249 matches found
Daimler Truck: Server-based source code disclosures
URL: https://www.bharatbenz.com/TEST.PHP CWE: CWE-538 CVSS: 7.5-CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N One or more pages disclosing source code were found. This check is using pattern matching to determine if server side tags are found in the file. In some cases this alert may generate fals...
kiwitcms vulnerable to stored XSS via unrestricted files upload
Impact Kiwi TCMS allows users to upload attachments to test plans, test cases, etc. Earlier versions of Kiwi TCMS had introduced upload validators in order to prevent potentially dangerous files from being uploaded, see GHSA-fwcf-753v-fgcj and Content-Security-Policy definition to prevent...
MAL-2023-1234 Malicious code in mets-disclosures (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c300cd1bdefb340a29adcef2aaf349875956aec72a7156652cf9dfed6bf26c79 The OpenSSF Package Analysis project identified 'mets-disclosures' @ 0.0.227 npm as malicious. It is considered malicious because: - The package...
Malicious code in mets-disclosures (npm)
--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis c300cd1bdefb340a29adcef2aaf349875956aec72a7156652cf9dfed6bf26c79 The OpenSSF Package Analysis project identified 'mets-disclosures' @ 0.0.227 npm as malicious. It is considered malicious because: - The package...
How to Reduce Exposure on the Manufacturing Attack Surface
Digitalization initiatives are connecting once-isolated Operational Technology OT environments with their Information Technology IT counterparts. This digital transformation of the factory floor has accelerated the connection of machinery to digital systems and data. Computer systems for managing...
Leaked Pentagon Documents May Herald a New Era of Revelations
The bizarre release of sensitive US government materials soon after their creation signals a potential shift to near-real-time unauthorized disclosures...
[SECURITY] [DLA 3380-1] firmware-nonfree LTS new upstream version (security updates and newer firmware for Linux 5.10)
Debian LTS Advisory DLA-3380-1 [email protected] https://www.debian.org/lts/security/ Tobias Frost April 01, 2023 https://wiki.debian.org/LTS Package : firmware-nonfree Version : 20190114+really20220913-0+deb10u1 CVE ID : CVE-2020-12362 CVE-2020-12363 CVE-2020-12364 CVE-2020-24586...
CVE-2023-28760
creationtimestamp| type| source ---|---|--- 2023-03-24 12:53:44+00:00| published-proof-of-concept| https://t.me/crackcodes/2821 2023-03-24 15:39:00+00:00| published-proof-of-concept| Telegram/Gyrvv86AbWrB1GT84Y-sUOl1kYGUEvQAgiox85A6xDMevbQ 2023-03-24 15:59:08+00:00| published-proof-of-concept|...
PT-2023-21905 · Dino +2 · Dino +2
Name of the Vulnerable Software and Affected Versions: Dino versions prior to 0.2.3 Dino versions 0.3.x prior to 0.3.2 Dino versions 0.4.x prior to 0.4.2 Description: The issue allows attackers to modify the personal bookmark store via a crafted message. This can lead to changing the display of...
Nutanix AHV : Multiple Vulnerabilities (NXSA-AHV-20220304.10019)
The version of AHV installed on the remote host is prior to 20220304.10019. It is, therefore, affected by multiple vulnerabilities as referenced in the NXSA-AHV-20220304.10019 advisory. - BIND 9.11.0 - 9.11.36 9.12.0 - 9.16.26 9.17.0 - 9.18.0 BIND Supported Preview Editions: 9.11.4-S1 - 9.11.36-S...
CVE-2022-48870
creationtimestamp| type| source ---|---|--- 2022-12-22 06:51:17+00:00| published-proof-of-concept| https://t.me/crackcodes/1927 2022-12-22 11:02:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7406 2022-12-22 15:38:37+00:00| published-proof-of-concept|...
Joomla! 4.2.0 Multiple Full Path Disclosures
According to its self-reported version, the instance of Joomla! running on the remote web server is 4.2.0. It is, therefore, affected by multiple full path disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes done in 4.2.0. Note that the scanner has not tested for these...
CVE-2022-27911
An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes...
CVE-2022-27911
Mode C: Concrete details found. Joomla! 4.2.0 is affected by a vulnerability described as Multiple Full Path Disclosures caused by a missing '_JEXEC or die check' introduced by PSR12 changes. The issue affects Joomla! core and leads to potential exposure of internal paths. In the connected docume...
CVE-2022-27911 [20220801] - Core - Multiple Full Path Disclosures because of missing '_JEXEC or die check'
An issue was discovered in Joomla! 4.2.0. Multiple Full Path Disclosures because of missing 'JEXEC or die check' caused by the PSR12 changes...
OpenEMR < 6.1.0.1 Multiple Vulnerabilities
OpenEMR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:open-emr:openemr"; ifdescription...
SUSE-SU-2022:2177-1 Security update for the Linux Kernel
The SUSE Linux Enterprise 15 SP3 kernel was updated. The following security bugs were fixed: - CVE-2022-1972: Fixed a buffer overflow in nftable that could lead to privilege escalation. bsc1200019 - CVE-2019-19377: Fixed an user-after-free that could be triggered when an attacker mounts a crafted...
Get to Know Steve Povolny
Meet Steve Povolny Head of Advanced Threat Research for Trellix Threat Labs By Michael Alicea · May 17, 2022 At Trellix, we celebrate and champion our people. This week, I sat down with Steve Povolny, Head of Advanced Threat Research for Trellix Threat Labs. As he is one of the leading...
