CVE-2022-29432: Improper Neutralization of Input During Web Page Generation

Multiple Authenticated administrator or higher user role Persistent Cross-Site Scripting XSS vulnerabilities in TMS-Plugins wpDataTables plugin = 2.1.27 on WordPress via &data-link-text, &data-link-url, &data, &data-shortcode, &data-star-num vulnerable parameters...

new packages: star

An update is available for star. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...

Get to Know Steve Povolny

Meet Steve Povolny Head of Advanced Threat Research for Trellix Threat Labs By Michael Alicea · May 17, 2022 At Trellix, we celebrate and champion our people. This week, I sat down with Steve Povolny, Head of Advanced Threat Research for Trellix Threat Labs. As he is one of the leading...

staralliancemovies.com Cross Site Scripting vulnerability OBB-2616510

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

EDRSandblast - Tool That Weaponize A Vulnerable Signed Driver To Bypass EDR Detections And LSASS Protections

EDRSandBlast is a tool written in C that weaponize a vulnerable signed driver to bypass EDR detections Kernel callbacks and ETW TI provider and LSASS protections. Multiple userland unhooking techniques are also implemented to evade userland monitoring. As of release, combination of userland...

Siemens Simcenter STAR-CCM Viewer Scene File Parsing Vulnerability

Simcenter STAR-CCM Viewer is a standalone scene and episode viewer for Simcenter STAR-CCM.Siemens Simcenter STAR-CCM Viewer has a security vulnerability that could be exploited by an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

Memory corruption

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

CVE-2022-24661

The CVE-2022-24661 vulnerability affects Siemens STAR-CCM+ Viewer (all versions before 2022.1). The issue is a memory corruption in starview+.exe while parsing specially crafted .SCE scene files, allowing code execution in the context of the current process. Public documentation from multiple sou...

CVE-2022-24661

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

Siemens Simcenter STAR-CCM+ 缓冲区错误漏洞

Simcenter STAR-CCM Viewer is a standalone scene and episode viewer for Simcenter STAR-CCM.Siemens Simcenter STAR-CCM Viewer has a security vulnerability that could be exploited by an attacker to execute code in the context of the current process...

CVE-2022-24661: Improper Restriction of Operations within the Bounds of a Memory Buffer

A vulnerability has been identified in Simcenter STAR-CCM+ Viewer All versions V2022.1. The starview+.exe contains a memory corruption vulnerability while parsing specially crafted .SCE files. This could allow an attacker to execute code in the context of the current process...

Siemens Simcenter STAR-CCM+ Viewer

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Simcenter STAR-CCM+ Viewer Vulnerability: Improper Restriction of Operations within the Bounds of a Memory Buffer 2. RISK EVALUATION Successful exploitation of this vulnerability could cause a crash,...

star-sports.de Improper Access Control vulnerability OBB-2404831

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

WordPress Five-Star Ratings Shortcode plugin < 1.2.39 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Five-Star Ratings Shortcode plugin versions 1.2.39. Solution Update the WordPress Five-Star Ratings Shortcode plugin to the latest available version at least 1.2.39...

WordPress kk Star Ratings plugin < 5.2.9 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...

WordPress Five-Star Ratings Shortcode plugin < 1.2.39 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Five-Star Ratings Shortcode plugin versions 1.2.39. Solution Update the WordPress Five-Star Ratings Shortcode plugin to the latest available version at least 1.2.39...

WordPress kk Star Ratings plugin < 5.2.9 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress kk Star Ratings plugin versions 5.2.9. Solution Update the WordPress kk Star Ratings plugin to the latest available version at least 5.2.9...

WordPress Plugin Five Star Business Profile and Schema Cross-Site Scripting Vulnerability

WordPress is a set of blogging platforms developed using the PHP language by the Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in the WordPress plugin Five Star Business Profile and Schema prio...