Motorola MTM5000 Formatting String Error Vulnerability

The Motorola MTM5000 is a mobile radio from Motorola, USA. A security vulnerability exists in the Motorola MTM5000 that stems from a format string vulnerability in the AT+CTGL command in the command handler, which results in a write-anywhere scenario that can be exploited to obtain arbitrary code...

OpenJDK: segmentation fault in ciMethodBlocks

A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::makeblockat function in OpenJDK HotSpot VM 8 11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively, and may allow an attacker to cause a denial of service...

OpenJDK: segmentation fault in ciMethodBlocks

A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::makeblockat function in OpenJDK HotSpot VM 8 11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively, and may allow an attacker to cause a denial of service...

OpenJDK: segmentation fault in ciMethodBlocks

A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::makeblockat function in OpenJDK HotSpot VM 8 11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively, and may allow an attacker to cause a denial of service...

OpenJDK: segmentation fault in ciMethodBlocks

A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::makeblockat function in OpenJDK HotSpot VM 8 11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively, and may allow an attacker to cause a denial of service...

OpenJDK: segmentation fault in ciMethodBlocks

A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::makeblockat function in OpenJDK HotSpot VM 8 11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively, and may allow an attacker to cause a denial of service...

OpenJDK: segmentation fault in ciMethodBlocks

A vulnerability was found in OpenJDK. This issue occurs in the ciMethodBlocks::makeblockat function in OpenJDK HotSpot VM 8 11 and 17 are fixed starting from 11.0.17 and 17.0.5 respectively, and may allow an attacker to cause a denial of service...

MAL-2023-8314 Malicious code in data-layer-v8 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4e4c8f846b0ddb1097d47c477e40c0ce16ee83df9e0e4d2ad331a6f638a0c0e6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

blende8.at Cross Site Scripting vulnerability OBB-3735646

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

aqua-clean-2000.at Cross Site Scripting vulnerability OBB-3719980

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-8257 Malicious code in cm-react-components (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac624ff32f672028e8dca14a6a9207e93af47cde418a00eec1b1a8dbcae0baae Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-8229 Malicious code in bot-asuna-temp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 096dc7ed406d4e0afeeb0e58c2d2aa55ab9d832c7ae8b91194e6f82243ca90eb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

reim7.at Cross Site Scripting vulnerability OBB-3697626

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

MAL-2023-8088 Malicious code in ysb-ui-services (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aa432ce2cbd4ac518b98792eaa7d0e0aab9e38367dcd6eaf756da080dde5567e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OESA-2023-1618 openjdk-11 security update

The OpenJDK runtime environment. Security Fixes: An issue was discovered in function ciMethodBlocks::makeblockat in Oracle JDK HotSpot VM 11, 17 and OpenJDK HotSpot VM 8, 11, 17, allows attackers to cause a denial of service.CVE-2022-40433 Vulnerability in the Oracle Java SE, Oracle GraalVM...

The vulnerability of the software interface for PDF viewing and editing programs like Acrobat Reader and Adobe Acrobat lies in the lack of access control mechanisms. This allows attackers to execute arbitrary code within the context of the current user.

The vulnerability of the PDF file viewing and editing software interface of Acrobat Reader, as well as the Adobe Acrobat PDF editing software, is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to execute arbitrary code within the context of the...

MAL-2023-8052 Malicious code in jupiter-opensdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ac8bd94a42efed7ee106d9d2a85f814fb3ac9ae013cdfb34a4d3bce7386185bf Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress plugin Stripe Payment Plugin for WooCommerce 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

U.S. Hacks QakBot, Quietly Removes Botnet Infections

The U.S. government today announced a coordinated crackdown against QakBot, a complex malware family used by multiple cybercrime groups to lay the groundwork for ransomware infections. The international law enforcement operation involved seizing control over the botnets online infrastructure, and...

at-aust.org Cross Site Scripting vulnerability OBB-3625242

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...