PT-2022-29415

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to 5.17.2 Description A potential security issue has been identified, although its actual impact and attack plausibility have not yet been proven. The issue is related to the ir toy media component and is triggered...

Sharpen Your IR Capabilities With Rapid7’s Detection and Response Workshop

You’re tasked with protecting your environment, and you’ve invested significant time and resources into deploying and configuring your tools — but how do you know if the security controls you’ve put into place are effective? The challenge continues to grow as attacker tactics, techniques, and...

gm0.ir Cross Site Scripting vulnerability OBB-2463791

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-16886

Name of the Vulnerable Software and Affected Versions IR Rd versions 4.2.0 through 4.2.2 Description The issue is related to the Internet Routing Registry daemon version 4, which is an IRR database server processing IRR objects in the RPSL format. IRRd did not always filter password hashes in que...

CVE-2022-0237

Rapid7 Insight Agent versions 3.1.2.38 and earlier suffer from a privilege escalation vulnerability, whereby an attacker can hijack the flow of execution due to an unquoted argument to the runas.exe command used by the iragent.exe component, resulting in elevated rights and persistent access to t...

PT-2022-13056

Name of the Vulnerable Software and Affected Versions Rapid7 Insight Agent versions 3.1.2.38 and earlier Description The issue allows an attacker to hijack the flow of execution due to an unquoted argument to the runas.exe command used by the ir agent.exe component, resulting in elevated rights a...

agahi360.ir Improper Access Control vulnerability OBB-2424889

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

onw3.ir Cross Site Scripting vulnerability OBB-2371123

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Google TensorFlow 缓冲区错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow suffers from a buffer overflow vulnerability that can be exploited by an attacker to change the format of the SavedModel on disk to invalidate these assumptions, and then...

PT-2022-38060

Уязвимость функции irtoy probe модуля drivers/media/rc/ir toy.c драйвера поддержки мультимедийных устройств ядра операционной системы Linux связана с ошибками в коде. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

PT-2025-7954

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A leak in the error path has been fixed in the Linux kernel, specifically in the ir toy media module. The issue involved freeing resources before exiting due to an error. Recommendations...

farsnews.ir Cross Site Scripting vulnerability OBB-2309546

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

up6.ir Cross Site Scripting vulnerability OBB-2304397

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Fortinet FortiClient Dylib injection (FG-IR-21-079) (macOS)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-079 advisory. - An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and...

mail.allah1.ir Cross Site Scripting vulnerability OBB-2284379

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

mp4.ir Cross Site Scripting vulnerability OBB-2200181

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| mp4.ir ---|--- Open Bug Bounty Program:...

sigmateam96.ir Improper Access Control vulnerability OBB-2174716

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[SECURITY] Fedora 34 Update: rust-cranelift-wasm-0.77.0-1.fc34

Translator from WebAssembly to Cranelift IR...

[SECURITY] Fedora 34 Update: rust-cranelift-frontend-0.77.0-1.fc34

Cranelift IR builder helper...

Fedora: Security Advisory for rust-cranelift-wasm (FEDORA-2021-68713440cb)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...