gitea -- Escape git fetch remote

The Gitea team reports: Escape git fetch remote in services/migrations/giteauploader.go...

Slackware: Security Advisory (SSA:2014-356-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Server side request forgery (ssrf)

Databasir is a team-oriented relational database model document management platform. Databasir 1.01 has Server-Side Request Forgery vulnerability. During the download verification process of a JDBC driver the corresponding JDBC driver download address will be downloaded first, but this address wi...

Stale price used when citadelPriceFlag is cleared

Lines of code Vulnerability details During the video it was explained that the policy operations team was meant to be a nimble group that could change protocol values considered to be safe. Further, it was explained that since pricing comes from an oracle, and there would have to be unusual...

Privilege Escalation

github.com/fleetdm/fleet is vulnerable to privilege escalation. A premium users with access to the team features are facing post-authentication authorization leading to insecure access control. This vulnerability does not affect fleet instances without teams, or with teams but without restricted...

UBUNTU-CVE-2022-24841

fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this authorization bypass issue. Fleet instances without teams, or with teams but without restricted team accounts are not affected. In affected versions a te...

CVE-2022-24841 Improper Authorization in github.com/fleetdm/fleet

fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this authorization bypass issue. Fleet instances without teams, or with teams but without restricted team accounts are not affected. In affected versions a te...

PT-2022-16915 · Fleetdm +1 · Fleet +1

Name of the Vulnerable Software and Affected Versions: fleetdm/fleet versions prior to 4.13 Description: The issue is an authorization bypass problem that affects all versions of fleetdm/fleet that use the teams feature. Fleet instances without teams or with teams but without restricted team...

CVE-2022-24841: Improper Access Control

fleetdm/fleet is an open source device management, built on osquery. All versions of fleet making use of the teams feature are affected by this authorization bypass issue. Fleet instances without teams, or with teams but without restricted team accounts are not affected. In affected versions a te...

Fleet 安全漏洞

Fleet is a host monitoring platform. Fleet suffers from a security vulnerability that stems from the possibility that team administrators may incorrectly add themselves as administrators, maintainers, or observers of other teams in an affected version...

Ukraine Thwart Russian Industroyer 2 Malware Attack on Energy Provider

By Deeba Ahmed The Computer Emergency Response Team of Ukraine CERT-UA claims to thwart a malware attack by the Russian military… This is a post from HackRead.com Read the original post: Ukraine Thwart Russian Industroyer 2 Malware Attack on Energy Provider...

CVE-2022-27844

Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid WordPress plugin versions = 0.9.70...

CVE-2022-27844

CVE-2022-27844 affects the WordPress WPvivid Backup and Migration plugin (WordPress) up to version 0.9.70, with an arbitrary file read vulnerability. Public sources describe the issue across multiple feeds; OpenVAS notes vulnerability in WPvivid Migration, Backup, Staging

Mozilla: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98 and Firefox ESR 91.7. Some of these bugs showed evidence of...

CVE-2022-27844: Exposure of Sensitive Information to an Unauthorized Actor

Arbitrary File Read vulnerability in WPvivid Team Migration, Backup, Staging – WPvivid WordPress plugin versions = 0.9.70...

PT-2022-18633

Name of the Vulnerable Software and Affected Versions WPvivid Team Migration, Backup, Staging – WPvivid WordPress plugin versions = 0.9.70 Description The issue is related to an Arbitrary File Read vulnerability. This allows unauthorized access to files on the system. Recommendations For versions...

Mozilla: Memory safety bugs fixed in Firefox 99 and Firefox ESR 91.8

The Mozilla Foundation Security Advisory describes this flaw as: Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 98 and Firefox ESR 91.7. Some of these bugs showed evidence of...

OffensiveNotion - Notion As A Platform For Offensive Operations

Notion yes, the notetaking app as a C2. Wait, What? Yes. But Why? What started as a meme grew into a full project. Just roll with it. Read more! Here's our blog post about it: We Put A C2 In Your Notetaking App: OffensiveNotion Features A full-featured C2 platform built on the Notion notetaking...

Sandworm Team using a new modular malware Cyclops Blink

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here The National Cyber Security Centre NCSC in the United Kingdom, the Cybersecurity and Infrastructure Security Agency CISA, the National Security Agency NSA, and the Federal Bureau of Investigation FBI have discovered that the...

Security Bulletin: Vulnerabilities (CVE-2021-39038, CVE-2021-23450) in IBM WebSphere Application Server may impact IBM Engineering Lifecycle Management (ELM) products based on IBM Jazz technology

Summary IBM Engineering Lifecycle Management ELM products based on IBM Jazz technology may integrate with IBM WebSphere Application Server WAS. Please review the following WAS Bulletins CVE-2021-39038, CVE-2021-23450 and take corrective actions. Vulnerability Details Refer to the security bulleti...