649 matches found
[SECURITY] Fedora 36 Update: golang-x-perf-0-0.15.20210123gitbdcc622.fc36
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
Malicious code in github-action-benchmark (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f873a3ef25b833c6a1b1d4b8d5079265a195382dc4dbbfda249bcf9ae8d20c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2022-3371 Malicious code in github-action-benchmark (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f873a3ef25b833c6a1b1d4b8d5079265a195382dc4dbbfda249bcf9ae8d20c8f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Man In The Middle (MitM)
xterm-benchmark is vulnerable to man-in-the-middle. The library does not download its dependency package via secure channel using https, allowing an attacker to intercept the communication...
[SECURITY] Fedora 36 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc36
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
[SECURITY] Fedora 34 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc34
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
[SECURITY] Fedora 35 Update: golang-x-perf-0-0.14.20210123gitbdcc622.fc35
This package holds the source for various tools related to performance measurement, storage, and analysis. - cmd/benchstat contains a command-line tool that computes and 7 compares statistics about benchmarks. - cmd/benchsave contains a command-line tool for publishing benchmark results. - storag...
CVE-2022-22521
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...
CVE-2022-22521
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...
Code injection
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...
CVE-2022-22521 Privilege Escalation in Miele Benchmark Programming Tool
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...
CVE-2022-22521
CVE-2022-22521 affects the Miele Benchmark Programming Tool. Versions prior to 1.2.71 allow an attacker with low privileges to cause a user with administrative privileges to execute manipulated executables, enabling privilege escalation. The issue is documented across multiple sources (NVD/NVD CV...
Miele Benchmark Programming Tool 1.1.49 / 1.2.71 Privilege Escalation
SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation product: Miele Benchmark Programming Tool vulnerable version: at least 1.1.49 and 1.2.71 fixed version: 1.2.72 CVE number: CVE-2022-22521 impact:...
CVE-2022-22521
In Miele Benchmark Programming Tool with versions Prior to 1.2.71, executable files manipulated by attackers are unknowingly executed with users privileges. An attacker with low privileges may trick a user with administrative privileges to execute these binaries as admin...
PT-2022-15491 · Miele · Miele Benchmark Programming Tool
Name of the Vulnerable Software and Affected Versions: Miele Benchmark Programming Tool versions prior to 1.2.71 Description: The issue allows executable files manipulated by attackers to be unknowingly executed with user privileges. An attacker with low privileges may trick a user with...
Miele Benchmark Programming Tool 安全漏洞
Miele Benchmark Programming Tool is a desktop application from Miele Germany. It allows users to easily edit washing machine and tumble dryer programs and machine settings on their Miele Professional devices. A security vulnerability exists in Miele Benchmark Programming Tool versions prior to...
Ruby on Rails: ReDoS in Rack::Multipart
A regular expression denial of service ReDoS vulnerability was discovered in the Rack gem's Multipart module. This vulnerability allowed an attacker to cause a denial of service by sending a specially crafted header, resulting in excessive CPU usage on the server. The vulnerability has been patch...
dhrystone buffer overflow vulnerability
dhrystone is a comprehensive benchmark program for system integer programming from the personal developer Reinhold P. Weicker. dhrystone suffers from a buffer error vulnerability stemming from a null pointer dereference in the main function dhry1.c of dhrystone 2.1, which could be exploited by an...
Wallarm API Firewall outperforms Nginx in a production environment
Wallarm API Firewall is a free light-weighted API Firewall that protects your API endpoints in cloud-native environments with API schema validation. Wallarm API Firewall relies on a positive security model allowing calls that match a predefined API specification, while rejecting everything else...
benchmark-learning.com Cross Site Scripting vulnerability OBB-2120641
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...