Design/Logic Flaw

An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file...

CVE-2022-45771

An issue in the /api/audits component of Pwndoc v0.5.3 allows attackers to escalate privileges and execute arbitrary code via uploading a crafted audit file...

Pwndoc 安全漏洞

PwnDoc is a software application. Penetration test report generator. A security vulnerability exists in Pwndoc version v0.5.3, which stems from an issue in components/api/audits and allows an attacker to elevate privileges and execute arbitrary code by uploading a crafted audit file...

CVE-2022-45771

CVE-2022-45771 affects Pwndoc v0.5.3, where the /api/audits component allows privilege escalation and arbitrary code execution through uploading a crafted audit file. Multiple connected documents describe two related attack chains: (1) loading user-supplied AuditSchema.language via require during...

OPENSUSE-SU-2022:10123-1 Security update for chromium

This update for chromium fixes the following issues: Chromium 105.0.5195.127 boo1203419: CVE-2022-3195: Out of bounds write in Storage CVE-2022-3196: Use after free in PDF CVE-2022-3197: Use after free in PDF CVE-2022-3198: Use after free in PDF CVE-2022-3199: Use after free in Frames...

Stable Channel Update for Desktop

The Stable channel has been updated to 105.0.5195.125 for Mac and Linux, 105.0.5195.125/126/127 which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept restricted unt...

Aura - Python Source Code Auditing And Static Analysis On A Large Scale

Source code auditing and static code analysis Aura is a static analysis framework developed as a response to the ever-increasing threat of malicious packages and vulnerable code published on PyPI. Project goals: provide an automated monitoring system over uploaded packages to PyPI, alert on...

MGASA-2022-0307 Updated chromium-browser-stable packages fix security vulnerability

The chromium-browser-stable package has been updated to the 104.0.5112.101 branch, fixing many bugs and 11 CVE. Google is aware that an exploit for CVE-2022-2856 exists in the wild. Some of the addressed CVE are listed below: Critical CVE-2022-2852: Use after free in FedCM. High CVE-2022-2854: Us...

Arista Networks CloudVision Portal 日志信息泄露漏洞

Arista Networks CloudVision Portal is a suite of web-based user management portals for the CloudVision platform from Arista Networks, USA. The product includes features such as network device configuration, compliance management, change management, and network monitoring management. A log...

OPENSUSE-SU-2022:10073-1 Security update for chromium

This update for chromium fixes the following issues: Chromium was updated to 103.0.5060.134 boo1201679: CVE-2022-2477 : Use after free in Guest View CVE-2022-2478 : Use after free in PDF CVE-2022-2479 : Insufficient validation of untrusted input in File CVE-2022-2480 : Use after free in Service...

Chrome for Android Update

Hi, everyone! We've just released Chrome 100 100.0.4896.127 for Android: it'll become available on Google Play over the next few days. This release includes security, stability and performance improvements. You can see a full list of the changes in the Git log. If you find a new issue, please let...

An integrated approach to security audits

A cyberattack can be devastating to any organization because it compromises sensitive data and, as a result, the financial position, strategic vision, and more important, the trust and credibility that the enterprise has built over the years. Given the magnitude of this risk, what role does the I...

Trellix Global Defenders: LAPSUS$ Data Breaches and Proactive Protections

Trellix Global Defenders: LAPSUS$ Data Breaches and Proactive Protections By Taylor Mullins · March 23, 2022 Trellix is continuing to monitor the threat activity related to the LAPSUS$ threat group and their recent breaches of large organizations such as NVIDIA, Samsung, Microsoft, and Okta. This...

OPENSUSE-SU-2022:0085-1 Security update for chromium

This update for chromium fixes the following issues: Update to version 99.0.4844.74 boo1197163 CVE-2022-0971: Use after free in Blink Layout CVE-2022-0972: Use after free in Extensions CVE-2022-0973: Use after free in Safe Browsing CVE-2022-0974: Use after free in Splitscreen CVE-2022-0975: Use...

Stable Channel Update for Desktop

The Stable channel has been updated to 98.0.4758.102 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 98.0.4758.102 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...

The vulnerability of the application’s web interface for automated internal and external IT audits. McAfee Policy Auditor allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the application’s web interface for automating internal and external IT audits, as provided by McAfee Policy Auditor, is related to the failure to protect the structure of the web page when processing the profileNodeID parameter. Exploitation of this vulnerability allows a...

The vulnerability of the application’s web interface for automated internal and external IT audits. McAfee Policy Auditor allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the application’s web interface for automating internal and external IT audits, as provided by McAfee Policy Auditor, is related to the failure to protect the structure of the web page when processing the UID request parameter. Exploiting this vulnerability allows a malicious...

McAfee Policy Auditor Cross-Site Scripting Vulnerability

McAfee Policy Auditor is an agent-based IT assessment solution that leverages the Security Content Automation Protocol SCAP to automate the processes required for internal and external IT and security audits.A reflective cross-site scripting vulnerability exists in versions of McAfee Policy Audit...

Summer2021-No.110 操作系统安全漏洞扫描与报警项目

This is a Python script for a Linux operating system risk assessment tool called Euler Guardian. The script is designed to perform various checks on the system, including firewall configuration, open ports, and system information. It also includes a module for sending email notifications. The...

Stable Channel Update for Desktop

The Stable channel has been updated to 94.0.4606.71 for Windows, Mac and Linux which will roll out over the coming days/weeks. Extended stable channel has also been updated to 94.0.4606.71 for Windows and Mac which will roll out over the coming days/weeks A full list of changes in this build is...