Information Disclosure

NiFi Single User Utilities is vulnerable to information disclosure. The vulnerability exists in writeLoginCredentials function due to temporary file creation of NiFi containing credential information in a global directory which allows an attacker to gain read access and perform unauthorized actio...

What's New in InsightIDR: Q1 2022 in Review

Introducing new InsightIDR capabilities to accelerate your detection and response program When we talk to customers and security professionals about what they need more of in their security operations center SOC, there is one consistent theme: time. InsightIDR — Rapid7's leading cloud SIEM and XD...

Business Logic Flaws

chromium is vulnerable to business logic flaws. The vulnerability exists due to inappropriate implementation in Virtual Keyboard which allows an attacker to perform unwanted actions...

CVE-2022-21947

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API steve to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V...

CVE-2022-21947 rancher desktop: Dashboard API is network accessible

A Exposure of Resource to Wrong Sphere vulnerability in Rancher Desktop of SUSE allows attackers in the local network to connect to the Dashboard API steve to carry out arbitrary actions. This issue affects: SUSE Rancher Desktop versions prior to V...

PT-2022-15197 · Suse · Suse Rancher Desktop

Name of the Vulnerable Software and Affected Versions: SUSE Rancher Desktop versions prior to V. Description: A vulnerability in SUSE Rancher Desktop allows attackers in the local network to connect to the "Dashboard API steve" to carry out arbitrary actions due to improper access control...

[WP-H3] Proxy admin of the upgradeable proxy contracts can steal _borrowAsset and collateralAsset from the contracts and users' wallet

Lines of code Vulnerability details Both LenderPool and PooledCreditLine are upgradeable contract that holds users' allowances, and in certain periods, LendingPool will be holding users' funds. Use of Upgradeable Proxy Contract Structure allows the logic of the contract to be arbitrarily changed...

WordPress Church Admin plugin cross-site request forgery vulnerability

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress plugin is a WordPress open source application plugin . A cross-site request forgery vulnerability exists in the...

Firmware Analysis and Comparison Tool 跨站请求伪造漏洞

Firmware Analysis and Comparison Tool FACT is a firmware analysis and comparison tool. firmware Analysis and Comparison Tool version v3.2 contains a cross-site request forgery vulnerability that stems from a WEB application that does not adequately validate that the request is from a trusted user...

CVE-2022-28143

A cross-site request forgery CSRF vulnerability in Jenkins Proxmox Plugin 0.7.0 and earlier allows attackers to connect to an attacker-specified host using attacker-specified username and password perform a connection test, disable SSL/TLS validation for the entire Jenkins controller JVM as part ...

CVE-2022-0735

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure...

Information disclosure

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure...

UBUNTU-CVE-2022-0735

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure...

CVE-2022-0735

An issue has been discovered in GitLab CE/EE affecting all versions starting from 12.10 before 14.6.5, all versions starting from 14.7 before 14.7.4, all versions starting from 14.8 before 14.8.2. An unauthorised user was able to steal runner registration tokens through an information disclosure...

CVE-2022-0735

Removed by vendor...

CVE-2022-0787

The Limit Login Attempts Spam Protection WordPress plugin before 5.1 does not sanitise and escape some parameters before using them in SQL statements via AJAX actions available to unauthenticated users, leading to SQL Injections...

Shopping Cart & eCommerce Store < 5.2.5 - Arbitrary Design Settings Update via CSRF

The plugin is lacking CSRF checks in various AJAX actions, such as ecadminajaxsavedesignsettings, which could allow attackers to make a logged in admin update arbitrary settings PoC To disable the Live Design Editor To set the custom CSS setting to body background-color: red;...

Access-Control Bypass

OpenVPN is vulnerable to access control bypass. The vulnerability exists due to the system allowing access with only partially correct credentials which allows an attacker to gain access to the system and perform unauthorized actions...

The vulnerability of the Mozilla Firefox browser, related to insufficient warnings about dangerous actions, allows a hacker to execute a spear-phishing attack.

The vulnerability of the Mozilla Firefox browser is related to insufficient warnings about dangerous actions. Exploiting this vulnerability allows a remote attacker to perform a spear-phishing attack...

Power actions fail for all target devices from PVS console

When attempting to power manage Target Devices via Citrix PVS, the power actions for Restart and Shutdown are failing., i.e. right click Target Device Restart or Shutdown, the process starts but fails with status "Failed". No errors are reported in the event logs...