PT-2022-15432 · Gitlab · Gitlab Ce/Ee +1

Name of the Vulnerable Software and Affected Versions: GitLab EE/CE versions 14.8 through 14.10.4 GitLab EE/CE versions 15.0 through 15.0.3 GitLab EE/CE versions 15.1 through 15.1.0 Description: An improper authorization issue affects GitLab EE/CE, allowing project members with the reporter role ...

Update now! Mozilla fixes security vulnerabilities and introduces a new privacy feature for Firefox

Mozilla released version 102.0 of the Firefox browser to Release channel users on June 28, 2022. The new version fixes 20 security vulnerabilities, five of which are classified as “High”. The new version also comes with a new privacy feature that strips parameters from URLs that track you around...

CVE-2021-25003

creationtimestamp| type| source ---|---|--- 2022-06-29 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6293 2022-12-08 09:11:43+00:00| published-proof-of-concept| https://t.me/poxek/2605 2022-12-08 11:09:59+00:00| published-proof-of-concept|...

CVE-2022-31056

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms Ticket/Change/Problem permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and...

CVE-2022-31056

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all assistance forms Ticket/Change/Problem permit sql injection on the actor fields. This issue has been resolved in version 10.0.2 and...

CVE-2022-31068 Sensitive Data Exposure on Refused Inventory Files in GLPI

GLPI is a Free Asset and IT Management Software package, Data center management, ITIL Service Desk, licenses tracking and software auditing. In affected versions all GLPI instances with the native inventory used may leak sensitive information. The feature to get refused file is not authenticated...

CVE-2022-31068

CVE-2022-31068 affects GLPI installations that use the native inventory, where all such instances may leak sensitive information due to an unauthenticated access path. The issue is addressed in GLPI version 10.0.2; all affected users are advised to upgrade to 10.0.2 or newer. The provided documen...

CVE-2022-31082

GLPI and its glpi-inventory-plugin are affected by CVE-2022-31082 due to a SQL injection via package deployment tasks. The issue affects versions prior to 1.0.2 and is fixed in 1.0.2; upgrade is advised. As a workaround for users unable to upgrade, delete front/deploypackage.public.php if the dep...

You can be tracked online using your Chrome browser extensions

A researcher has found a way to generate a fingerprint of your device from your installed Google Chrome extensions, and then use that fingerprint to track you online. Fingerprinting is a way of figuring out what makes your device unique and then using that to identify you as you move around the...

Malicious code in tinkoff-web-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8430ad0ed9e8c2a8e9493419b210bb23aef0c358fcb5c01283db9d6f272093d4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in gtm-tracking-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e849bf91f82dbd6013c54266e0b8ab5b8107604190298ca59817cdf94fe2aba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3493 Malicious code in gtm-tracking-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e849bf91f82dbd6013c54266e0b8ab5b8107604190298ca59817cdf94fe2aba6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @is24at/react-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6feb694dafaeae93e0b2f46ed1826cb8043c8349f30f00269fa5f22950f1d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-364 Malicious code in @is24at/react-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a6feb694dafaeae93e0b2f46ed1826cb8043c8349f30f00269fa5f22950f1d8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @msmg/vue-auth-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05441db2f3376f49351058c182d5b20ef5106ca27a1ab2e1b98b7e0bdf8f82a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-440 Malicious code in @msmg/vue-auth-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 05441db2f3376f49351058c182d5b20ef5106ca27a1ab2e1b98b7e0bdf8f82a1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @msmg/tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a121f4238105fd6fe7dcd1dc99a15348b5120d3fcbdabfa65cd741f1d9fb0100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-439 Malicious code in @msmg/tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a121f4238105fd6fe7dcd1dc99a15348b5120d3fcbdabfa65cd741f1d9fb0100 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hs-promise-rejection-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b0af78070a71081b60bcff34762e511aa3de9b02147f99ab2b69e87591f500f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3688 Malicious code in hs-promise-rejection-tracking (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 1b0af78070a71081b60bcff34762e511aa3de9b02147f99ab2b69e87591f500f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...