVE-2022-24669 Anonymous users can register / de-register for configuration change notifications
It may be possible to gain some details of the deployment through a well-crafted attack. This may allow that data to be used to probe internal network services...
Raspberry Robin worm part of larger ecosystem facilitating pre-ransomware activity
Microsoft has discovered recent activity indicating that the Raspberry Robin worm is part of a complex and interconnected malware ecosystem, with links to other malware families and alternate infection methods beyond its original USB drive spread. These infections lead to follow-on...
PT-2022-16787 · Forgerock · Access Management
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: It may be possible to gain some details of the deployment through a well-crafted attack, allowing the data to be used to probe internal network services. Recommendations: At the...
CVE-2022-42889: Detect Text4Shell via Qualys Container Security
A new critical vulnerability CVE-2022-42889 Text4Shell in Apache Commons Text library was reported by Alvaro Muñoz. The vulnerability, when exploited could result in remote code execution RCE applied to untrusted input due to insecure interpolation defaults. As a result, this CVE is rated at CVSS...