1629 matches found
Nextcloud: Possibility to force an admin to install recommended applications
Summary: Endpoint /nextcloud/index.php/core/apps/recommended is accessible via GET http method and doesn't check anti-csrf token. If an admin visits this endpoint in a browser the process of installation of recommended applications begins immediately. Steps To Reproduce: 1. an attacker creates a...
2022 Planning: Prioritizing Defense and Mitigation Through Left of Boom
In the military, the term “left of boom" refers to the strategy and tactics required to prevent — and protect personnel from — explosions by making proactive decisions before the event happens. Unless you've been fortunate enough to avoid tech and media press for the past 24 months, it should be...
freerdp: improper region checks in all clients allow out of bound write to memory
A flaw was found in the FreeRDP client where it fails to validate input data when using connections with GDI or SurfaceCommands. This flaw could allow a malicious server sending graphics updates to a client to cause an out of bounds write in client memory using a specially crafted input. The...
freerdp: improper region checks in all clients allow out of bound write to memory
A flaw was found in the FreeRDP client where it fails to validate input data when using connections with GDI or SurfaceCommands. This flaw could allow a malicious server sending graphics updates to a client to cause an out of bounds write in client memory using a specially crafted input. The...
Code injection
GraphiQL is the reference implementation of this monorepo, GraphQL IDE, an official project under the GraphQL Foundation. All versions of graphiql older than email protected are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names,...
CVE-2021-41248 XSS vulnerability in GraphiQL
GraphiQL is the reference implementation of this monorepo, GraphQL IDE, an official project under the GraphQL Foundation. All versions of graphiql older than [email protected] are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names,...
Code injection
GraphQL Playground is a GraphQL IDE for development of graphQL focused applications. All versions of graphql-playground-react older than email protected are vulnerable to compromised HTTP schema introspection responses or schema prop values with malicious GraphQL type names, exposing a dynamic XS...
GraphQL Playground 跨站脚本漏洞
GraphQL Playground is a graphical, interactive, in-browser GraphQL IDE Integrated Development Environment based on GraphiQL from Prisma Labs, Germany. GraphQL Playground suffers from a cross-site scripting vulnerability that stems from the program's susceptibility to corrupt HTTP schema...
Apple macOS Flaw Allows Kernel-Level Compromise
Apple has patched a vulnerability in macOS can allow attackers to bypass a key OS protection and install a malicious rootkit to perform arbitrary operations on a device, researchers from Microsoft have discovered. The problem—dubbed “Shrootless”–is associated with a security technology called...
Google Chrome Post-release Reuse Vulnerability (CNVD-2021-99261)
A post-release reuse vulnerability exists in "Web Transfer" in versions of Google Chrome prior to 95.0.4638.69, a simple and efficient web browsing tool developed by Google. The vulnerability can be exploited to escape via a carefully crafted HTML surface execution sandbox...
WordPress Plugin Bug Lets Subscribers Wipe Sites
Researchers have discovered a homicidal WordPress plugin that allows subscribers to wipe sites clean of content. The high-severity security flaw is found in Hashthemes Demo Importer, a plugin that’s used in more than 8,000 active installations. According to security researchers at Wordfence, the...
Defending Assets You Don’t Know About Against Cyberattacks
Back in the 90s, we all used to build massive firewalls around our systems and spent our day-to-day resources looking for holes to patch. In theory, an impenetrable wall around everything you own is a great idea, because it protects even the things you’ve forgotten about. However, if a wall is yo...
Microsoft Surface Hub Security Feature Issue Vulnerability
The Microsoft Surface Hub is a tablet computer from Microsoft Corporation USA. A security signature issue vulnerability exists in the Microsoft Surface Pro 3, no details of the vulnerability are available at this time...
DEBIAN-CVE-2021-41160
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...
UBUNTU-CVE-2021-41160
FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. In affected versions a malicious server might trigger out of bound writes in a connected client. Connections using GDI or SurfaceCommands to send graphics updates to the client might send 0...
CVE-2021-42299
Microsoft Surface Pro 3 Security Feature Bypass Vulnerability...
CVE-2021-42299
Microsoft Surface Pro 3 Security Feature Bypass Vulnerability...
Security feature bypass
Microsoft Surface Pro 3 Security Feature Bypass Vulnerability...
CVE-2021-42299
CVE-2021-42299 affects Microsoft Surface Pro 3 and is described as a security feature bypass vulnerability. From the provided data, the vulnerability is local in scope (attack vector LOCAL, no user interaction required per CVSS), with partial confidentiality and integrity impact and no availabili...