GHSA-59X4-67MH-PX54 Crypt_GPG does not prevent additional options in GPG calls

The CryptGPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions...

Crypt_GPG does not prevent additional options in GPG calls

The CryptGPG extension before 1.6.7 for PHP does not prevent additional options in GPG calls, which presents a risk for certain environments and GPG versions...

Portainer code issue vulnerability

A code issue vulnerability exists in Portainer Agent, a lightweight user management interface for managing Docker environments and Docker hosts, which stems from the product's failure to associate Portainer instances with past time. An attacker could exploit the vulnerability to cause the API...

vulhub

This is an offensive tool repository for vulnerability research and exploitation. It is a collection of vulnerable environments and exploits for various software and frameworks, including CouchDB, FFmpeg, Git, and others. The repository is maintained by Vulhub, a community-driven project for...

Apache Pulsar Input Validation Error Vulnerability

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication,...

PrinterLogic Web Stack Insecure Direct Object Reference (IDOR) Vulnerability

PrinterLogic Web Stack PrinterLogic Printer Installer is a native Web application from PrinterLogic USA, Inc. Enabling the It department to manage and automate the creation/propagation of PrinterObjects and printer drivers across print environments from a single management console. PrinterLogic W...

Schneider Electric EcoStruxure Power Monitoring Expert 输入验证错误漏洞

The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric, a French company, for power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert has a security vulnerability that stems from an incorrect input...

New Wave of Cyber Attacks Target Palestine with Political Bait and Malware

Cybersecurity researchers have turned the spotlight on a new wave of offensive cyberattacks targeting Palestinian activists and entities starting around October 2021 using politically-themed phishing emails and decoy documents. The intrusions are part of what Cisco Talos calls a longstanding...

Vulnerability Remediation: It’s Not Just Patching

Vulnerability does not equal a patch, as such remediating a detected vulnerability requires deploying the right patches and, in some cases, making the right configuration changes. Using multiple tools to detect, map and deploy the right remediation actions is time consuming and will result in les...

Security Bulletin: Code injection vulnerability in IBM Spectrum Protect for Virtual Environments and IBM Spectrum Protect Snapshot for VMware (CVE-2020-4693)

Summary Due to improper validation of data prior to export, IBM Spectrum Protect for Virtual Environments and IBM Spectrum Protect Snapshot for VMware may allow an attacker to execute arbitrary code on the system. Vulnerability Details CVEID: CVE-2020-4693 DESCRIPTION: IBM Spectrum Protect produc...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Spectrum Protect Snapshot on AIX (CVE-2019-4473, CVE-2019-11771)

Summary Multiple vulnerabilities in IBM Runtime Environment Java were disclosed as part of the IBM Java SDK updates in July 2019. IBM Runtime Environment Java is used by IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager on AIX. Vulnerability Details CVEID: CVE-2019-4473...

Security Bulletin: Security vulnerabilities have been identified in the IBM Spectrum Protect (formerly Tivoli Storage Manager) Client that affect multiple IBM Spectrum Protect (formerly Tivoli Storage Manager) products

Summary The IBM Spectrum Protect formerly Tivoli Storage Manager Client/API is used as a component of IBM Spectrum Protect Snapshot formerly Tivoli Storage FlashCopy Manager for Windows, IBM Spectrum Protect formerly Tivoli Storage Manager HSM for Windows, IBM Spectrum Protect formerly Tivoli...

Security Bulletin: Security vulnerabilities have been identified in the Tivoli Storage Manager (IBM Spectrum Protect) Client that affect multiple Tivoli Storage Manager (IBM Spectrum Protect) products

Summary The Tivoli Storage Manger IBM Spectrum Protect Client/API is used as a component of Tivoli Storage FlashCopy Manager IBM Spectrum Protect Snapshot for Windows, Tivoli Storage Manager IBM Spectrum Protect HSM for Windows, Tivoli Storage Manager IBM Spectrum Protect for Databases, Tivoli...

CVE-2022-23727

There is a privilege escalation vulnerability in some webOS TVs. Due to wrong setting environments, local attacker is able to perform specific operation to exploit this vulnerability. Exploitation may cause the attacker to obtain a higher privilege...

PT-2022-16231 · Lg · Webos Tv

Name of the Vulnerable Software and Affected Versions: webOS TVs affected versions not specified Description: The issue is related to a privilege escalation vulnerability in webOS TVs, where a local attacker can exploit wrong setting environments to obtain higher privileges. This can be achieved ...

Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-13055)

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Cluster is a highly useful and redundant version for distributed computing environments. Oracle MySQL Cluster is vulnerable to an input validation error, which can be exploited by attackers to...

Oracle Java SE Input Validation Error Vulnerability (CNVD-2022-15489)

Oracle Java SE is an Oracle Corporation USA product for developing and deploying Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to potentially cause an...

Oracle Java SE Input Validation Error Vulnerability (CNVD-2022-15483)

Oracle Java SE, an Oracle company, is used to develop and deploy Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE is vulnerable to an input validation error that could be exploited by an attacker to cause unauthorized read access to a subse...

Oracle MySQL Cluster Input Validation Error Vulnerability (CNVD-2022-13061)

Oracle MySQL is an open source relational database management system from Oracle Corporation. MySQL Cluster is a highly useful, highly redundant version of Oracle MySQL Cluster for distributed computing environments. The vulnerability can be exploited to read memory content or crash an applicatio...

The Internet’s Most Tempting Targets

The number of exposed assets keeps climbing, but existing security strategies aren’t keeping up. Attack surfaces are getting more complex, and the excruciatingly hard part is figuring out where to focus. For every 1,000 assets on an attack surface, there is often only one that’s truly interesting...