CVE-2022-43762 Memory leak when receiving messages in APROL Tbase server

Lack of verification in B&R APROL Tbase server versions R 4.2-07 may lead to memory leaks when receiving messages...

CVE-2022-43762

CVE-2022-43762 affects B&R APROL Tbase server prior to R 4.2-07. The issue is caused by a lack of verification in the Tbase server, leading to memory leaks when receiving messages. Affected versions are before R 4.2-07. Remediation observed in sources: update to R 4.2-07 or later; as a temporary ...

CVE-2022-43761 Lack of authentication when managing APROL database

Missing authentication when creating and managing the B&R APROL database in versions R 4.2-07 allows reading and changing the system configuration...

CVE-2022-43761

CVE-2022-43761 affects B&R APROL: missing authentication when creating/managing the APROL database prior to R 4.2-07 allows reading and modifying the system configuration. Impact: potential unauthorized access to configuration data; CVSS indicates HIGH/CRITICAL depending on vector. Remediation: u...

PT-2023-1843 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to missing authentication when creating and managing the B&R APROL database, allowing unauthorized reading and modification of system configuration. This can be exploited...

PT-2023-1648 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to insufficient validation of input parameters when changing configuration on the Tbase server, which could result in a buffer overflow. This may lead to Denial-of-Service...

PT-2023-1845 · B&R · B&R Aprol

Name of the Vulnerable Software and Affected Versions: B&R APROL versions prior to R 4.2-07 Description: The issue is related to incorrect checking of the return value of a method or function in the Tbase database server of the B&R APROL software solution for monitoring industrial systems. This c...

Malicious Package

Overview foo-b is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was install...

Security Bulletin: Vulnerability in SANNav Software used by IBM b-type SAN directors and switches.

Summary The SANnav Management Portal and Global View products are vulnerable due to an OpenSSL issue. The vulnerability has been addressed and can be resolved by applying the SANnav code level listed below. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An unspecified vulnerability in Ja...

lolfeedback SQL注入漏洞

lolfeedback is an app by Philip B. Personal Developer. After linking your League of Legends account to LoLFeedback, feedback can only be provided to players you have played or A SQL injection vulnerability exists in lolfeedback, which stems from an unknown functionality impact and operates to cau...

Archive any private memos + Delete any Shortcut + Edit any Shortcut from other users

Description User can archive any private memos, Delete any Shortcut and Edit any Shortcut from other users via api PATCH /api/memo/8 HTTP/1.1 "id":8,"rowStatus":"ARCHIVED" PATCH /api/shortcut/2 HTTP/1.1 "id":2,"title":"shortahihix","payload":"" DELETE /api/shortcut/2 Proof of Concept Login to...

CVE-2022-46347

A vulnerability has been identified in Parasolid V33.1 All versions V33.1.264, Parasolid V34.0 All versions V34.0.252, Parasolid V34.1 All versions V34.1.242, Parasolid V35.0 All versions V35.0.170, Solid Edge SE2022 All versions V222.0MP12, Solid Edge SE2022 All versions, Solid Edge SE2023 All...

PT-2022-27830 · Siemens · Solid Edge

Name of the Vulnerable Software and Affected Versions: Parasolid versions prior to V33.1.264 Parasolid versions prior to V34.0.252 Parasolid versions prior to V34.1.242 Parasolid versions prior to V35.0.170 Solid Edge SE2022 versions prior to V222.0MP12 Solid Edge SE2023 versions prior to...

b-artphotography.be Cross Site Scripting vulnerability OBB-3092851

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Researchers Uncover New Drokbk Malware that Uses GitHub as a Dead Drop Resolver

The subgroup of an Iranian nation-state group known as Nemesis Kitten has been attributed as behind a previously undocumented custom malware dubbed Drokbk that uses GitHub as a dead drop resolver to exfiltrate data from an infected computer, or to receive commands. "The use of GitHub as a virtual...

tischlerei-b-tieben.de Cross Site Scripting vulnerability OBB-3084086

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

b-r-m.com Cross Site Scripting vulnerability OBB-3077168

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-7155 · Delta Electronics · Cncsoft-B Dopsoft

Name of the Vulnerable Software and Affected Versions: Delta Electronics' CNCSoft-B DOPSoft versions 1.0.0.4 and prior Description: The issue is related to a heap-based buffer overflow that could allow an attacker to execute arbitrary code. This occurs when processing DPA files, potentially...

b-a.eu Cross Site Scripting vulnerability OBB-3061758

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

HPESBST04384 rev.2 - HPE B-series SAN Switches with Brocade Fabric OS (FOS), Remote Authentication Bypass

Potential Security Impact: Remote: Authentication Bypass, Unqualified Configuration Change SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE SN8000B 4-slot SAN Director Switch - v8.x prior to v8.2.3c1 HPE SN8000B 8-slot SAN Director Switch - v8.x prior to v8.2.3c1 HPE SN8600B...