CVE-2022-29620

FileZilla v3.59.0 allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump.- NOTE: the vendor does not consider this a vulnerability...

PT-2022-19732 · Filezilla · Filezilla

Name of the Vulnerable Software and Affected Versions: FileZilla version 3.59.0 Description: The issue allows attackers to obtain cleartext passwords of connected SSH or FTP servers via a memory dump. It is noted that the vendor does not consider this a vulnerability. Recommendations: For FileZil...

Lumos System Can Find Hidden Cameras and IoT Devices in Your Airbnb or Hotel Room

A group of academics has devised a system that can be used on a phone or a laptop to identify and locate Wi-Fi-connected hidden IoT devices in unfamiliar physical spaces. With hidden cameras being increasingly used to snoop on individuals in hotel rooms and Airbnbs, the goal is to be able to...

Malicious code in pp-mp-connected-path (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49db9986ebf217c7ccbc304c8d4eaee13ec495c5891270c696f80b69f479b830 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-1118

Connected Components Workbench v13.00.00 and prior, ISaGRAF Workbench v6.0 though v6.6.9, and Safety Instrumented System Workstation v1.2 and prior for Trusted Controllers do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if open...

Remote code execution

Connected Components Workbench v13.00.00 and prior, ISaGRAF Workbench v6.0 though v6.6.9, and Safety Instrumented System Workstation v1.2 and prior for Trusted Controllers do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if open...

CVE-2022-1118

Rockwell Automation products, including Connected Components Workbench (v13.00.00 and prior), ISaGRAF Workbench (v6.0 through v6.6.9), and Safety Instrumented Systems Workstation (v1.2 and prior for Trusted Controllers), are vulnerable to CWE-502: Deserialization of Untrusted Data . The software ...

CVE-2022-1118 Rockwell Automation ISaGRAF Deserialization of Untrusted Data

Connected Components Workbench v13.00.00 and prior, ISaGRAF Workbench v6.0 though v6.6.9, and Safety Instrumented System Workstation v1.2 and prior for Trusted Controllers do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if open...

CVE-2022-1118: Deserialization of Untrusted Data

Connected Components Workbench v13.00.00 and prior, ISaGRAF Workbench v6.0 though v6.6.9, and Safety Instrumented System Workstation v1.2 and prior for Trusted Controllers do not limit the objects that can be deserialized. This allows attackers to craft a malicious serialized object that, if open...

GHSA-2CM5-F78C-H2C8 Missing permission checks in Jenkins Distributed Fork Plugin

It was found that there were no permission checks performed in the Distributed Fork plugin before and including 1.5.0 for Jenkins that provides the dist-fork CLI command beyond the basic check for Overall/Read permission, allowing anyone with that permission to run arbitrary shell commands on all...

CVE-2022-22783

A vulnerability in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8.102.20220310 exposes process memory fragments to connected clients, which could be observed by a passive attacker...

Platform Update: Build the Future on Akamai

Today, technology is infused into nearly everything we do. The data behind personalized recommendations, connected devices, and wearables has changed how we engage with the world around us — whether we’re driving to a new destination, purchasing from a new retailer, or monitoring our health...

PT-2022-15675 · Zoom · Zoom On-Premise Meeting Connector Mmr +1

Name of the Vulnerable Software and Affected Versions: Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 Zoom On-Premise Meeting Connector MMR version 4.8.102.20220310 Description: A vulnerability in Zoom On-Premise Meeting Connector exposes process memory fragments to connect...

Zoom On-​​Premise Meeting Connector Controller安全漏洞

Zoom On-Premise Meeting Connector Controller is an on-premise meeting connector from Zoom USA. A security vulnerability exists in Zoom On-Premise Meeting Connector Controller version 4.8.102.20220310 and On-Premise Meeting Connector MMR version 4.8. 102.20220310 A security vulnerability exists th...

The vulnerabilities of the software for designing and configuring controllers from the CCW platform, the SISW workstation for automated safety systems, and the ISaGRAF Workbench development environment for programmable logic controllers from Rockwell Automation allow attackers to execute arbitrary code by restoring unreliable data into memory.

The vulnerabilities of the software for designing and configuring controllers in the Connected Components Workbench, the workstations for automated safety systems called Safety Instrumented Systems Workstations, and the application development environment for programmable logic controllers in the...

CVE-2022-24479

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...

CVE-2022-24479

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...

CVE-2022-24479 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

...

CVE-2022-24479 Connected User Experiences and Telemetry Elevation of Privilege Vulnerability

...

CVE-2022-20761 Cisco 1000 Series Connected Grid Router Integrated Wireless Access Point Denial of Service Vulnerability

A vulnerability in the integrated wireless access point AP packet processing of the Cisco 1000 Series Connected Grid Router CGR1K could allow an unauthenticated, adjacent attacker to cause a denial of service condition on an affected device. This vulnerability is due to insufficient input...