IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from IBM USA. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation versions 21.0.0, 21.0.1, and 21.0.2 that...

PT-2022-17777 · Unknown · Pandora Fms

Name of the Vulnerable Software and Affected Versions: Pandora FMS version 7.0NG.759 Description: The issue allows Cross-Site Request Forgery in Bulk operation, specifically in the User operation, resulting in elevation of privilege to the Administrator group. Recommendations: For Pandora FMS...

Artica Pandora FMS 跨站请求伪造漏洞

Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. Artica Pandora FMS suffers from a cross-site request forgery vulnerability that originates in Pandora FMS v7.0NG.759 that...

CVE-2022-33169

IBM Robotic Process Automation (RPA) versions 21.0.0–21.0.2 are vulnerable to insufficiently protected credentials for users created via bulk upload. The IBM Security Bulletin (and associated CVE-2022-33169 records) confirm affected products and affected versions: IBM RPA < 21.0.3, IBM RPA for...

CVE-2022-33169

IBM Robotic Process Automation 21.0.0, 21.0.1, and 21.0.2 is vulnerable to insufficiently protected credentials for users created via a bulk upload. IBM X-Force ID: 228888...

Improper Input Validation

Description Input validation is a frequently-used technique for checking potentially dangerous inputs in order to ensure that the inputs are safe for processing within the code, or when communicating with other components. When software does not validate input properly, an attacker is able to cra...

Newsletter SQL注入漏洞

Newsletter is a one-click bulk email solution. A security vulnerability exists in the Newsletter v3.x series of releases that stems from a security issue with the zemeznewsletteremail parameter...

Malicious code in sa-383-bulk-creative-update (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cc6c432bfe7d8dd378007ac5eaa6114103d9d5708ce6d92ac2ea88cb6eb8640 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1690

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

CVE-2022-1690

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

CVE-2022-1690 Note Press <= 0.1.10 - Admin+ SQLi via Bulk Actions

The Note Press WordPress plugin through 0.1.10 does not sanitise and escape the ids from the bulk actions before using them in a SQL statement in an admin page, leading to an SQL injection...

Introducing EDR for Linux: Remediating and isolating threats on Linux servers

We’re excited to announce our new EDR for Linux offering, which extends our advanced protection and response capabilities to Linux devices via Nebula and OneView. In this post, we show you what remediating and isolating threats on Linux servers looks like with Malwarebytes EDR for Linux. Let’s ge...

CVE-2022-1611

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

CVE-2022-1611

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

CVE-2022-1611

CVE-2022-1611 concerns the WordPress Bulk Page Creator plugin (pre-1.1.4). The root cause is missing nonce checks in the page-creation functionality, enabling cross-site request forgery (CSRF). The vulnerability is documented across multiple sources as allowing arbitrary page creation via CSRF. E...

CVE-2022-1611 Bulk Page Creator < 1.1.4 - Arbitrary Page Creation via CSRF

The Bulk Page Creator WordPress plugin before 1.1.4 does not protect its page creation functionalities with nonce checks, which makes them vulnerable to CSRF...

WordPress plugin Bulk Page Creator 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a blogging platform developed using the PHP language. WordPress plugin is an application plugin. WordPress Bulk Page Creator plugin versions prior to 1.1.4 are vulnerable to cross-site request forgery, whic...

CVE-2021-27783

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

Code injection

User generated PPKG file for Bulk Enroll may have unencrypted sensitive information exposed...

CVE-2021-27783

CVE-2021-27783 concerns HCL Technologies BigFix Mobile/Modern Client Management (versions v2.0 and v2.1). Affected component: PPKG files generated during user Bulk Enroll. Root cause: unencrypted sensitive information exposed within these PPKG files. Impact: information disclosure, enabling expos...