[SECURITY] Fedora 35 Update: shhgit-0.2-6.fc35

Find GitHub secrets in real time...

[SECURITY] Fedora 35 Update: commit-stream-0.1.2-6.fc35

OSINT tool for finding Github repositories by extracting commit logs in real time from the Github event API...

Delta Electronics DIAEnergie SQL注入漏洞

Delta Electronics DIAEnergie is an industrial energy management system for monitoring and analyzing energy consumption in real time, calculating energy consumption and load characteristics, optimizing equipment performance, improving production processes and maximizing energy efficiency. Delta...

CVE-2022-27905

In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive C:\ to exploit this...

CVE-2022-27905

In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive C:\ to exploit this...

Privilege escalation

In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive C:\ to exploit this...

CVE-2022-27905

CVE-2022-27905 affects ControlUp Real-Time Agent prior to version 8.6. The issue is an unquoted path that can lead to privilege escalation. A successful exploit requires write permissions to the root of the OS drive (C:). The available connected sources corroborate the same description across mul...

CVE-2022-27905

In ControlUp Real-Time Agent before 8.6, an unquoted path can result in privilege escalation. An attacker would require write permissions to the root level of the OS drive C:\ to exploit this...

Controlup Real-Time Agent 代码问题漏洞

Controlup Real-Time Agent is a real-time agent from Controlup USA. A security vulnerability exists in Controlup Real-Time Agent prior to version 8.6, which stems from unquoted paths that may lead to elevation of privilege...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

RLSA-2022:1555 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: use-after-free in RDMA listen CVE-2021-4028 kernel: heap out of bounds write in nfdupnetdev.c CVE-2022-25636 For more details abou...

kernel-rt security and bug fix update

An update is available for kernel-rt. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kernel-rt packages provide the Real Time Linux Kernel, which enables...

UBUNTU-CVE-2022-29537

gprtpbuilderdohevc in ietf/rtppckmpeg4.c in GPAC 2.0.0 has a heap-based buffer over-read, as demonstrated by MP4Box...

GPAC 缓冲区错误漏洞

GPAC is an open source multimedia framework. A security vulnerability exists in GPAC 2.0.0, which stems from the fact that gprtpbuilderdohevc in ietf/rtppckmpeg4.c has a heap-based buffer over-read, as shown in MP4Box...

Authentication flaw

Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image...

CVE-2021-26627

CVE-2021-26627 describes an insufficient authentication on the activated RTSP port that enables a remote attacker to issue RTSP requests (e.g., via ffplay) and leak live video/images. Reported impact is real-time image information exposure. The available connected documents corroborate the vulner...

CVE-2021-26627 EDrhyme QCP 200W Information Exposure Vulnerability

Real-time image information exposure is caused by insufficient authentication for activated RTSP port. This vulnerability could allow to remote attackers to send the RTSP requests using ffplay command and lead to leakage a live image...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8.4 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available f...

Unspecified vulnerability in YottaDB (CNVD-2022-31925)

YottaDB is a real-time database from YottaDB, Inc. YottaDB version r1.32 has a security vulnerability that allows an attacker to crash by causing a NULL pointer dereference with a call to ZRead...

EDrhyme QCP 200W 授权问题漏洞

The EDrhyme QCP 200W is a camera from the Korean company EDrhyme. The EDrhyme QCP 200W suffers from an authorization issue vulnerability that stems from insufficient authentication of the activated RTSP port. An attacker sending an RTSP request using the ffplay command could result in leaking liv...