PT-2022-4147 · Siemens · Scalance W-700 +9

Name of the Vulnerable Software and Affected Versions: SCALANCE M-800 / S615 versions prior to V2.3.1 SCALANCE SC-600 family versions prior to V2.3.1 SCALANCE W-1700 IEEE 802.11ac family versions prior to V2.3.1 SCALANCE W-700 IEEE 802.11ax family versions prior to V2.3.1 SCALANCE W-700 IEEE...

southernmotorcosc.com Cross Site Scripting vulnerability OBB-2830630

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Tenable SecurityCenter < 5.22.0 Multiple Vulnerabilities (TNS-2022-15)

According to its self-reported version, the Tenable SecurityCenter application installed on the remote host has a third-party software vulnerability in Moment.js, prior to version 2.29.4. It contains a denial of service vulnerability due to an inefficient parsing algorithm. An remote attacker can...

Two Rapid7 Solutions Take Top Honors at SC Awards Europe

LONDON—We are pleased to announce that two Rapid7 solutions were recognized on Tuesday, June 21, at the prestigious SC Awards Europe, which were presented at the London Marriott, Grosvenor Square. InsightIDR took the top spot in the Best SIEM Solution category, and Threat Command brought home the...

Malicious code in sc-hydrate-sku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36808f075d5a16856dd1e85172e1e13689b7ca7a5372d5b5ea1ebbc76f7a1077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5953 Malicious code in sc-paul (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad54f4ed59a7b7c15aa41bdea193e0d193255c3effdbde8b9877bb5fde32d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5951 Malicious code in sc-hydrate-sku (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36808f075d5a16856dd1e85172e1e13689b7ca7a5372d5b5ea1ebbc76f7a1077 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-paul (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ad54f4ed59a7b7c15aa41bdea193e0d193255c3effdbde8b9877bb5fde32d53a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-location (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 53a18d567459c5ece1b8f35fdb56b6fa60f4a13c6ceff898fbb82c7cb0d7ff80 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-bing (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1d7bf56f772259e7de9fe49c4783c15ed5c91abc5a6281a06995c34164106e42 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-add-to-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5257c8252b296dd5d8b693935047369934e120b7e0c18c6497b922fb174455c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5950 Malicious code in sc-cmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30a735dd0ffda5733380468c519dab6e9d95638af0362525b229ce9c5522ca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5948 Malicious code in sc-add-to-cart (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5257c8252b296dd5d8b693935047369934e120b7e0c18c6497b922fb174455c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sc-cmt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a30a735dd0ffda5733380468c519dab6e9d95638af0362525b229ce9c5522ca2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

ipmm.sc.gov.br Cross Site Scripting vulnerability OBB-2648416

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

camposnovos.sc.gov.br Cross Site Scripting vulnerability OBB-2625259

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

new packages: hunspell-sc

An update is available for hunspell-sc. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky...

A heap use after free issue was found in Opensc before version 0.22.0 in sc_file_valid.

...

turismo.saltinho.sc.gov.br Cross Site Scripting vulnerability OBB-2510753

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

turismo.saltinho.sc.gov.br Cross Site Scripting vulnerability OBB-2498394

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...