409 matches found
Centralized Salesforce Development Framework 注入漏洞
Centralized Salesforce Development Framework is a centralized development framework on the Force.com platform by Scott Covert, an individual developer. An injection vulnerability exists in the Centralized Salesforce Development Framework that stems from an incorrect manipulation of the parameter...
GSD-2022-1007051 crypto: qat - fix DMA transfer direction
crypto: qat - fix DMA transfer direction This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.75 by commit...
PT-2022-35508 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v3.17 through v5.10.149 Description: The issue concerns a fix for DMA transfer direction in the crypto: qat module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...
PT-2022-35043 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.3 Description: The issue concerns a fix for DMA transfer direction in the crypto: qat module. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions...
PT-2022-35306
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.75 Description The issue concerns a fix for DMA transfer direction in the crypto: qat module. The actual impact and attack plausibility have not yet been proven. It was introduced in version v3.17 and fixed...
PT-2022-26538 · Candidats · Candidats
Name of the Vulnerable Software and Affected Versions: CandidATS version 3.0.0 Description: The issue allows an external attacker to steal the cookie of arbitrary users. This is possible because the application does not properly validate user input against XSS attacks, specifically on the...
PT-2022-6953 · Cisco · Cisco Ios Xr
Name of the Vulnerable Software and Affected Versions: Cisco IOS XR Software affected versions not specified Description: A vulnerability in the access control list ACL processing on MPLS interfaces in the ingress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker ...
MetaMask: Possible to spoof Origin in "Connected Sites"
A vulnerability was discovered in MetaMask that allowed for the spoofing of the origin domain name in the "Connected Sites" list. This was caused by a CSS style sheet that set the direction to "right-to-left", which resulted in the order of characters in the domain name being messed up and...
PT-2025-25975
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when DPCM tries to add valid BE connections without checking if the picked BE supports the given stream direction,...
Researchers Uncover Malware Controlling Thousands of Sites in Parrot TDS Network
The Parrot traffic direction system TDS that came to light earlier this year has had a larger impact than previously thought, according to new research. Sucuri, which has been tracking the same campaign since February 2019 under the name "NDSW/NDSX," said that "the malware was one of the top...
Over 16,500 Sites Hacked to Distribute Malware via Web Redirect Service
A new traffic direction system TDS called Parrot has been spotted leveraging tens of thousands of compromised websites to launch further malicious campaigns. "The TDS has infected various web servers hosting more than 16,500 websites, ranging from adult content sites, personal websites, universit...
PT-2022-7633
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a bug in the usbtmc driver, where the usbtmc ioctl request function uses usb rcvctrlpipe for all transfers, whether they are in or out. This can cause problems wi...
Unrestricted Uploads in Concrete5
Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value...
GHSA-G4GM-PXH3-29FQ Unrestricted Uploads in Concrete5
Concrete5 before 8.5.3 does not constrain the sort direction to a valid asc or desc value...
tcpdump bug fix and enhancement update
The tcpdump packages contain the tcpdump utility for monitoring network traffic. The tcpdump utility can capture and display the packet headers on a particular network interface or on all interfaces. Bug Fixes and Enhancements: RFE tcpdump support for direction and interface needed in AlmaLinux8...
Russian Hackers Heavily Using Malicious Traffic Direction System to Distribute Malware
Potential connections between a subscription-based crimeware-as-a-service CaaS solution and a cracked copy of Cobalt Strike have been established in what the researchers suspect is being offered as a tool for its customers to stage post-exploitation activities. Prometheus, as the service is calle...
Piwigo SQL注入漏洞
Piwigo is a free and open source web photo album software. A SQL injection vulnerability exists in the order0dir parameter in admin/userlistbackend.php in Piwigo version 11.4.0. An attacker can exploit this vulnerability to obtain sensitive database information...
CISA Releases Supplemental Direction on Emergency Directive for Microsoft Exchange Server Vulnerabilities
CISA has issued supplemental direction to Emergency Directive ED 21-02: Mitigate Microsoft Exchange On-Premises Product Vulnerabilities providing additional forensic triage and server hardening, requirements for federal agencies. Specifically, this update directs federal departments and agencies ...
