CVE-2022-2422 Feathers - SQL injection via attribute aliases

Due to improper input validation in the Feathers js library, it is possible to perform a SQL injection attack on the back-end database, in case the feathers-sequelize package is used...

A gym heist in London goes cyber

A thief has been stalking London. This past summer, multiple women reported similar crimes to the police: While working out at their local gyms, someone snuck into the locker rooms, busted open their locks, stole their rucksacks and gym bags, and then, within hours, purchased thousands of pounds ...

TP-Link TL-WR841N Cross-Site Scripting Vulnerability

TP-Link TL-WR841N is a wireless router from TP-LINK, China. TP-Link TL-WR841N is vulnerable to a cross-site scripting vulnerability, which originates from a front-end that does not filter special characters and can be exploited by attackers to cause cross-site scripting attacks...

CVE-2022-42466 XSS vulnerability, eg for String properties.

Prior to 2.0.0-M9, it was possible for an end-user to set the value of an editable string property of a domain object to a value that would be rendered unchanged when the value was saved. In particular, the end-user could enter javascript or similar and this would be executed. As of this release,...

TP-LINK TL-WR841N 跨站脚本漏洞

TP-Link TL-WR841N is a wireless router from TP-LINK, China. TP-Link TL-WR841N is vulnerable to a cross-site scripting vulnerability, which originates from a front-end that does not filter special characters and can be exploited by attackers to cause cross-site scripting attacks...

CVE-2022-3158

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an input validation vulnerability. The FactoryTalk VantagePoint SQL Server lacks input validation when users enter SQL statements to retrieve information from the back-end database. If successfully...

CVE-2022-38743

Rockwell Automation FactoryTalk VantagePoint versions 8.0, 8.10, 8.20, 8.30, 8.31 are vulnerable to an improper access control vulnerability. The FactoryTalk VantagePoint SQL Server account could allow a malicious user with read-only privileges to execute SQL statements in the back-end database. ...

CVE-2022-22128

Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product versions for 24 months after release. Older versions have reached their End of Life and are no long...

Path traversal

Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product versions for 24 months after release. Older versions have reached their End of Life and are no long...

PT-2022-15264 · Tableau · Tableau Server

Name of the Vulnerable Software and Affected Versions: Tableau Server affected versions not specified Description: A path traversal vulnerability was discovered in Tableau Server Administration Agent's internal file transfer service, which could allow remote code execution. Tableau only supports...

CVE-2022-22128

Tableau discovered a path traversal vulnerability affecting Tableau Server Administration Agent’s internal file transfer service that could allow remote code execution.Tableau only supports product versions for 24 months after release. Older versions have reached their End of Life and are no long...

October 17, 2022—KB5020435 (OS Builds 19042.2132, 19043.2132, and 19044.2132) Out-of-band

None None...

CVE-2022-42081

Tenda AC1206 USAC1206V1.0RTLV15.03.06.23multiTD01 was discovered to contain a stack overflow via schedendtime parameter...

PT-2022-26243 · Tenda · Tenda Ac1206

Name of the Vulnerable Software and Affected Versions: Tenda AC1206 version US AC1206V1.0RTL V15.03.06.23 multi TD01 Description: A stack overflow issue was discovered, which occurs via the sched end time parameter. Recommendations: For Tenda AC1206 version US AC1206V1.0RTL V15.03.06.23 multi TD0...

October 11, 2022—KB5018410 (OS Builds 19042.2130, 19043.2130, and 19044.2130) - EXPIRED

None None...

August 9, 2022—KB5016616 (OS Builds 19042.1889, 19043.1889, and 19044.1889)

None None...

October 11, 2022—KB5018476 (Security-only update)

None None...

October 11, 2022—KB5018474 (Monthly Rollup)

None None...

August 9, 2022—KB5016683 (Security-only update)

None None...

HSTP - Simple Hyper Service Transfer Protocol On Networks

The protocol aims to develop a application layer abstraction for the Hyper Service Transfer Protocol. HSTP is a recursion as nature of HSTP. This protocol implements itself as a interface. On every internet connected device, there is a HSTP instance. That's why the adoption is not needed. HSTP...