UBUNTU-CVE-2022-35651

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in contex...

CVE-2022-35651

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in contex...

CVE-2022-35651: Improper Neutralization of Input During Web Page Generation

A stored XSS and blind SSRF vulnerability was found in Moodle, occurs due to insufficient sanitization of user-supplied data in the SCORM track details. A remote attacker can trick the victim to follow a specially crafted link and execute arbitrary HTML and script code in user's browser in contex...

[SECURITY] Fedora 35 Update: shellz-1.5.0-7.fc35

Shellz is a small utility to track and control your ssh, telnet, web and cust om shells and tunnels...

PT-2022-22976 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 20.21.2.109 Description: This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within the authorization of...

PT-2022-22975 · Bmc · Bmc Track-It!

Name of the Vulnerable Software and Affected Versions: BMC Track-It! version 20.21.02.109 Description: This issue allows remote attackers to disclose sensitive information on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the...

BMC Track-It! HTTP Module Improper Access Control Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of BMC Track-It!. Authentication is not required to exploit this vulnerability. The specific flaw exists within the authorization of HTTP requests. The issue results from the lack of authentication prio...

BMC Track-It! GetPopupSubQueryDetails SQL Injection Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of BMC Track-It!. Authentication is required to exploit this vulnerability. The specific flaw exists within the GetPopupSubQueryDetails endpoint. The issue results from the lack of proper...

CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

DEBIAN-CVE-2021-40608

The gfhintertrackfinalize function in GPAC 1.0.1 allows attackers to cause a denial of service via a crafted file in the MP4Box command...

GPAC 安全漏洞

GPAC is a multimedia framework. GPAC version 1.0.1 suffers from a denial of service vulnerability that stems from the gfhintertrackfinalize function not doing the correct handling of incoming error messages. An attacker could exploit this vulnerability to cause a denial of service via a specially...

Malicious Package

Overview @kibt/operation-track is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this...

Malicious code in aws-track-and-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d989d00b9eaf887318066983a92806b286fb32f6a58adf315ab01e8bebed6902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1204 Malicious code in aws-track-and-trace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d989d00b9eaf887318066983a92806b286fb32f6a58adf315ab01e8bebed6902 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-service-bus-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 79e8b972ae7ebe47ad31a4cfed964bf1308b4d910ddad0f713ef7e45af26dc43 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-blob-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 567e0f79387c321ef5292bc42ca46151d74d37f8f9a468ccbb20d3a267dceca1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea0ff6e1544a452407d2b6c971abab8ad445cfc1c60561a46398601578a271e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in perf-event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 901e8d431555966b24b8ed74e06874a38cfa5e96801221b937aec31605cba141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5297 Malicious code in perf-storage-file-share-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ea0ff6e1544a452407d2b6c971abab8ad445cfc1c60561a46398601578a271e7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5283 Malicious code in perf-event-hubs-track-1 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 901e8d431555966b24b8ed74e06874a38cfa5e96801221b937aec31605cba141 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...