CVE-2017-20120

A vulnerability classified as problematic was found in TrueConf Server 4.3.7. This vulnerability affects unknown code of the file /admin/service/stop/. The manipulation leads to cross-site request forgery. The attack can be initiated remotely. The exploit has been disclosed to the public and may ...

Malicious code in cro-staking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ff0f0850bf22374744499697efcbb4c429178c55a7c05dc53cdff7e59f3ce871 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in idmsa (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3d0b1a3d0d627a0646c7fbfa5441aa70a41921ab6965e74fb89215a0368b9243 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in 13-pkg-13 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d11ff8eabd16040bbd151481a728945ea4c50fe74433a661598e30c0d635d26c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in upholdsdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b5a834d231fb9a9771dae82fc2a4203d704b9f006616359270894edaba9cae3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in webhook-provisioner (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 697ea38acf4a193645bda704d70e5d5e598227df1456666b6997d1c09ffcbacd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in thumb-assembler (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a778dc093a4b19a51f799a5bf03fb7714d70147b42627bafbef5bb2c87e33a82 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

DEBIAN-CVE-2022-1348

A vulnerability was found in logrotate in how the state file is created. The state file is used to prevent parallel executions of multiple instances of logrotate by acquiring and releasing a file lock. When the state file does not exist, it is created with world-readable permission, allowing an...

OPC UA Legacy Java Stack Denial of Service Vulnerability

OPC UA Legacy Java Stack is a legacy support for the Java version of OPC UA from the OPC Foundation in the U.S. A denial of service vulnerability exists in OPC UA Legacy Java Stack version 2022-04-01, which stems from improper handling of a large number of message requests, and could be exploited...

Code injection

OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that exhaust available resources...

CVE-2022-30551

OPC UA Legacy Java Stack 2022-04-01 allows a remote attacker to cause a server to stop processing messages by sending crafted messages that exhaust available resources...

CVE-2022-30551

CVE-2022-30551 affects OPC UA Legacy Java Stack (version 2022-04-01). A remote attacker can send crafted OPC UA messages that exhaust server resources, causing the server to stop processing messages (DoS). The related records (Red Hat, CNVD, NVD, ZDI) describe the same denial-of-service impact an...

CVE-2022-26130

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, and 13.1.x versions prior to 13.1.5, when an Active mode-enabled FTP profile is configured on a virtual server, undisclosed traffic can cause the virtual server to stop processing...

CVE-2022-0949 WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi

The Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection WordPress plugin before 6.930 does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbotsgravafingerprint AJAX action, available to unauthenticated users,...

Saltstack SaltStack Salt 授权问题漏洞

Saltstack SaltStack Salt is a set of open source tools for managing infrastructure from SaltStack Saltstack. The tool provides configuration management, remote execution, and other features. A security vulnerability exists in SaltStack Salt versions 3002.8, 3003.4, and 3004.1, which originates fr...

Metasploit Weekly Wrap-Up

Capture Plugin Capturing credentials is a critical and early phase in the playbook of many offensive security testers. Metasploit has facilitated this for years with protocol-specific modules all under the auxiliary/server/capture. Users can start and configure each of these modules individually,...

North Korean state-sponsored threat actor Lazarus Group exploiting Chrome Zero-day vulnerability

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here For more than a month before a fix was available, North Korean state hackers known as Lazarus group exploited a zero-day, remote code execution vulnerability CVE-2022-0609 in Google Chromes web browser. The attack mainly targe...

CVE-2022-26534

FISCO-BCOS release-3.0.0-rc2 was discovered to contain an issue where a malicious node, via a malicious viewchange packet, will cause normal nodes to change view excessively and stop generating blocks...

WordPress Stop Bad Bots plugin <= 6.92 - Unauthenticated SQL Injection (SQLi) vulnerability

Unauthenticated SQL Injection SQLi vulnerability discovered by cydave in WordPress Stop Bad Bots plugin versions = 6.92. Solution Update the WordPress Stop Bad Bots plugin to the latest available version at least 6.930...

WP Block and Stop Bad Bots < 6.930 - Unauthenticated SQLi

The plugin does not properly sanitise and escape the fingerprint parameter before using it in a SQL statement via the stopbadbotsgravafingerprint AJAX action, available to unauthenticated users, leading to a SQL injection PoC curl -i 'https://example.com/wp-admin/admin-ajax.php' --data...