CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

Design/Logic Flaw

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-40216 WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability

Auth. subscriber+ Messaging Block Bypass vulnerability in Better Messages plugin = 1.9.10.69 on WordPress...

CVE-2022-40216 WordPress Better Messages plugin <= 1.9.10.69 - Auth. Messaging Block Bypass vulnerability

Auth. subscriber+ Messaging Block Bypass vulnerability in Better Messages plugin = 1.9.10.69 on WordPress...

CVE-2022-40216

CVE-2022-40216 affects the WordPress Better Messages plugin. Affected versions are

OpenStack 安全漏洞

OpenStack is a cloud platform management program of the National Aeronautics and Space Administration NASA. OpenStack has a security vulnerability that stems from plain text passwords being saved in /var/log/messages...

CVE-2022-38871

CVE-2022-38871 affects Free5gc v3.0.5, where the AMF can break due to malformed NAS messages. The issue is limited to the AMF component and is described with a high impact on availability (CVE score 7.5, network attack vector, no privileges required). The provided documents consistently describe ...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

PT-2022-25983 · Unknown · Bp Better Messages

Name of the Vulnerable Software and Affected Versions: Better Messages plugin version 1.9.10.68 Description: The issue is related to an Authenticated Server-Side Request Forgery SSRF vulnerability. This means that an attacker could potentially forge requests to internal or external services, but...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

WordPress plugin Better Messages 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

PT-2022-25288 · WordPress · Bp Better Messages

Name of the Vulnerable Software and Affected Versions: Better Messages plugin versions = 1.9.10.69 Description: The issue is related to an authentication bypass vulnerability in the Better Messages plugin for WordPress, specifically affecting messaging block functionality for subscribers and abov...

Wire 日志信息泄露漏洞

Wire is a chat software from the German company Wire. The software supports Web, WindowsiOS, Android, and OS X platforms, has group functionality, can make voice calls, send photos, and its original greeting method, PING. Wire 3.22.3993 and earlier versions contain an information disclosure...

PT-2022-24601 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5gc version 3.0.5 Description: The issue arises due to malformed NAS messages, causing the AMF to break. Recommendations: For Free5gc version 3.0.5, consider implementing input validation to handle malformed NAS messages properly until a...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-43673

Wire through 3.22.3993 on Windows advertises deletion of sent messages; nonetheless, all messages can be retrieved for a limited period of time from the AppData\Roaming\Wire\IndexedDB\httpsapp.wire.com0.indexeddb.leveldb database...

CVE-2022-42985

The ScratchLogin extension through 1.1 for MediaWiki does not escape verification failure messages, which allows users with administrator privileges to perform cross-site scripting XSS...

PT-2022-26695 · Mediawiki · Scratchlogin Extension

Name of the Vulnerable Software and Affected Versions: ScratchLogin extension versions 1.1 and earlier for MediaWiki Description: The issue allows users with administrator privileges to perform cross-site scripting XSS due to the failure to escape verification failure messages. Recommendations: F...

Another Event-Related Spyware App

Last month, we were warned not to install Qatars World Cup app because it was spyware. This month, its Egypts COP27 Summit app: The app is being promoted as a tool to help attendees navigate the event. But it risks giving the Egyptian government permission to read users emails and messages. Even...

Vulnerability fixed in Zoom

A vulnerability has been fixed in Zoom. The vulnerability allows a local malicious party to gain access to sensitive data, such as meeting data and chat messages sent during meetings. This is caused by a combination of insufficient cleaning of the data after the meeting is closed and the use of a...