The vulnerability of the QTS operating system lies in its inability to neutralize special elements used in the OS command line, allowing attackers to execute arbitrary commands.

The vulnerability of the QTS operating system is related to the lack of measures taken to neutralize special elements used in the OS commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Researchers Uncover Malicious NPM Packages Stealing Data from Apps and Web Forms

A widespread software supply chain attack has targeted the NPM package manager at least since December 2021 with rogue modules designed to steal data entered in forms by users on websites that include them. The coordinated attack, dubbed IconBurst by ReversingLabs, involves no fewer than two doze...

UBUNTU-CVE-2022-34481

In the nsTArrayImpl::ReplaceElementsAt function, an integer overflow could have occurred when the number of elements to replace was too large for the container. This vulnerability affects Firefox 102, Firefox ESR 91.11, Thunderbird 102, and Thunderbird 91.11...

The vulnerability of the `nsTArray_Impl::ReplaceElementsAt()` function in Thunderbird email clients, Firefox browsers, and Firefox ESR allows a malicious actor to execute arbitrary code.

The vulnerability of the nsTArrayImpl::ReplaceElementsAt function in Thunderbird email clients, Firefox browsers, and Firefox ESR browsers is related to integer overflow. Exploiting this vulnerability could allow an attacker to execute arbitrary code remotely...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

Mozilla: Potential integer overflow in ReplaceElementsAt

The Mozilla Foundation Security Advisory describes this flaw as: In the nsTArrayImpl::ReplaceElementsAt function, where an integer overflow could occur when the number of elements to replace was too large for the container...

The vulnerability in the LDAP Account Manager web application exists due to the failure to take measures to neutralize special elements, allowing attackers to execute arbitrary code.

The vulnerability of the LDAP Account Manager web application exists due to the failure to take measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the /config/templates/pdf/ directory is accessible to users...

The vulnerability in the LDAP Account Manager web application exists due to the lack of measures taken to neutralize special elements, allowing attackers to use the user’s username field to manipulate LDAP data.

The vulnerability in the LDAP Account Manager web application exists due to the failure to take measures to neutralize certain special elements. Exploiting this vulnerability allows a malicious actor to use the user’s username field to manipulate LDAP data...

The vulnerability of the WWebView component of MCE Systems’ mobile device lifecycle management system allows a hacker to execute arbitrary commands.

The vulnerability of MCE Systems’ WWebView component in mobile device lifecycle management systems lies in the lack of measures taken to neutralize special elements used by the operating system when processing the value parameter. Exploiting this vulnerability allows an attacker to execute...

The vulnerability of the Mitel Service Appliance component of the MiVoice Connect VoIP devices from Mitel allows a perpetrator to execute arbitrary codes.

The vulnerability of the Mitel Service Appliance component in the MiVoice Connect VoIP devices of the MiVoice system exists due to the lack of measures taken to neutralize special elements used in the operating system. Exploiting this vulnerability allows a malicious actor to execute arbitrary co...

The vulnerability in the API interfaces of Google Chrome and Microsoft Edge browsers allows attackers to disclose protected information or cause service failures.

The vulnerability of Google Chrome and Microsoft Edge browser extension APIs is related to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to disclose protected information or cause service failures through a specially create...

The vulnerability of Trendnet TEW-831DR router microprogramming software lies in the lack of measures to neutralize special elements used in the operating system’s command set, allowing attackers to execute arbitrary commands.

The vulnerability of Trendnet TEW-831DR router microprogramming software is related to the lack of measures taken to neutralize special elements used in the operating system commands. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

CVE-2022-22980: Improper Neutralization of Special Elements used in an Expression Language Statement

A Spring Data MongoDB application is vulnerable to SpEL Injection when using @Query or @Aggregation-annotated query methods with SpEL expressions that contain query parameter placeholders for value binding if the input is not sanitized...

MAL-2022-2697 Malicious code in elements-sk-local (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fcd0bc0a4e78c684a3994821df16c1aa2473fc887ff980f419e9d68abcc710e0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgnsys/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4a203409a3a83b3d61ebd1bcde5d7bc7ff085acf3eb51020e0b17e4c68d360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-730 Malicious code in @wixui/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 841ae669556fea8cf1553cdb84ec5b5caf350f7c51e4fd778581137c797af69e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-214 Malicious code in @dsgnsys/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware de4a203409a3a83b3d61ebd1bcde5d7bc7ff085acf3eb51020e0b17e4c68d360 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgn-sys/editor-elements-corvid-utils (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2c7fe3693887a0b35be470744969abc99f121ce0eb8036ce3f5eef87d8cf515c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...