169 matches found
Square Pig FusionInvoice 跨站脚本漏洞
Square Pig FusionInvoice is a self-service online invoicing application for freelancers and small businesses from Square Pig. A security vulnerability exists in Square Pig FusionInvoice version 2023-1.0 that stems from the presence of a stored cross-site scripting XSS vulnerability...
FusionInvoice 2023-1.0 - Stored XSS (Cross-Site Scripting)
Exploit Title: FusionInvoice 2023-1.0 - Stored XSS Cross-Site Scripting Date: 2023-05-24 Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.squarepiginteractive.com Software Link: https://www.fusioninvoice.com/store Version: 2023-1.0 Tested on: Latest Version of Desktop Web Browsers...
FusionInvoice 2023-1.0 - Cross-Site Scripting Vulnerability
Exploit Title: FusionInvoice 2023-1.0 - Stored XSS Cross-Site Scripting Exploit Author: Andrea Intilangelo Vendor Homepage: https://www.squarepiginteractive.com Software Link: https://www.fusioninvoice.com/store Version: 2023-1.0 Tested on: Latest Version of Desktop Web Browsers ATTOW: Firefox...
‘Pig Butchering’ Scams Are Now a $3 Billion Threat
The FBI’s latest Internet Crime Report highlights the stunning rise of investment-themed crimes over the past 18 months...
On Pig Butchering Scams
"Pig butchering" is the colorful name given to online cons that trick the victim into giving money to the scammer, thinking it is an investment opportunity. Its a rapidly growing area of fraud, and getting more sophisticated...
Pig Butchering Scams Are Evolving Fast
Investment schemes are ensnaring victims with increasingly compelling narratives and believable tech...
What Is a Pig Butchering Scam?
This type of devastating scheme ensnares victims and takes them for all they’re worth—and the threat is only growing...
CVE-2022-4641
A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. T...
Design/Logic Flaw
A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. T...
CVE-2022-4641 pig-vector LogisticRegression.java LogisticRegression temp file
A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. T...
CVE-2022-4641
CVE-2022-4641 affects the pig-vector project, specifically the LogisticRegression.java function in src/main/java/org/apache/mahout/pig/. The issue is described as manipulating the creation of an insecure temporary file, enabling a local attacker to exploit it. The vulnerability is tied to a patch...
CVE-2022-4641 pig-vector LogisticRegression.java LogisticRegression temp file
A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. T...
pig-vector 安全漏洞
pig-vector is a library from the individual developer Ted Dunning. It provides the ability to encode data in Pig using Mahout's hash encoding capabilities. A security vulnerability exists in pig-vector that stems from the LogisticRegression function in its...
CVE-2022-4641 pig-vector LogisticRegression.java LogisticRegression temp file
A vulnerability was found in pig-vector and classified as problematic. Affected by this issue is the function LogisticRegression of the file src/main/java/org/apache/mahout/pig/LogisticRegression.java. The manipulation leads to insecure temporary file. The attack needs to be approached locally. T...
OS Command Injection
apacheairflowprovidersapachepig is vulnerable to os command injection. The vulnerability in due to the application allowing an attacker to control commands executed in the task execution context, allowing an attacker to inject and execute arbitrary OS commands...
US DoJ Seizes 7 Domains used in Pig Butchering Cryptocurrency Scam
By Deeba Ahmed Pig butchering is a scam where threat actors lure innocent investors into giving up their crypto assets and sending them to the attackers. This is a post from HackRead.com Read the original post: US DoJ Seizes 7 Domains used in Pig Butchering Cryptocurrency Scam...
GHSA-RMF2-PWFQ-H75J OS Command Injection in Apache Airflow
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider...
OS Command Injection in Apache Airflow
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider...
CVE-2022-40189
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider...
Command injection
Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Pig Provider, Apache Airflow allows an attacker to control commands executed in the task execution context, without write access to DAG files. This issue affects Pig Provider...