CVE-2022-41778

Delta Electronics InfraSuite Device Master versions 00.00.01a and prior deserialize user-supplied data provided through the Device-DataCollect service port without proper verification. An attacker could provide malicious serialized objects to execute arbitrary code upon deserialization...

alfred24 Click & Collect <= 1.1.7 - Admin+ Stored XSS

The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

WordPress alfred24 Click & Collect Plugin <= 1.1.7 is vulnerable to Cross Site Scripting (XSS)

Software alfred24 Click & Collect Type Plugin Vulnerable versions = 1.1.7 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47158 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID bd2c86c67b0a Credits Team WeBoB...

K69940053: BIG-IP iRules vulnerability CVE-2022-41833

Security Advisory Description When an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate. CVE-2022-41833 Impact Traffic is disrupted while the TMM process restarts. This vulnerability allows ...

PT-2025-43087

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists within the ima inode hash function due to a missing kfree call when ima collect measurement returns an error, excluding the case of -ENOMEM. The commit f3cc6b25dcc5,...

CVE-2022-41833

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate...

CVE-2022-41833

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate...

Command injection

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate...

CVE-2022-41833

Summary: CVE-2022-41833 affects BIG-IP when an iRule uses the HTTP::collect command on a virtual server, causing TMM to terminate and potentially DoS the system. Root cause/impact: undisclosed requests trigger TMM termination in BIG-IP 13.1.x; this is a data-plane DoS with disruption during TMM r...

CVE-2022-41833 BIG-IP iRule vulnerability CVE-2022-41833

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate...

PT-2022-26088 · F5 · F5 Big-Ip

Name of the Vulnerable Software and Affected Versions: F5 BIG-IP versions 13.1.x Description: The issue occurs when an iRule containing the HTTP::collect command is configured on a virtual server, allowing undisclosed requests to cause the Traffic Management Microkernel TMM to terminate...

CVE-2022-41833: Uncontrolled Resource Consumption

In all BIG-IP 13.1.x versions, when an iRule containing the HTTP::collect command is configured on a virtual server, undisclosed requests can cause Traffic Management Microkernel TMM to terminate...

F5 BIG-IP 资源管理错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. A resource management error vulnerability exists in all versions of F5 BIG-IP 13.1.x. The vulnerability stems from an...

Stop Spam Comments <= 0.2.1.2 - Access Token Bypass

The plugin does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request. Collect the name and value of ssckey for the target post and use it on the request. curl...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

CVE-2022-34500

The bin-collect package in PyPI before v0.1 included a code execution backdoor inserted by a third party...

PT-2022-22182

Name of the Vulnerable Software and Affected Versions bin-collect versions prior to 0.1 Description The issue concerns a code execution backdoor that was inserted by a third party into the bin-collect package available in PyPI. This backdoor allows for the execution of arbitrary code, posing a...