8958 matches found
Shopware 安全漏洞
Shopware is a suite of open source e-commerce software from German company Shopware. A security vulnerability exists in Shopware version 5.7.14 and earlier versions, which stems from an ACL that can be bypassed by invoking the back-end management controller using a specific symbol...
CVE-2022-33941
PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products/versions are as...
Debian dla-3083 : puma - security update
The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3083 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3083-1 [email protected]...
NSC* ANNOUNCEMENT FOR CITRIX ADC(NETSCALER) MPX/SDX 14030 FIPS, 14060 FIPS, 14080 FIPS, 14000Z FIPS
Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 14030 FIPS, MPX 14060, MPX 14080 FIPS, MPX 14000Z FIPS, SDX 14030 FIPS, FIPS, SDX 14060 FIPS, SDX 14080 FIPS, SDX 14000Z FIPS Note: 14xxx FIPS upgrade SKUs and 14000Z FIPS upgrade SKUs for these models will ...
CVE-2022-37128
In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...
CVE-2022-37128
In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 and D-Link DIR-816 A2 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which originates from the ability to initialize a network without authenticating via /goform/wizardend...
CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added 10 new actively exploited vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, including a high-severity security flaw affecting industrial automation software from Delta Electronics. The issue, tracked ...
PT-2022-7236 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi unregister is called to stop further write-back and waits for associated delayed work to complete...
[The Lost Bots] S02E03: Browser-in-Browser Attacks — Don't Get (Cat)-Phished
!\The Lost Bots\ S02E03: Browser-in-Browser Attacks — Don't Get \Cat-Phishedhttps://blog.rapid7.com/content/images/2022/08/The-Lost-Bots-logo-large.png Welcome back to The Lost Bots! In our latest episode, we're talking about phishing attacks — but not your standard run-of-the-mill version...
2021 Top Malware Strains
Summary Immediate Actions You Can Take Now to Protect Against Malware: • Patch all systems and prioritize patching known exploited vulnerabilities. • Enforce multifactor authentication MFA. • Secure Remote Desktop Protocol RDP and other risky services. • Make offline backups of your data. • Provi...
Nextcloud: Desktop client does not verify received singed certificate in end to end encryption
Vulnerability description not provided...
Uncovering a ChromeOS remote memory corruption vulnerability
Microsoft discovered a memory corruption vulnerability in a ChromeOS component that can be triggered remotely, allowing attackers to perform either a denial-of-service DoS or, in extreme cases, remote code execution RCE. Following our D-Bus blog post that focused on Linux, we searched for similar...
Additional Lifecycle Information for Receiver for Mac
This article is a supplement to theLifecycle Milestones for Citrix Workspace App and Citrix Receiver . It provides additional details on End of Maintenance and End of Support dates for the listed versions of Citrix Receiver for Mac. Additional Lifecycle Information for Receiver for Mac Receiver f...
Hackers Using Bumblebee Loader to Compromise Active Directory Services
The malware loader known as Bumblebee is being increasingly co-opted by threat actors associated with BazarLoader, TrickBot, and IcedID in their campaigns to breach target networks for post-exploitation activities. "Bumblebee operators conduct intensive reconnaissance activities and redirect the...
CVE-2021-39085
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in th...
Sql injection
IBM Sterling B2B Integrator Standard Edition 6.0.0.0 through 6.0.3.5, 6.1.0.0 through 6.1.0.4, and 6.1.1.0 through 6.1.1.1 is vulnerable to SQL injection. A remote attacker could send specially crafted SQL statements, which could allow the attacker to view, add, modify or delete information in th...
ERROR IN UPDATING **_checkpoint** IN THE **increaseUnlockTime** FUNCTION
Lines of code Vulnerability details Impact The potentiel impact of this error are : Give wrong voting power to a user at a given block. Give wrong total voting power at a given block. Give wrong total voting power. Proof of Concept The error occured in this line : In the increaseUnlockTime functi...
