CVE-2022-28382

CVE-2022-28382 concerns Verbatim drives where the firmware (INIC-3637EN/ENIC-3637EN) uses AES-256 in ECB mode. This deterministic block cipher mode encrypts identical 16-byte blocks to identical ciphertext, enabling potential leakage of information from encrypted data (e.g., bitmap-like content)....

PT-2022-18994

Name of the Vulnerable Software and Affected Versions Verbatim Executive Fingerprint Secure SSD GDMSFE01-INI3637-C VER1.1 Verbatim Fingerprint Secure Portable Hard Drive Part Number 53650 Description An issue was discovered in certain Verbatim drives due to missing integrity checks, allowing an...

PT-2022-18996

Name of the Vulnerable Software and Affected Versions Verbatim Executive Fingerprint Secure SSD GDMSFE01-INI3637-C version VER1.1 Verbatim Fingerprint Secure Portable Hard Drive Part Number 53650 affected versions not specified Description An issue was discovered in certain Verbatim drives due to...

HUAWEI HarmonyOS has an unspecified vulnerability (CNVD-2022-66180)

HUAWEI HarmonyOS is an operating system from Huawei of China HUAWEI. It provides a microkernel-based distributed operating system. A security vulnerability exists in HUAWEI HarmonyOS 2.0, which stems from a design flaw in the fingerprint module that could be exploited by an attacker to compromise...

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from Huawei of China HUAWEI. It provides a microkernel-based distributed operating system. A security vulnerability exists in HUAWEI HarmonyOS 2.0, which stems from a design flaw in the fingerprint module that could be exploited by an attacker to compromise...

org.jenkins-ci.main:jenkins-test-harness (1.440), org.jenkins-ci.main:jenkins-war (1.440) +9 more potentially affected by CVE-2021-21640 via org.jenkins-ci.main:jenkins-core (1.440)

org.jenkins-ci.main:jenkins-core MAVEN version 1.440 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.440 - org.jenkins-ci.main:jenkins-war 1.440 -...

GHSA-F585-9FW3-RJ2M Arbitrary file existence check in file fingerprints in Jenkins

Jenkins provides a feature for jobs to store and track fingerprints of files used during a build. Jenkins 2.274 and earlier, LTS 2.263.1 and earlier provides a REST API to check where a given fingerprint was used by which builds. This endpoint does not fully validate that the provided fingerprint...

org.jenkins-ci.main:jenkins-test-harness (1.440), org.jenkins-ci.main:jenkins-war (1.440) +9 more potentially affected by CVE-2020-2104 via org.jenkins-ci.main:jenkins-core (1.440)

org.jenkins-ci.main:jenkins-core MAVEN version 1.440 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.440 - org.jenkins-ci.main:jenkins-war 1.440 -...

GHSA-3297-944X-J7X7 Incorrect Authorization in Jenkins Core

Jenkins before versions before 2.44 are vulnerable to an insufficient permission check for periodic processes SECURITY-389. The URLs /workspaceCleanup and /fingerprintCleanup did not perform permission checks, allowing users with read access to Jenkins to trigger these background processes that a...

org.jenkins-ci.main:jenkins-test-harness (1.440), org.jenkins-ci.main:jenkins-war (1.440) +9 more potentially affected by CVE-2018-1999007 via org.jenkins-ci.main:jenkins-core (1.440)

org.jenkins-ci.main:jenkins-core MAVEN version 1.440 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - org.jenkins-ci.main:jenkins-test-harness 1.440 - org.jenkins-ci.main:jenkins-war 1.440 -...

curl: CURLOPT_SSH_HOST_PUBLIC_KEY_MD5 bypass if string not 32 chars

Summary: Due to logic flaw in CURLOPTSSHHOSTPUBLICKEYMD5 handling, the host fingerprint validation will be bypassed if the passed a string that is not exactly 32 characters long. Steps To Reproduce: 1. curleasysetoptcurl, CURLOPTSSHHOSTPUBLICKEYMD5, "afe17cd62a0f3b61f1ab9cb22ba269a"; // 31 chars ...

Spock SLAF - A Shared Library Application Firewall "SLAF"

Spock SLAF is a Shared Library Application Firewall "SLAF". It has the purpose to protect any service that uses the OpenSSL library. The SLAF inserts hooking to intercept all communication to detect security anomalies and block and log attacks like buffer overflow, path traversal, XXE and SQL...

WIZPLAT PD065 Denial of Service Vulnerability

WIZPLAT PD065 is a fingerprint-aware secure USB memory from WIZPLAT Korea.A denial of service vulnerability exists in WIZPLAT PD065 v1.19, which stems from a failure to properly verify authentication in the authentication module. An attacker could use this vulnerability to access sensitive data a...

WIZPLAT PD065 安全漏洞

WIZPLAT PD065 is a fingerprint-aware secure USB memory from WIZPLAT Korea.A denial of service vulnerability exists in WIZPLAT PD065 v1.19, which stems from a failure to properly verify authentication in the authentication module. An attacker could use this vulnerability to access sensitive data a...

CVE-2022-0949

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbotsgravafingerprint AJAX action, available to unauthenticated users,...

CVE-2022-0949

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbotsgravafingerprint AJAX action, available to unauthenticated users,...

PT-2022-13549

Name of the Vulnerable Software and Affected Versions The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin versions prior to 6.930 Description The issue arises from the improper sanitization and escaping of the fingerprint parameter before its use in...

CVE-2022-0949: Improper Neutralization of Special Elements used in an SQL Command

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbotsgravafingerprint AJAX action, available to unauthenticated users,...

WordPress plugin stopbadbots SQL注入漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an open source application plugin for WordPress. A security vulnerability exists in the WordPress plugin...

Fingerprint Attendance 1.0 Shell Upload Vulnerability

Title: Fingerprint Attendance 1.0 Shell Upload Author: Hejap Zairy Vendor: https://www.vetbossel.in/fingerprint-attendance-project-php/ Software: https://app.box.com/s/xlyqalhvayq8oi25tqykcbouzrrjytqy Reference: https://github.com/Matrix07ksa Tested on: Windows, MySQL, Apache registered user can...