470 matches found
Exploit for Command Injection in Zte Mf286R_Firmware
CVE-2022-39073 Firmware details: wainnerversion: BDPO...
January 3, 2023, update for Office 2016 (KB5002244)
None None...
Exploit for SQL Injection in Zte Mf286R_Firmware
CVE-2022-39066 Firmware details: wainnerversion: BDPO...
December 6, 2022, update for Project 2016 (KB5002193)
None None...
Exploit for Code Injection in Apache Commons_Text
CVE-2022-42889-PoC Proof of Concept for CVE-2022-42889 remote...
CVE-2022-41352
An issue was discovered in Zimbra Collaboration ZCS 8.8.15 and 9.0. An attacker can upload arbitrary files through amavis via a cpio loophole extraction to /opt/zimbra/jetty/webapps/zimbra/public that can lead to incorrect access to any other user accounts. Zimbra recommends pax over cpio. Also,...
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema the ability to lure or wait for an administrator to create or update an affected extension in that schema and the ability to lure or wait for a victim to use the object targeted in CREATE OR REPLACE or CREATE IF NOT EXISTS. Given all three prerequisites this flaw allows an attacker to run arbitrary code as the victim role which may be a superuser.
...
UBUNTU-CVE-2022-2625
A vulnerability was found in PostgreSQL. This attack requires permission to create non-temporary objects in at least one schema, the ability to lure or wait for an administrator to create or update an affected extension in that schema, and the ability to lure or wait for a victim to use the objec...
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2013 Update 5: August 9, 2022 (KB5016315)
None None...
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2012 Update 5: August 9, 2022 (KB5016314)
Description of the security update for the remote code execution vulnerability in Microsoft Visual Studio 2012 Update 5: August 9, 2022 KB5016314 Note: This security update applies to all Visual Studio 2012 Update 5 editions except Isolated and Integrated Shells, Build Tools, Remote Tools, and...
Microsoft-365-Extractor-Suite - A Set Of PowerShell Scripts That Allow For Complete And Reliable Acquisition Of The Microsoft 365 Unified Audit Log
This suite of scripts contains two different scripts that can be used to acquire the Microsoft 365 Unified Audit Log Read the accompanying blog post on https://invictus-ir.medium.com/introduction-of-the-microsoft-365-extractor-suite-b85e148d4bfe 1. Microsoft365Extractor , the original script stem...
.NET Core 3.1 Update: June 14, 2022 (KB5015424)
None None...
KB5014164 - Description of the security update for SQL Server 2014 SP3 CU4: June 14, 2022
None None...
.NET 6.0 Update: June 14, 2022 (KB5015429)
None None...
June 14, 2022, cumulative update for SharePoint Enterprise Server 2013 (KB5002218)
None None...
Atomic-Operator - A Python Package Is Used To Execute Atomic Red Team Tests (Atomics) Across Multiple Operating System Environments
This python package is used to execute Atomic Red Team tests Atomics across multiple operating system environments. What's new? Why? atomic-operator enables security professionals to test their detection and defensive capabilities against prescribed techniques defined within atomic-red-team. By...
Citrix Analytics Service (CAS) Onboarding Assistant
CAS Onboarding Assistant helps troubleshoot issues while onboarding your StoreFront with Citrix Analytics. The Storefront server might fail to connect to Citrix Analytics after importing the configuration settings from Citrix Analytics to your StoreFront server. CAS Onboarding Assistant checks al...
.NET 5.0 Update: May 10, 2022 (KB5014329)
None None...
OWASP Coraza WAF - A Golang Modsecurity Compatible Web Application Firewall Library
Welcome to OWASP Coraza Web Application Firewall, OWASP Coraza is a golang enterprise-grade Web Application Firewall framework that supports Modsecurity's seclang language and is 100% compatible with OWASP Core Ruleset. Prerequisites Linux distribution Debian and Centos are recommended, Windows i...
End of support for Office 2013
End of support for Office 2013 Support for Office 2013 ended on April 11, 2023 and there will be no extension and no extended security updates. All of your Office 2013 apps will continue to function. However, you could expose yourself to serious and potentially harmful security risks.Buy or try...