BMC Community Track-It! SQL注入漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. for helpdesks and service desks with asset management. A SQL injection vulnerability exists in BMC Community Track-It! version 20.21.02.109, which stems from a lack of proper authentication before constructing a SQL query...

CVE-2022-35864: Improper Neutralization of Special Elements used in an SQL Command

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It! 20.21.02.109. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of...

BMC Community Track-It! 访问控制错误漏洞

BMC Community Track-It! is an It helpdesk software from BMC Community USA. for helpdesks and service desks with asset management. An Access Control Error vulnerability exists in BMC Community Track-It! version 20.21.2.109, which stems from a lack of authentication before allowing access to...

CVE-2022-35865: Missing Authentication for Critical Function

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It! 20.21.2.109. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of...

qemu security update

15:4.2.1-18.el7 - block: introduce maxhwiov for use in scsi-generic Paolo Bonzini Orabug: 33785156 - file-posix: try BLKSECTGET on block devices too, do not round to power of 2 Paolo Bonzini Orabug: 33785156 - block: add maxhwtransfer to BlockLimits Paolo Bonzini Orabug: 33785156 - block-backend:...

UBUNTU-CVE-2022-35651

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in contex...

CVE-2022-35651: Improper Neutralization of Input During Web Page Generation

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in contex...

[SECURITY] Fedora 35 Update: shellz-1.5.0-7.fc35

Shellz is a small utility to track and control your ssh, telnet, web and cust om shells and tunnels...

BMC Track-It! GetPopupSubQueryDetails SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper...

PT-2022-22976 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 20.21.2.109 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the authorization of...

PT-2022-22975 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 20.21.02.109 Description: This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the...

BMC Track-It! HTTP Module Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of authentication prio...

DEBIAN-CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

GPAC 安全漏洞

GPAC is a multimedia framework. GPAC version 1.0.1 suffers from a denial of service vulnerability that stems from the gfhintertrackfinalize function not doing the correct handling of incoming error messages. An attacker could exploit this vulnerability to cause a denial of service via a specially...

Malicious Package

Overview @kibt/operation-track is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in aws-track-and-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d989d00b9eaf887318066983a92806b286fb32f6a58adf315ab01e8bebed6902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1204 Malicious code in aws-track-and-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d989d00b9eaf887318066983a92806b286fb32f6a58adf315ab01e8bebed6902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e8b972ae7ebe47ad31a4cfed964bf1308b4d910ddad0f713ef7e45af26dc43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 901e8d431555966b24b8ed74e06874a38cfa5e96801221b937aec31605cba141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...