kubernetes-client: Insecure deserialization in unmarshalYaml method

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...

CVE-2022-46159: Allocation of Resources Without Limits or Throttling

Discourse is an open-source discussion platform. In version 2.8.13 and prior on the stable branch and version 2.9.0.beta14 and prior on the beta and tests-passed branches, any authenticated user can create an unlisted topic. These topics, which are not readily available to other users, can take u...

CVE-2022-2969

Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...

CVE-2022-2969: Improper Limitation of a Pathname to a Restricted Directory

Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...

PT-2022-27767 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to 2.8.13 of the stable branch Discourse versions prior to 2.9.0.beta14 of the beta and tests-passed branches Description: Discourse is an open-source discussion platform. Unauthorized users may learn of the existence...

CVE-2022-46150: Exposure of Sensitive Information to an Unauthorized Actor

Discourse is an open-source discussion platform. Prior to version 2.8.13 of the stable branch and version 2.9.0.beta14 of the beta and tests-passed branches, unauthorized users may learn of the existence of hidden tags and that they have been applied to topics that they have access to. This issue...

CVE-2022-46148: Improper Neutralization of Input During Web Page Generation

Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS o...

CVE-2022-46148 Discourse allows self-XSS through malicious composer message

Discourse is an open-source messaging platform. In versions 2.8.10 and prior on the stable branch and versions 2.9.0.beta11 and prior on the beta and tests-passed branches, users composing malicious messages and navigating to drafts page could self-XSS. This vulnerability can lead to a full XSS o...

Discourse 输入验证错误漏洞

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. An input validation error vulnerability exists in versions prior to Discourse 2.9.0.beta13, which stems from the ability for users to post chat messages of unlimited...

Discourse 信息泄露漏洞

Discourse is an open source community discussion platform. The platform includes features such as community, email and chat rooms. An information disclosure vulnerability exists in Discourse versions 2.8.1 and earlier, and 2.9.0.beta.13 and earlier. An attacker can exploit this vulnerability to...

Unspecified Vulnerability in Super Xray

Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A security vulnerability exists in Super Xray version 0.2-beta Linux and Mac OS systems, which can be exploited by attackers to elevate privileges...

Privilege escalation

super-xray is the GUI alternative for vulnerability scanning tool xray. In 0.2-beta, a privilege escalation vulnerability was discovered. This caused inaccurate default xray permissions. Note: this vulnerability only affects Linux and Mac OS systems. Users should upgrade to super-xray 0.3-beta...

Super Xray 安全漏洞

Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A security vulnerability exists in Super Xray version 0.2-beta Linux and Mac OS systems, which can be exploited by attackers to elevate privileges...

CVE-2022-41950

The CVE affects the super-xray GUI for the vulnerability scanner xray. In 0.2-beta, a privilege escalation vulnerability resulted in inaccurate default permissions on Linux and macOS. Remediation is upgrading to super-xray 0.3-beta; no exploit details or in‑the‑wild data are provided in the suppl...

PT-2022-26179 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: super-xray versions 0.2-beta Description: A privilege escalation issue was discovered in super-xray, which is the GUI alternative for the vulnerability scanning tool xray. This issue resulted in inaccurate default xray permissions. The proble...

Spoofing

super-xray is a vulnerability scanner xray GUI launcher. In version 0.1-beta, the URL is not filtered and directly spliced ??into the command, resulting in a possible RCE vulnerability. Users should upgrade to super-xray 0.2-beta...

Super Xray 安全漏洞

Super Xray is an excellent vulnerability scanning tool by 4ra1n individual developers. A security vulnerability exists in Super Xray version 0.1-beta, which stems from the fact that its URLs are not filtered and directly spliced, leading to a possible RCE vulnerability...

PT-2022-26175 · Unknown · Super-Xray

Name of the Vulnerable Software and Affected Versions: super-xray version 0.1-beta Description: The issue is related to a vulnerability scanner GUI launcher. In the affected version, the URL is not filtered and is directly spliced into the command, resulting in a possible Remote Code Execution RC...

Google to Roll Out Privacy Sandbox Beta on Android 13 by Early 2023

Internet behemoth Google on Tuesday said it plans to roll out Privacy Sandbox for Android in beta to mobile devices running Android 13 starting early next year. "The Privacy Sandbox Beta will be available for ad tech and app developers who wish to test the ads-related APIs as part of their...

containers-common bug fix and enhancement update

An update is available for containers-common. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The containers-common package contains common configuration files a...