4131 matches found
PT-2023-1019 · Schneider Electric · Ecostruxure Geo Scada Expert +1
Name of the Vulnerable Software and Affected Versions: EcoStruxure Geo SCADA Expert versions 2019 through 2021 prior to October 2022 ClearSCADA versions prior to the fixed version Description: A vulnerability exists that could cause Denial of Service against the Geo SCADA server when specific...
October CMS 1.0.471 / 1.1.1 < 1.1.5 Improper Authentication
October CMS is a CMS platform based on the Laravel PHP Framework. In affected versions of the october/system package an attacker can request an account password reset and then gain access to the account using a specially crafted request. No source data...
Exploit for Deserialization of Untrusted Data in Microsoft
CVE-2022-41082-POC PoC for the CVE-2022-41082 NotProxyShell OW...
Security Bulletin: Multiple vulnerabilities in IBM Java SDK (October 2022) affect IBM InfoSphere Information Server
Summary There are multiple vulnerabilities in the IBM® SDK Java™ Technology Edition, Version 8 that is used by IBM InfoSphere Information Server. These issues were disclosed as part of the IBM Java SDK updates in October 2022. Vulnerability Details CVEID:CVE-2022-21626 DESCRIPTION: An unspecified...
Security Bulletin: Multiple security vulnerabilities has been identified in IBM WebSphere Application Server shipped with Tivoli Netcool/OMNIbus WebGUI - October 2022 CPU
Summary Websphere Application Server WAS is shipped as a component of Tivoli Netcool/OMNIbus WebGUI. Information about security vulnerabilities affecting WAS has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes section...
North Korean Hackers Spread AppleJeus Malware Disguised as Cryptocurrency Apps
The Lazarus Group threat actor has been observed leveraging fake cryptocurrency apps as a lure to deliver a previously undocumented version of the AppleJeus malware, according to new findings from Volexity. "This activity notably involves a campaign likely targeting cryptocurrency users and...
Chromecast Security Bulletin—December 2022Stay organized with collectionsSave and categorize content based on your preferences.
The Chromecast Security Bulletin contains details of security vulnerabilities affecting supported Chromecast with Google TV devices Chromecast devices. For Chromecast devices, security patch levels of 2022-10-05 or later address all applicable issues in the October 2022 Android Security Bulletin...
Security Bulletin: Multiple vulnerabilities in IBM® Java SDK affect WebSphere Service Registry and Repository due to October 2022 CPU
Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, used by WebSphere Service Registry and Repository. These issues were disclosed as part of the IBM Java SDK updates in October 2022. These issues are addressed by WebSphere Application Server shipped with WebSphere...
Security Bulletin: Vulnerabilities have been identified in IBM WebSphere Application Server traditional and Liberty profile shipped with IBM Business Automation Workflow and IBM Business Process Manager Enterprise Service Bus (Java CPU October 2022)
Summary WebSphere Application Server traditional and WebSphere Application Server Liberty profile are shipped as a component of IBM Business Automation Workflow and IBM Business Process Manager Enterprise Service Bus. Information about security vulnerabilities affecting IBM WebSphere Application...
java-1.8.0-openjdk bug fix and enhancement update
An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This erratum reinstates changes made to java-1.8.0-openjdk in Rock...
java-1.8.0-openjdk bug fix and enhancement update
An update is available for java-1.8.0-openjdk. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list This erratum reinstates changes made to java-1.8.0-openjdk in Rock...
The Bug Report October 2022 Edition
The Bug Report — October 2022 Edition By Trellix · November 2, 2022 This story was written by Richard Johnson. Do ROP exploits count as jmp scares? Why am I here? Welcome back to the Bug Report: Spooky Edition, and we’ve got bugs crawling out of the walls! Of all the months we do this, we’ve foun...
The Bug Report October 2022 Edition
The Bug Report — October 2022 Edition By Trellix · November 2, 2022 This story was written by Richard Johnson. Do ROP exploits count as jmp scares? Why am I here? Welcome back to the Bug Report: Spooky Edition, and we’ve got bugs crawling out of the walls! Of all the months we do this, we’ve foun...
World’s Leading Copper Producer Aurubis Suffers Crippling Cyberattack
By Deeba Ahmed According to a statement from the Germany-based Aurubis, the attack was detected on the night of October 28th. This is a post from HackRead.com Read the original post: Worlds Leading Copper Producer Aurubis Suffers Crippling Cyberattack...
Security Bulletin: Multiple security vulnerabilities are addressed with IBM Cloud Pak for Business Automation iFixes for October 2022
Summary In addition to many updates of operating system level packages, the following security vulnerabilities are addressed with IBM Cloud Pak for Business Automation 21.0.3-IF014 and 22.0.1-IF004. Vulnerability Details CVEID:CVE-2022-32214 DESCRIPTION: Node.js is vulnerable to HTTP request...
CVE-2022-3658
creationtimestamp| type| source ---|---|--- 2022-10-27 18:40:05+00:00| seen| https://t.me/truesecator/3629 2022-11-02 01:19:26+00:00| seen| https://t.me/cibsecurity/52451...
CVE-2022-3714
creationtimestamp| type| source ---|---|--- 2022-10-27 14:28:20+00:00| seen| https://t.me/cibsecurity/52139...
CVE-2010-2261
creationtimestamp| type| source ---|---|--- 2022-10-27 07:39:46+00:00| seen| MISP/b2ae918a-f037-4dc1-8819-f2aa7e0f66f9...
