5986 matches found
New Golang-based 'Agenda Ransomware' Can Be Customized For Each Victim
A new ransomware strain written in Golang dubbed "Agenda" has been spotted in the wild, targeting healthcare and education entities in Indonesia, Saudi Arabia, South Africa, and Thailand. "Agenda can reboot systems in safe mode, attempts to stop many server-specific processes and services, and ha...
AZL-36946 CVE-2022-36033 affecting package jsoup 1.11.3-4
jsoup is a Java HTML parser, built for HTML editing, cleaning, scraping, and cross-site scripting XSS safety. jsoup may incorrectly sanitize HTML including javascript: URL expressions, which could allow XSS attacks when a reader subsequently clicks that link. If the non-default...
CVE-2022-36034 Possible Regular Expression Denial of Service (ReDoS) used on uncontrolled data in nitrado.js
nitrado.js is a type safe wrapper for the Nitrado API. Possible ReDoS with lib input of and with many repetitions of |. This issue has been patched in all versions above 0.2.5. There are currently no known workarounds...
Ubuntu: Security Advisory (USN-66-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-320-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-99-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-99-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
Design/Logic Flaw
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
CVE-2022-36220
CVE-2022-36220 affects Safe Exam Browser for Windows prior to version 3.4.0. The issue is a kiosk breakout vulnerability that allows code execution via the browser’s print dialog when no quit password is required. Root cause: UI/workflow flaw enabling escape from the kiosk environment through the...
CVE-2022-36220
Kiosk breakout without quit password in Safe Exam Browser Windows 3.4.0, which allows an attacker to achieve code execution via the browsers' print dialog...
safe-transitive-test (0.0.3) potentially affected by unknown CVE via webb3 (0.0.1-security)
webb3 NPM version 0.0.1-security is affected by a known vulnerability. The following packages have a transitive dependency on webb3 and may be impacted: - safe-transitive-test 0.0.3 Source cves: unknown CVE Source advisory: OSV:MAL-2022-7089...
MAL-2022-4073 Malicious code in json-st7rzingif-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ac7d021965594d028670cc4fcd21b6deec72a7194b503d8eee01cee80c3da26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in json-st7rzingif-safe (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ac7d021965594d028670cc4fcd21b6deec72a7194b503d8eee01cee80c3da26 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Safe Exam Browser 安全漏洞
Safe Exam Browser is a secure web browser environment organized by ETH Zurich, Switzerland. It allows secure online exams to be taken. A security vulnerability exists in Safe Exam Browser Windows versions prior to 3.4.0 that originates from a kiosk breakout no exit code and allows an attacker to...
Security update for chromium (important)
openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:10092-1 Rating: important References: 1202075 Cross-References: CVE-2022-2603 CVE-2022-2604 CVE-2022-2605 CVE-2022-2606 CVE-2022-2607 CVE-2022-2608 CVE-2022-2609 CVE-2022-2610 CVE-2022-2611 CVE-2022-2612...
DEBIAN-CVE-2022-2622
Insufficient validation of untrusted input in Safe Browsing in Google Chrome on Windows prior to 104.0.5112.79 allowed a remote attacker to bypass download restrictions via a crafted file...