13242 matches found
Malicious code in internal-lib-build (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b271298f1e935433f4b43cdb97a3b1f713540d0c503abc6bab0050507a1ad5d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Checkmk < 2.0.0p30, 2.1.x < 2.1.0p16, 2.2.x < 2.2.0i1 Information Disclosure Vulnerability
Checkmk is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:checkmk:checkmk"; if...
Jenkins Plugin JAPEX 代码问题漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A code issue vulnerabilit...
Jenkins Plugin SourceMonitor 代码问题漏洞
Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A code issue vulnerabilit...
CVE-2022-37109
patrickfuller camp up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 is vulnerable to Incorrect Access Control. Access to the password.txt file is not properly restricted as it is in the root directory served by StaticFileHandler and the Tornado rule to throw a 403 error when...
Malicious code in nab-chat-widget (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3282e7d700011745064925e0748cac1ec1b476b97086e633a6c18a9fcc04bf2a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in stale-props (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 65b9ec16df0705291e585234cf48aa58f355eadeaf165424181e35c728757468 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in webpack-dev-fixture (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ef02287b144b28d10ac4910d268b3a6ad2c870385d1ae85c1ec2f144b176c58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
patrickfuller camp 安全漏洞
patrickfuller camp patrickfuller camp is a websocket-based Raspberry Pi webcam web server by the individual developer Patrick Fuller. A security vulnerability exists in patrickfuller camp commit number: bbd53a256ed70e79bd8758080936afbf6d738767, which stems from the fact that its...
PT-2022-23818 · Unknown · Patrickfuller Camp
Name of the Vulnerable Software and Affected Versions: patrickfuller camp versions up to and including commit bbd53a256ed70e79bd8758080936afbf6d738767 Description: The issue concerns Incorrect Access Control. Access to the password.txt file is not properly restricted as it is in the root director...
OESA-2022-2062 kafka security update
Apache Kafka is an open-source distributed event streaming platform used by thousands of companies for high-performance data pipelines, streaming analytics, data integration, and mission-critical applications. Security Fixes: When Connect workers in Apache Kafka 2.0.0, 2.0.1, 2.1.0, 2.1.1, 2.2.0,...
WP OAuth Server < 3.4.2 - Client Secret Regeneration via CSRF
The plugin does not have CSRF check when regenerating secrets, which could allow attackers to make logged in admins regenerate the secret of an arbitrary client given they know the client ID Make a logged in admin open a page containing the HTML code below. This will regenerate the secret for the...
CVE-2022-31008
A flaw was found in RabbitMQ. The shovel and federation plugins perform URI obfuscation in their worker link state. The encryption key used to encrypt the URI was seeded with a predictable secret. In certain exceptions related to Shovel and Federation plugins, reasonably easily deobfuscatable dat...
CVE-2022-43933 : Configuration secrets are logged in support-save
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where configuration secrets are logged in support-save. Support-save file is generated by an admin user troubleshooting the switch. The Logged information may include usernames and...
The Secret Ballot Is US Democracy’s Last Line of Defense
Voter intimidation has cropped up in places across the nation, but the voting booth remains the one place where nobody can get to you...
CVE-2022-44796
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn't produce cryptographically...
Authorization
An issue was discovered in Object First Ootbi BETA build 1.0.7.712. The authorization service has a flow that allows getting access to the Web UI without knowing credentials. For signing, the JWT token uses a secret key that is generated through a function that doesn't produce cryptographically...
Malicious code in jquery_ui_checkbox (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7ec7cbc825e540dca6a67d1370e8c9d0cd6d3d116fce5c6fdc5f33f0a66aa780 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2002 Malicious code in colorajs (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d37f1e09d0b7641146be041d75d803d045e18fba41b5cc881ec1a3702fdc794e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...