CVE-2022-38611

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...

CVE-2022-38611

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...

Improper access control

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...

CVE-2022-38611

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...

CVE-2022-38611

The CVE-2022-38611 entry concerns Watchdog Anti-Virus v1.4.158 where a flaw in incorrect access control enables a DLL hijacking attack, allowing arbitrary code execution. The vulnerability is characterized as a local, low-complexity issue requiring user interaction (per CVSS: LOCAL/LOW complexity...

Watchdog Anti-Virus Release Notes 安全漏洞

Watchdog Anti-Virus Release Notes is an anti-virus program from Watchdog. A security vulnerability exists in Watchdog Anti-Virus Release Notes v1.4.158, which originates from incorrect access control and can be exploited by attackers to perform DLL hijacking attacks and execute arbitrary code via...

PT-2022-24479

Name of the Vulnerable Software and Affected Versions Watchdog Anti-Virus version 1.4.158 Description The issue is related to incorrect access control, allowing attackers to perform a DLL hijacking attack. This can lead to the execution of arbitrary code via a crafted binary. Recommendations For...

PT-2022-33332 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to 5.19.4 Description: The issue is related to the powerpc/pseries/mobility module in the Linux Kernel, specifically with setting the NMI watchdog factor during an LPM. The actual impact and attack plausibility hav...

PT-2022-33333

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.19.4 Description The issue is related to the introduction of a NMI watchdog's factor in the powerpc/watchdog component. The actual impact and attack plausibility have not yet been proven. Recommendations For...

PT-2022-33469 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.18 through v5.19.1 Description: A memory leak issue was discovered in the sp5100 tco watchdog of the Linux Kernel. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

CVE-2022-38611: Undefined Security Weakness

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...

jsoup: Crafted input may cause the jsoup HTML and XML parser to get stuck

jsoup is a Java library for working with HTML. Those using jsoup versions prior to 1.14.2 to parse untrusted HTML or XML may be vulnerable to DOS attacks. If the parser is run on user supplied input, an attacker may supply content that causes the parser to get stuck loop indefinitely until...

Researchers Detail Evasive DarkTortilla Crypter Used to Deliver Malware

A .NET-based evasive crypter named DarkTortilla has been used by threat actors to distribute a broad array of commodity malware as well as targeted payloads like Cobalt Strike and Metasploit, likely since 2015. "It can also deliver 'add-on packages' such as additional malicious payloads, benign...

CVE-2022-34537

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a cross-site scripting XSS vulnerability via the component biaoneshot.cgi...

CVE-2022-34538

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/bia/addacph.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34540

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34540

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/vca/license/licensetok.cgi. This vulnerability is exploitable via a crafted POST request...

CVE-2022-34534

Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call...

CVE-2022-34534

Digital Watchdog DW Spectrum Server 4.2.0.32842 allows attackers to access sensitive infromation via a crafted API call...

CVE-2022-34539

Digital Watchdog DW MEGApix IP cameras A7.2.220211029 was discovered to contain a command injection vulnerability in the component /admin/curltest.cgi. This vulnerability is exploitable via a crafted POST request...