2104 matches found
MAL-2022-3823 Malicious code in ing-flow-v2 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd817301581b6207aff141b16d371ee9f97412a4e4e26b5ca238208be07d1ec6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-6784 Malicious code in uniswap-v2-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36809731348bb0b16418c6c21f3074d63d258f4cd3e03ebab01a693c2f77c204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in uniswap-v2-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36809731348bb0b16418c6c21f3074d63d258f4cd3e03ebab01a693c2f77c204 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in cryptoapis-v2-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d42e2d1a0abcbce282cc6bd532e75892d4801811fbd80092ec1c12ba115277a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-2254 Malicious code in cryptoapis-v2-adapter (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d42e2d1a0abcbce282cc6bd532e75892d4801811fbd80092ec1c12ba115277a4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Signature forgery in Biscuit
Impact The paper Cryptanalysis of Aggregate Γ-Signature and Practical Countermeasures in Application to Bitcoin defines a way to forge valid Γ-signatures, an algorithm that is used in the Biscuit specification version 1. It would allow an attacker to create a token with any access level. As Biscu...
CVE-2022-31053
Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any access level. The...
Authentication flaw
Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid G-signatures. Such an attack would allow an attacker to create a token with any access level. The...
CVE-2022-31053 Signature forgery in Biscuit
Biscuit is an authentication and authorization token for microservices architectures. The Biscuit specification version 1 contains a vulnerable algorithm that allows malicious actors to forge valid Γ-signatures. Such an attack would allow an attacker to create a token with any access level. The...
CVE-2022-29525
Rakuten Casa version APFV141 or APFV200 uses a hard-coded credential which may allow a remote unauthenticated attacker to log in with the root privilege and perform an arbitrary operation...
PT-2022-19180 · Rakuten · Rakuten Casa
Name of the Vulnerable Software and Affected Versions: Rakuten Casa versions AP F V1 4 1 through AP F V2 0 0 Description: The issue is related to improper access control, allowing a remote attacker to log in with root privilege and perform arbitrary operations if the product is in its default...
CVE-2022-31402
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...
Cross site scripting
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...
CVE-2022-31402
Multiple sources corroborate that ITOP (iTop) is affected by cross-site scripting (XSS) vulnerabilities in various components and versions. The original CVE-2022-31402 notes an XSS via /itop/webservices/export-v2.php in ITOP 3.0.1. Connected PTSecurity entries expand on additional XSS issues: (1)...
CVE-2022-31402
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...
CVE-2022-31402
ITOP v3.0.1 was discovered to contain a cross-site scripting XSS vulnerability via /itop/webservices/export-v2.php...
AZL-9853 CVE-2022-1664 affecting package dpkg for versions less than 1.20.10-1
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction ca...
CVE-2022-1664 directory traversal for in-place extracts with untrusted v2 and v3 source packages with debian.tar
Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerability. When extracting untrusted source packages in v2 and v3 source package formats that include a debian.tar, the in-place extraction ca...