CVE-2022-25802

CVE-2022-25802 details: Best Practical Request Tracker (RT) is vulnerable to a cross-site scripting (XSS) flaw when displaying an attachment, exploitable via a crafted content type. Affected versions are RT 4.4.0–4.4.6 and RT 5.x prior to 5.0.3. Public sources indicate upstream fixes/patches have...

CVE-2022-25801

Vulnerability : CVE-2022-25801 affects Best Practical RT for Incident Response (RTIR). Affected versions are RTIR < 4.0.3 and RTIR 5.x

CVE-2022-25800

The vulnerability CVE-2022-25800 affects Best Practical RT for Incident Response (RTIR). Affected are RTIR versions before 4.0.3 and RTIR 5.x before 5.0.3, where the whois lookup tool is exploitable to perform server-side requests (SSRF). According to the initial details, the impact is high on co...

CVE-2022-25803: URL Redirection to Untrusted Site

Best Practical Request Tracker RT before 5.0.3 has an Open Redirect via a ticket search...

CVE-2022-25801: Server-Side Request Forgery (SSRF)

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...

CVE-2022-25800: Server-Side Request Forgery (SSRF)

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...

Rocky Linux 8 : kernel-rt (RLSA-2022:5565)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5565 advisory. - kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 Note that Nessus has not tested for this issue but has instead relied only ...

CVE-2022-25802: Improper Neutralization of Input During Web Page Generation

Best Practical Request Tracker RT before 4.4.6 and 5.x before 5.0.3 allows XSS via a crafted content type for an attachment...

ALSA-2022:5565 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 For more details about the security issues, including...

RHEL 8 : kernel-rt (RHSA-2022:5565)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5565 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 For more details about the security issues, including...

KB5016264: Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 12, 2022

KB5016264: Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 12, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable...

ASUS RT-A88U Cross-Site Scripting Vulnerability

The ASUS RT-A88U is a wireless router from ASUS of Taiwan, China. A cross-site scripting vulnerability exists in ASUS RT-A88U version 3.0.0.4.38645898, which stems from the router's administration panel failing to properly clean WiFi logs. An attacker can exploit the vulnerability to be able to...

Cross site scripting

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

CVE-2021-43702

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

CVE-2021-43702

Affected product: ASUS RT-A88U (firmware 3.0.0.4.386_45898). Vulnerability: Cross-Site Scripting (XSS) in the router admin panel due to improper sanitization of WiFi logs, enabling a stored XSS when an attacker changes the SSID with a crafted payload. Root cause: inadequate input/output sanitizat...

CVE-2021-43702: Improper Neutralization of Input During Web Page Generation

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

GSD-2022-1003950 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003835 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003687 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...