EQS Integrity Line Cross Site Scripting / Information Disclosure

EQS Integrity Line: Multiple Vulnerabilities Name Multiple Vulnerabilities in EQS Integrity Line Systems Affected EQS Integrity Line through 2022-07-01 Severity High Impact CVSSv2 High 8.8/10, score: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor EQS Group AG https://www.eqs.com/ Advisory...

EQS Integrity Line 跨站脚本漏洞

EQS Integrity Line is a secure and anonymous reporting software from EQS Germany. EQS Integrity Line suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute JavaScript code on the client side...

rubygem-puma: Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') in puma

An HTTP Request Smuggling vulnerability was found in puma. When using puma with a proxy, which forwards LF characters as line endings, an attacker could use this flaw to smuggle a request through a proxy, causing the proxy to send a response back to another unknown client...

PT-2022-3643 · Fortinet · Fortinac

Name of the Vulnerable Software and Affected Versions: FortiNAC versions 8.3.7 and below FortiNAC versions 8.5.2 and below FortiNAC versions 8.5.4 FortiNAC version 8.6.0 FortiNAC versions 8.6.5 and below FortiNAC versions 8.7.6 and below FortiNAC versions 8.8.11 and below FortiNAC versions 9.1.5...

Protect

A stack-based buffer overflow vulnerability CWE-121 in the command line interpreter of FortiOS and FortiProxy may allow an authenticated attacker to execute unauthorized code or commands via specially crafted command line arguments...

[SECURITY] Fedora 36 Update: vultr-cli-2.12.2-2.fc36

Official command line tool for Vultr services...

[SECURITY] Fedora 36 Update: xq-0.0.7-4.fc36

Command line XML beautifier and content extractor. Similar to jq...

[SECURITY] Fedora 36 Update: toolbox-0.0.99.3-5.fc36

Toolbox is a tool for Linux operating systems, which allows the use of containerized command line environments. It is built on top of Podman and other standard container technologies from OCI...

[SECURITY] Fedora 36 Update: hcloud-1.29.5-3.fc36

A command-line interface for Hetzner Cloud...

[SECURITY] Fedora 36 Update: grpcurl-1.8.6-3.fc36

Like cURL, but for gRPC: Command-line tool for interacting with gRPC servers...

[SECURITY] Fedora 36 Update: golang-gopkg-neurosnap-sentences-1-1.0.6-14.fc36

This command line utility will convert a blob of text into a list of sentence s...

[SECURITY] Fedora 36 Update: golang-github-posener-complete-1.2.3-8.fc36

Package Complete provides a tool for bash writing bash completion in go, and bash completion for the go command line. Writing bash completion scripts is a hard work. This package provides an easy way to create bash completion scripts for any command, and also an easy way to install/uninstall the...

[SECURITY] Fedora 36 Update: golang-github-cloudflare-0.21.0-3.fc36

A Go library for interacting with Cloudflare's API v4. This library allows you to: - Manage and automate changes to your DNS records within Cloudflare - Manage and automate changes to your zones domains on Cloudflare, includi ng adding new zones to your account - List and modify the status of WAF...

[SECURITY] Fedora 36 Update: golang-github-c-bata-prompt-0.2.6-4.fc36

A library for building powerful interactive prompts inspired by python-prompt-toolkit, making it easier to build cross-platform command line tools using Go...

[SECURITY] Fedora 36 Update: fzf-0.30.0-3.fc36

fzf is a general-purpose command-line fuzzy finder. It's an interactive Unix filter for command-line that can be used with any list; files, command history, processes, hostnames, bookmarks, git commits, etc...

[SECURITY] Fedora 36 Update: gh-2.12.1-3.fc36

GitHub=EF=BF=BD=EF=BF=BD=EF=BF=BDs official command line tool...

Fedora: Security Advisory for gh (FEDORA-2022-4a48180f3f)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: gh-2.13.0-1.fc36

GitHub=EF=BF=BD=EF=BF=BD=EF=BF=BDs official command line tool...

CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME are met, allows signature forgery via injection into the status line...

CVE-2022-34903

GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other constraints e.g., use of GPGME are met, allows signature forgery via injection into the status line...