CVE-2022-0997

Fidelis Network and Deception - CVE-2022-0997 - 不適切なファイル権限による特権昇格 公開と謝辞 本エクスプロイトは、米国政府による公開が承認されています。無制限配布のための文書化を承認してくださった軍人および政府関係者に特に感謝します。以下のOTR番号を参照してください。 OTR-2022-00487 メタデータ 日時: 20220516 0123H UTC エクスプロイト作成者: Henry Reed, The Aerospace Corporation ベンダーホームページ: https://fidelissecurity.com/...

EUVD-2021-21693

Malware in sbrugna...

EUVD-2021-21692

Malware in sbrugna...

EUVD-2021-21695

Malware in sbrugna...

EUVD-2022-29285

Malicious code in bioql PyPI...

EUVD-2022-29283

Malicious code in bioql PyPI...

EUVD-2022-29286

Malicious code in bioql PyPI...

EUVD-2022-29281

Malicious code in bioql PyPI...

EUVD-2022-15623

Malicious code in bioql PyPI...

EUVD-2022-29284

Malicious code in bioql PyPI...

EUVD-2022-15990

Malicious code in bioql PyPI...

Exploit for Incorrect Default Permissions in Fidelissecurity Deception

Fidelis Network and Deception - CVE-2022-0486 - Insecure File...

Fidelis Network Deception SQL Injection Vulnerability

Fidelis Network Deception is a security product from Fidelis USA. It is used to detect threats and prevent data loss with features such as detecting malicious behavior, identifying traffic anomalies, and automatically responding to advanced threats. A SQL injection vulnerability exists in Fidelis...

Fidelis Network Deception Command Injection Vulnerability (CNVD-2022-59169)

Fidelis Network Deception is a security product from Fidelis USA, Inc. A security vulnerability exists in versions prior to Fidelis Network Deception 9.4.5, which stems from the CommandPost cplp parameter when using the checkverticaupgrade value. Command injection exists, and an attacker can use...

Fidelis Network Deception Command Injection Vulnerability

Fidelis Network Deception is a security product from Fidelis USA. It is used to detect threats and prevent data loss with features such as detecting malicious behavior, identifying traffic anomalies, and automatically responding to advanced threats. A command injection vulnerability exists in...

Fidelis Network Deception has an unspecified vulnerability (CNVD-2022-59168)

Fidelis Network Deception is a security product from Fidelis USA, Inc. It is used to detect threats and prevent data loss, with features such as detecting malicious behavior, identifying traffic anomalies, and automatically responding to advanced threats.A security vulnerability exists in version...

Fidelis Network Deception Command Injection Vulnerability (CNVD-2022-59170)

Fidelis Network Deception is a security product from Fidelis USA. A security vulnerability exists in versions prior to Fidelis Network Deception 9.4.5, which stems from a problem with date in rconfig. An attacker with CLI user-level access could exploit the vulnerability to inject root-level...

Fidelis Network Deception Command Injection Vulnerability (CNVD-2022-59166)

Fidelis Network Deception is a security product from Fidelis USA, Inc. A command injection vulnerability exists in versions prior to Fidelis Network Deception 9.4.5, which stems from the filename parameter of CommandPost when using the updatecheckfile value. Command injection exists, and an...

Fidelis Network Deception has an unspecified vulnerability (CNVD-2022-59167)

Fidelis Network Deception is a security product from Fidelis USA, Inc. It is used to detect threats and prevent data loss, with features such as detecting malicious behavior, identifying traffic anomalies, and automatically responding to advanced threats.A security vulnerability exists in version...

CVE-2022-24392

Vulnerability in Fidelis Network and Deception CommandPost enables authenticated command injection through the web interface using the “feedcommtest” value for the “feed” parameter. The vulnerability could allow a specially crafted HTTP request to execute system commands on the CommandPost and...