Lucene search
+L

19815 matches found

Github Security Blog
Github Security Blog
•added 2023/01/09 6:14 a.m.•4 views

Malware in @playgami/portal-dynamic-copy

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
osv_mal
osv_mal
•added 2023/01/09 6:14 a.m.•19 views

MAL-2023-52 Malicious code in @playgami/portal-dynamic-copy (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9deabd3b5198948a51a1c164772947fe70aa65670b1ca24263fad525b65cbfc2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/01/09 12:00 a.m.•12 views

CVE-2022-47790

Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=...

9.9AI score0.0076EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2023/01/09 12:00 a.m.•26 views

Dynamic Transaction Queuing System SQL injection vulnerabilities

Dynamic Transaction Queuing System is a dynamic transaction queuing system using PHP/MySQL by Carlo Montero, an individual developer. A security vulnerability exists in Dynamic Transaction Queuing System v1.0. An attacker can exploit this vulnerability to perform a SQL injection attack via...

9.8CVSS8.7AI score0.0076EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/01/09 12:00 a.m.•7 views

CVE-2022-47790: Improper Neutralization of Special Elements used in an SQL Command

Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=...

9.8CVSS5.8AI score0.0076EPSS
SaveExploits1References3
CVE
CVE
•added 2023/01/09 12:00 a.m.•79 views

CVE-2022-47790

Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=. The root cause is an injection flaw in the id parameter of that endpoint. Impact per CVSS indicates high confidentiality, integrity, and availability with a total score o...

9.8CVSS9.7AI score0.0076EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
•added 2023/01/09 12:00 a.m.•35 views

CVE-2022-47790

Sourcecodester Dynamic Transaction Queuing System v1.0 is vulnerable to SQL Injection via /queuing/index.php?page=display&id=...

10AI score0.0076EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/01/06 8:15 p.m.•21 views

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

7.5CVSS5.8AI score0.00336EPSS
SaveExploits0References2
NVD
NVD
•added 2023/01/06 8:15 p.m.•31 views

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

7.5CVSS7.6AI score0.00336EPSS
SaveExploits0References2
Prion
Prion
•added 2023/01/06 8:15 p.m.•31 views

Design/Logic Flaw

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

5CVSS7.5AI score0.00336EPSS
SaveExploits0References2Affected Software2
CNNVD
CNNVD
•added 2023/01/06 12:00 a.m.•21 views

Chat Server code-related vulnerabilities

Chat Server is ramank775 individual developer's chat server based on microservices architecture, supports high availability, high throughput, horizontal expansion. A security vulnerability exists in Efs Software Easy Chat Server version 3.1, which originates from a DLL hijacking vulnerability tha...

7.8CVSS7.8AI score0.00404EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/01/06 12:00 a.m.•50 views

CVE-2022-46761

The system has a vulnerability that may cause dynamic hiding and restoring of app icons.Successful exploitation of this vulnerability may cause malicious hiding of app icons...

7.7AI score0.00336EPSS
SaveExploits0References2
CVE
CVE
•added 2023/01/06 12:00 a.m.•86 views

CVE-2022-46761

CVE-2022-46761 concerns Huawei EMUI and HarmonyOS. Connected sources describe a vulnerability causing dynamic hiding/restoring of app icons, a security bypass that could enable malicious hiding of icons. The CVE notes a high severity (CVSS v3.1: 7.5, Network attack vector, Low complexity, No priv...

7.5CVSS7.5AI score0.00336EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2023/01/05 12:00 a.m.•20 views

HUAWEI EMUI/Magic UI security vulnerabilities

Huawei EMUI is a mobile operating system developed based on Android.Huawei HarmonyOS is to provide a full-scenario distributed operating system based on microkernel. A security bypass vulnerability exists in Huawei EMUI and HarmonyOS.The vulnerability is caused due to dynamic hiding and restoring...

7.5CVSS6.7AI score0.00336EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
•added 2023/01/04 12:00 a.m.•22 views

Cisco ASA Dynamic Access Control Buffer Overflow DoS

The vulnerability of the Dynamic Access Control Function Implementation in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to an operation that goes beyond the buffer in memory. Exploiting this vulnerability could allow a malicious actor to cause...

8.6CVSS7.4AI score0.00949EPSS
SaveExploits0References4Affected Software2
Packet Storm
Packet Storm
•added 2023/01/03 12:00 a.m.•288 views

Oracle DBMS_REDACT Dynamic Data Masking Bypass

Title: ByPassing DBMSREDACT Dynamic Data Masking security feature in Oracle database system Product: Database Manufacturer: Oracle Affected Versions: 19c,21c Tested Versions: 19c,21c CVE Reference: N/A Author of Advisory: Emad Al-Mousa Overview: DBMSREDACT package provides an interface to Oracle...

7.4AI score
SaveExploits0
CNNVD
CNNVD
•added 2023/01/03 12:00 a.m.•19 views

ServiSign path traversal vulnerability

Changingtec ServiSign is a system from Changingtec Taiwan, China. The system provides a cross-platform solution for digital signatures and authentication. A security vulnerability exists in ServiSign that stems from insufficient filtering of special characters in the path of a DLL file...

8.8CVSS7.3AI score0.00942EPSS
SaveExploits0References2
zdt
zdt
•added 2023/01/03 12:00 a.m.•442 views

Oracle DBMS_REDACT Dynamic Data Masking Bypass Vulnerability

Proof of concept overview on how the DBMSREDACT Dynamic Data Masking security feature in Oracle can be bypassed. Affected versions include 19c and 21c. Title: ByPassing DBMSREDACT Dynamic Data Masking security feature in Oracle database system Product: Database Manufacturer: Oracle Affected...

7AI score
SaveExploits0
OpenVAS
OpenVAS
•added 2022/12/29 12:00 a.m.•35 views

SUSE: Security Advisory (SUSE-SU-2022:4630-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS6.8AI score0.00822EPSS
SaveExploits1References7
Chainguard
Chainguard
•added 2022/12/28 12:30 a.m.•28 views

GHSA-3839-6R69-M497 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner-fips, dynamic-localpv-provisioner...

5.8AI score
SaveExploits0
Rows per page
Query Builder