LibreOffice 安全漏洞

LibreOffice is an open source office software suite from The Document Foundation. The product includes the Writer text documents, Calc spreadsheets, and Impress presentations applications. A security vulnerability exists in LibreOffice version 24.2 up to and including 24.2.5, which stems from the...

PT-2024-6309 · Document Foundation +5 · Libreoffice +5

Name of the Vulnerable Software and Affected Versions: LibreOffice versions prior to 24.2.5 Description: The issue affects the Zip Repair Mode of LibreOffice, where an improper digital signature invalidation vulnerability allows for signature forgery. This means an attacker could create a special...

The vulnerability of Microsoft Excel spreadsheet editors on the Mac OS, related to errors in verifying cryptographic signatures, allows attackers to escalate their privileges.

The vulnerability of Microsoft Excel spreadsheet editors on the Mac OS operating system is related to errors in verifying the cryptographic signature. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of Microsoft Teams’ corporate platform for Mac OS, related to improper verification of the cryptographic signature, allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Teams’ corporate platform for Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions by introducing malicious libraries...

The vulnerability of Microsoft Word text editor on the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Word text editors on the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions by introducing malicious libraries...

The vulnerability of the Microsoft OneNote software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft OneNote note-taking software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions by introducing malicious libraries...

Incorrect Access Control

Whatsapp-api-js is vulnerable to Incorrect Access Control. The vulnerability is due to improper validation of request signatures in the WhatsAppAPI.verifyRequestSignature method, which allows an attacker to bypass access controls by manipulating the signature verification process...

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of the Microsoft PowerPoint presentation preparation and viewing software for the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability can allow an attacker to circumvent existing security restrictions using a specially created...

The vulnerability of the SAML SSO authentication mechanism in the corporate version of the GitHub Enterprise Server allows a perpetrator to gain access to a user account with administrator privileges.

The vulnerability of the SAML SSO authentication mechanism in the corporate version of the GitHub Enterprise Server is related to errors in verifying the cryptographic signature. Exploiting this vulnerability could allow a malicious actor to gain access to a user account with administrator...

The vulnerability of Microsoft Teams’ corporate platform on the Mac OS allows a hacker to circumvent existing security restrictions.

The vulnerability of Microsoft Teams’ corporate platform on the Mac OS is related to improper verification of the cryptographic signature. Exploiting this vulnerability could allow an attacker to circumvent existing security restrictions using a specially created library...

Google Pixel 安全漏洞

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from legacy test/debug code in the production version, which may lack LCS signature enforcement, leading to local privilege escalation...

whatsapp-api-js fails to validate message's signature

Impact Incorrect Access Control, anyone using the post or verifyRequestSignature methods to handle messages is impacted. Patches Patched in version 4.0.3. Workarounds It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is...

CVE-2024-45607

whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid. Incorrect Access Control, anyone using the post or verifyRequestSignature...

CVE-2024-45607 whatsapp-api-js fails to validate message's signature

whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid. Incorrect Access Control, anyone using the post or verifyRequestSignature...

CVE-2024-45607 whatsapp-api-js fails to validate message's signature

whatsapp-api-js is a TypeScript server agnostic Whatsapp's Official API framework. It's possible to check the payload validation using the WhatsAppAPI.verifyRequestSignature and expect false when the signature is valid. Incorrect Access Control, anyone using the post or verifyRequestSignature...

CBL Mariner 2.0 Security Update: reaper (CVE-2024-42459)

The version of reaper installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-42459 advisory. - In the Elliptic package 6.5.6 for Node.js, EDDSA signature malleability occurs because there is a missing...

whatsapp-api-js 数据伪造问题漏洞

whatsapp-api-js is a TypeScript server-agnostic official API framework for Whatsapp by Tomás Raiti Personal Developer. A data forgery issue vulnerability exists in versions of whatsapp-api-js prior to 4.0.3, which stems from incorrectly returning false for a valid signature when using the...

PT-2024-31706 · Unknown · Whatsapp-Api-Js

Name of the Vulnerable Software and Affected Versions: whatsapp-api-js versions prior to 4.0.3 Description: The issue concerns Incorrect Access Control in the whatsapp-api-js framework, impacting anyone using the post or verifyRequestSignature methods to handle messages. It is possible to check t...

GHSA-CVP8-5R8G-FHVQ omniauth-saml vulnerable to Improper Verification of Cryptographic Signature

ruby-saml, the dependent SAML gem of omniauth-saml has a signature wrapping vulnerability in = v1.12.0 and v1.13.0 to v1.16.0 , see https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2 As a result, omniauth-saml created a new release by upgrading ruby-saml to the...

omniauth-saml vulnerable to Improper Verification of Cryptographic Signature

ruby-saml, the dependent SAML gem of omniauth-saml has a signature wrapping vulnerability in = v1.12.0 and v1.13.0 to v1.16.0 , see https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-jw9c-mfg7-9rx2 As a result, omniauth-saml created a new release by upgrading ruby-saml to the...