powerdns-recursor -- denial of service

PowerDNS Team reports: PowerDNS Security Advisory 2022-02: incomplete exception handling related to protobuf message generation...

CVE-2022-2557

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

CVE-2022-2557 WordPress Team Members Showcase < 4.1.2 - Subscriber+ Arbitrary File Read and Deletion

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

PT-2022-17373 · WordPress · Team Wordpress

Name of the Vulnerable Software and Affected Versions: The Team WordPress plugin versions prior to 4.1.2 Description: The issue allows any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is...

WordPress plugin Team 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

CVE-2022-2557: Improper Limitation of a Pathname to a Restricted Directory

The Team WordPress plugin before 4.1.2 contains a file which could allow any authenticated users to download arbitrary files from the server via a path traversal vector. Furthermore, the file will also be deleted after its content is returned to the user...

dnsReaper - Subdomain Takeover Tool For Attackers, Bug Bounty Hunters And The Blue Team!

DNS Reaper is yet another sub-domain takeover tool, but with an emphasis on accuracy, speed and the number of signatures in our arsenal! We can scan around 50 subdomains per second, testing each one with over 50 takeover signatures. This means most organisations can scan their entire DNS estate i...

DoNot Team Hackers Updated its Malware Toolkit with Improved Capabilities

The Donot Team threat actor has updated its Jaca Windows malware toolkit with improved capabilities, including a revamped stealer module designed to plunder information from Google Chrome and Mozilla Firefox browsers. The improvements also include a new infection chain that incorporates previousl...

Malicious Package

Overview opensea-wyvern is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious Package

Overview dobix is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...

Malicious Package

Overview lusha-ui-components-v2 is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

CVE-2022-29507

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

Information disclosure

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-29507

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2022-29507

The CVE CVE-2022-29507 affects the Intel® Team Blue mobile application (all versions). The root cause is insufficient protection of credentials, potentially allowing an authenticated user to disclose information via local access. The issue is documented with a low CVSS base score (3.3/Low) and in...

CVE-2022-29507

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

PT-2022-19665

Name of the Vulnerable Software and Affected Versions IntelR Team Blue mobile application affected versions not specified Description The issue concerns insufficiently protected credentials in the IntelR Team Blue mobile application, which may allow an authenticated user to potentially enable...

CVE-2022-29507: Insufficiently Protected Credentials

Insufficiently protected credentials in the IntelR Team Blue mobile application in all versions may allow an authenticated user to potentially enable information disclosure via local access...

Exploit for OS Command Injection in Sap Introscope_Enterprise_Manager

CVE-2020-6364 Remote code execution in CA APM Team Center Wil...

Improper Authorization lead a user add an arbitrary agent into Team

Description A Vulnerability in edit team function lead an user add another user via ID to Team, alternatively know the email of every user in Chatwoot Step to reproduce - login to the app -navigate to the Team setting: https://app.chatwoot.com/app/accounts/id/settings/teams/list -Create new or ed...