.NET Denial of Service Vulnerability

Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 5.0 and .NET Core 3.1. This advisory also provides guidance on what developers can do to update their applications to remove this vulnerability. A vulnerability exists in .NET 6.0, .NET 5....

CVE-2022-37434 affecting package zlib 1.2.12-1

CVE-2022-37434 affecting package zlib 1.2.12-1. A patched version of the package is available...

Security Bulletin: IBM Security Verify Governance is vulnerable to identity spoofing due to IBM WebSphere Application Server Liberty (CVE-2022-22475)

Summary IBM Security Verify Governance ISVG is vulnerable to identity spoofing due to IBM WebSphere Application Server Liberty CVE-2022-22475. ISVG uses IBM WebSphere Application Server Liberty as its application server runtime environment. The fix involves upgrading the application server to a...

Ethermint vulnerable to DoS through unintended Contract Selfdestruct

Vulnerability Report Impact Smart contract applications that make use of the selfdestruct functionality and their end-users. Classification The vulnerability has been classified as high with a CVSS score of 8.2. It has the potential to create a denial-of-service to all contracts that can invoke t...

GHSA-QMHJ-M29V-GVMR Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution

Impact py-cord is a an API wrapper for Discord written in Python. Bots using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are...

Exposure of Resource to Wrong Sphere

Ethermint is an Ethereum library. In Ethermint running versions before v0.17.2, the contract selfdestruct invocation permanently removes the corresponding bytecode from the internal database storage. However, due to a bug in the DeleteAccountfunction, all contracts that used the identical bytecod...

CVE-2022-32296 affecting package kernel 5.10.123.1-1

CVE-2022-32296 affecting package kernel 5.10.123.1-1. A patched version of the package is available...

CVE-2022-2078 affecting package kernel 5.10.123.1-1

CVE-2022-2078 affecting package kernel 5.10.123.1-1. A patched version of the package is available...

CVE-2021-37159 affecting package kernel 5.10.123.1-1

CVE-2021-37159 affecting package kernel 5.10.123.1-1. A patched version of the package is available...

CVE-2021-32078 affecting package kernel 5.10.123.1-1

CVE-2021-32078 affecting package kernel 5.10.123.1-1. A patched version of the package is available...

CVE-2022-34918 affecting package kernel 5.10.123.1-1

CVE-2022-34918 affecting package kernel 5.10.123.1-1. A patched version of the package is available...

CVE-2022-34494 affecting package kernel 5.10.123.1-1

CVE-2022-34494 affecting package kernel 5.10.123.1-1. A patched version of the package is available...

CVE-2022-2056 affecting package libtiff 4.4.0-1

CVE-2022-2056 affecting package libtiff 4.4.0-1. A patched version of the package is available...

WordPress Uploading SVG, WEBP and ICO files plugin <= 1.0.1 - Authenticated Arbitrary File Upload vulnerability

Authenticated Arbitrary File Upload vulnerability discovered by Universe Patchstack Alliance in WordPress Uploading SVG, WEBP and ICO files plugin versions = 1.0.1. Solution No patched version is available. Ignored by the vendor...

CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7

CVE-2022-4515 affecting package ctags for versions less than 5.9.20220619.0-7. A patched version of the package is available...

Security Bulletin: Apache log4j vulnerabilities in Spark and Zookeeper affect QRadar User Behavior Analytics(CVE-2021-4104)

Summary There is a vulnerability in Apache log4j used by Spark and Zookeeper that is affecting QRadar User Behavior AnalyticsUBA. This has been addressed in both dependencies and UBA has been updated to the patched versions. Vulnerability Details CVEID:CVE-2021-4104 DESCRIPTION: Apache Log4j coul...

CVE-2022-1652 affecting package kernel for versions less than 5.15.55.1-1

CVE-2022-1652 affecting package kernel for versions less than 5.15.55.1-1. A patched version of the package is available...

CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1

CVE-2022-34495 affecting package kernel for versions less than 5.15.55.1-1. A patched version of the package is available...

CVE-2022-33070 affecting package protobuf-c for versions less than 1.4.0-2

CVE-2022-33070 affecting package protobuf-c for versions less than 1.4.0-2. A patched version of the package is available...

Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path

Exploit Title: Asus GameSDK v1.0.0.4 - 'GameSDK.exe' Unquoted Service Path Date: 07/14/2022 Exploit Author: Angelo Pio Amirante Version: 1.0.0.4 Tested on: Windows 10 Patched version: 1.0.5.0 CVE: CVE-2022-35899 Step to discover the unquoted service path: wmic service get...