855 matches found
MAL-2022-5504 Malicious code in ps-validations (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a50c241a7e98356e800a9f596795011aff2e24a2a0e6dd09ff2f6d939e6d428 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5501 Malicious code in ps-crypt (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8a3344ece704cd154a5d31406e030fcde233dcb88e1b8c72f5790bb4e9d1aa65 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in ps-cart-recovery (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2796fa288d4cdbb8c44fa760bce301d9f11d9f40f3707935733e2582b92244e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-5500 Malicious code in ps-cart-recovery (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2796fa288d4cdbb8c44fa760bce301d9f11d9f40f3707935733e2582b92244e4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Information Disclosure
convert2rhel is vulnerable to information disclosure. The vulnerability exists when the library passes the red hat account password to the subscription manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via...
Exploit for CVE-2022-30190
CVE-2022-30190-follina Just another PoC for the new MSDT-Explo...
Heap-based Buffer Overflow
htmldoc is vulnerable to heap-based buffer overflow. The vulnerability exists in pdfwritenames in ps-pdf.cxx which may lead to arbitrary code execution and crash of an application...
GHSA-H2P3-H48H-9JJ7 PIDUsage Enables OS Command Injection
Overview Affected versions of pidusage pass unsanitized input to childprocess.exec, resulting in arbitrary code execution in the ps method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. Proof of Concept js var pid =...
PIDUsage Enables OS Command Injection
Overview Affected versions of pidusage pass unsanitized input to childprocess.exec, resulting in arbitrary code execution in the ps method. This package is vulnerable to this PoC on Darwin, SunOS, FreeBSD, and AIX. Windows and Linux are not vulnerable. Proof of Concept js var pid =...
CVE-2022-30525 (FIXED): Zyxel Firewall Unauthenticated Remote Command Injection
Rapid7 discovered and reported a vulnerability that affects Zyxel firewalls supporting Zero Touch Provisioning ZTP, which includes the ATP series, VPN series, and the USG FLEX series including USG20-VPN and USG20W-VPN. The vulnerability, identified as CVE-2022-30525, allows an unauthenticated and...
CVE-2022-28085
A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdfwritenames in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service DoS...
DEBIAN-CVE-2022-28085
A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdfwritenames in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service DoS...
CVE-2022-28085
A flaw was found in htmldoc commit 31f7804. A heap buffer overflow in the function pdfwritenames in ps-pdf.cxx may lead to arbitrary code execution and Denial of Service DoS...
HTMLDOC 缓冲区错误漏洞
HTMLDOC is an open source program that converts HTML and Markdown files to EPUB, Indexed HTML, PostScript and PDF formats. A security vulnerability exists in HTMLDOC that stems from a heap-based buffer overflow in the function pdfwritenames in the ps-pdf.cxx component, which could lead to arbitra...
CVE-2022-0851
There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the activation key via the process command line v...
CVE-2022-25584
Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System 4.23-3000GY allows attackers to access sensitive information...
CVE-2022-25584
Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System 4.23-3000GY allows attackers to access sensitive information...
Information disclosure
Seyeon Tech Co., Ltd FlexWATCH FW3170-PS-E Network Video System 4.23-3000GY allows attackers to access sensitive information...
CVE-2022-25584
The CVE-2022-25584 entry affects Seyeon Tech FlexWATCH FW3170-PS-E Network Video System, specifically version 4.23-3000_GY. The connected documents confirm a vulnerability in that product that could allow attackers to access sensitive information via network access (attack vector: network; impact...
