GHSA-PRC3-VJFX-VHM9 Angular (deprecated package) Cross-site Scripting

All versions of package angular are vulnerable to Cross-site Scripting XSS due to insecure page caching in the Internet Explorer browser, which allows interpolation of elements. NPM package angular is deprecated. Those who want to receive security updates should use the actively maintained packag...

Fedora: Security Advisory for golang-github-hashicorp-consul-migrate (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-rubenv-sql-migrate-0-0.4.20210529gita32ed26.fc36

sql-migrate is a SQL Schema migration tool for Go, based on gorp and goose...

GSD-2022-1002666 mm, compaction: fast_find_migrateblock() should return pfn in the target zone

mm, compaction: fastfindmigrateblock should return pfn in the target zone This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.18.3 by commit...

Malicious code in azure-arm-migrate-samples-js (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a0413908e2054a3f69cfed474b521ca739fca9c9e1df03da8ddea0d78999bfeb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in azure-arm-migrate-samples-ts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a978dd0dc9b2f0ec5bcf7de6d135ad2c4c38e95eac3f3f86b982be6d1083f5f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Users will lose all of their money during pool migration

Lines of code Vulnerability details Impact Users will lose all of their money when they migrate by calling PoolMigrationZap.migrate Proof of Concept File: protocol/contracts/zaps/PoolMigrationZap.sol 1 52 function migrateaddress oldPoolAddress public override 53 ILiquidityPool oldPool =...

Export any WordPress data to XML/CSV < 1.3.5 - Admin+ SQL Injection

The plugin does not sanitize the cpt POST parameter when exporting post data before using it in a database query, leading to an SQL injection vulnerability. 1. Go to the All Export New Export screen in the WordPress admin. 2. Now click on Specific Post Type Posts. 3. Click now on Migrate Posts an...

RUSTSEC-2022-0071 Rusoto is unmaintained

The maintainers of Rusoto advise that all its crates are deprecated. This includes the common crates rusotocore, rusotosignature, rusotocredential, and service crates such as rusotos3 and rusotoec2. Users should migrate to the AWS SDK for Rust, which is maintained by AWS...

Rusoto is unmaintained

The maintainers of Rusoto advise that all its crates are deprecated. This includes the common crates rusotocore, rusotosignature, rusotocredential, and service crates such as rusotos3 and rusotoec2. Users should migrate to the AWS SDK for Rust, which is maintained by AWS...

WordPress Migrate WordPress Website & Backups – Prime Mover plugin <= 1.4.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Migrate WordPress Website & Backups – Prime Mover plugin versions = 1.4.9. Solution Update the WordPress Migrate WordPress Website & Backups – Prime Mover plugin to the latest available version at leas...

GSD-2022-1000532 mm: don't try to NUMA-migrate COW pages that have other uses

mm: don't try to NUMA-migrate COW pages that have other uses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.16.11 by commit...

GSD-2022-1000385 mm: don't try to NUMA-migrate COW pages that have other uses

mm: don't try to NUMA-migrate COW pages that have other uses This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.102 by commit...

Metasploit Wrap-Up

Welcome, Little Hippo: PetitPotam Our very own @zeroSteiner ported the PetitPotam exploit to Metasploit this week. This module leverages CVE-2021-36942, a vulnerability in the Windows Encrypting File System EFS API, to capture machine NTLM hashes. This uses the EfsRpcOpenFileRaw function of the...

CVE-2019-12928

creationtimestamp| type| source ---|---|--- 2022-02-07 22:01:55+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/misc/qemumonitorhmpmigratecmdexec.rb 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:50:26+00:00|...

PT-2025-8521 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A data-race issue exists in the Linux kernel related to the sysctl tcp migrate req variable. This issue occurs because the variable can be changed concurrently while being read, which...

The vulnerabilities of the Azure Active Directory (AAD) identity management and protection platform, the Azure Automation service, the Azure Site Recovery disaster recovery tool, and the Azure Migrate data transfer service are related to authentication process flaws, allowing attackers to gain unauthorized access to protected information.

The vulnerabilities of the Azure Active Directory AAD identity management and protection platform, the Azure Automation service, the Azure Site Recovery disaster recovery tool, and the Azure Migrate data transfer service are related to authentication process flaws. Exploiting these vulnerabilitie...

KLA12348 OSI vulnerability in Microsoft Azure

An information disclosure vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2021-42306 Related products Microsoft-Active-Directory Microsoft-Azure CVE list CVE-2021-42306 unknown Solution Install...

CVE-2021-36363

Nagios XI before 5.8.5 has Incorrect Permission Assignment for migrate.php...

GHSA-VRW4-W73R-6MM8 TimelockController vulnerability in OpenZeppelin Contracts

Impact A vulnerability in TimelockController allowed an actor with the executor role to take immediate control of the timelock, by resetting the delay to 0 and escalating privileges, thus gaining unrestricted access to assets held in the contract. Instances with the executor role set to "open"...