UBUNTU-CVE-2022-48303

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...

Malicious Package

Overview react-redux-4 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...

Malicious Package

Amendment This was deemed not a vulnerability. Overview dtautodevweb is a malicious package. Note: This package was uncovered by one of Snyk's automated algorithms, and was since confirmed to be a proof-of-concept package uploaded by a researcher. It has been removed from the ecosystem and does n...

Experts Uncover the Identity of Mastermind Behind Golden Chickens Malware Service

Cybersecurity researchers have discovered the real-world identity of the threat actor behind Golden Chickens malware-as-a-service, who goes by the online persona "badbullzvenom." eSentire's Threat Response Unit TRU, in an exhaustive report published following a 16-month-long investigation, said i...

CVE-2023-0533

A vulnerability, which was classified as critical, has been found in SourceCodester Online Tours & Travels Management System 1.0. Affected by this issue is some unknown functionality of the file admin/expensereport.php. The manipulation of the argument fromdate leads to sql injection. The attack...

Online Tours & Travels Management System SQL注入漏洞

Online Tours & Travels Management System is an online travel management system by Mayuri K. Individual developer. A SQL injection vulnerability exists in SourceCodester Online Tours & Travels Management System version 1.0, which stems from an incorrect operation of the parameter fromdate that can...

PT-2023-16339 · Sourcecodester · Sourcecodester Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Tours & Travels Management System version 1.0 Description: A critical issue has been found in the system, affecting some unknown functionality of the file admin/expense report.php. The manipulation of the from date...

Mozilla: URL being dragged from cross-origin iframe into same tab triggers navigation

The Mozilla Foundation Security Advisory describes this flaw as: Navigations were being allowed when dragging a URL from a cross-origin iframe into the same tab which could lead to website spoofing attacks...

sinatra: Reflected File Download attack

A flaw was found in Sinatra, a domain-specific language for creating web applications in Ruby. An application is vulnerable to a reflected file download RFD attack that sets the Content-Disposition header of a response when the filename is derived from user-supplied input...

CVE-2021-36647

creationtimestamp| type| source ---|---|--- 2023-01-18 00:15:23+00:00| seen| https://t.me/cibsecurity/56623 2025-04-08 20:46:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/11007...

Twitter Denies Hacking Claims, Assures Leaked User Data Not from its System

Twitter on Wednesday said that its investigation found "no evidence" that users' data sold online was obtained by exploiting any security vulnerabilities in its systems. "Based on information and intel analyzed to investigate the issue, there is no evidence that the data being sold online was...

CVE-2023-20529

Insufficient bound checks in the SMU may allow an attacker to update the from/to address space to an invalid value potentially resulting in a denial of service...

Security fix for the ALT Linux 9 package libetpan version 1.9.4-alt3

1.9.4-alt3 built Jan. 11, 2023 Mikhail Efremov in task 312090 Dec. 20, 2022 Mikhail Efremov - Fixed libssl knob. - Fixed License tag. - Added Vcs tag. - Patch from upstream: + Fixed crash when stinfolist is NULL fixes: CVE-2022-4121...

ZenLib 代码问题漏洞

ZenLib is a small C++ derived class of MediaArea open source. A code issue vulnerability exists in MediaArea ZenLib versions prior to 0.4.38, which stems from the function Ztring::DateFromSeconds1970Local in the file Source/ZenLib/Ztring.cpp, where manipulation of the parameter Value results in a...

PT-2023-11816 · Mediaarea +3 · Mediaarea Zenlib +3

Name of the Vulnerable Software and Affected Versions: MediaArea ZenLib versions up to 0.4.38 Description: A problematic vulnerability has been found in MediaArea ZenLib. This issue affects the function Ztring::Date From Seconds 1970 Local of the file Source/ZenLib/Ztring.cpp. The manipulation of...

My age+YubiKeys Password Management Solution

Password managers are in the news, and its the holidays, so its as good a time as ever to describe my password and secret management setup. Its very much not for everyone, but its minimal, simple, and has some interesting security properties: even if my laptop were compromised, it would take an...

CVE-2021-4277: Predictable from Observable State

A vulnerability, which was classified as problematic, has been found in fredsmith utils. This issue affects some unknown processing of the file screenshotsync of the component Filename Handler. The manipulation leads to predictable from observable state. The name of the patch is...

CVE-2022-38873

creationtimestamp| type| source ---|---|--- 2022-12-20 22:12:40+00:00| seen| https://t.me/cibsecurity/54998 2025-04-17 13:57:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12214...

PT-2022-24505 · Ibm · Bigfix Webui

Name of the Vulnerable Software and Affected Versions: BigFix WebUI affected versions not specified Description: The issue concerns BigFix WebUI non-master operators who are missing necessary controls. These operators can modify the relevance of fixlets or deploy fixlets from the BES Support...

Important: Red Hat Security Advisory: thunderbird security update

An update for thunderbird is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...