CVE-2022-35030

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x4fe954...

mySCADA MyPRO Authenticated Command Injection (CVE-2023-28384)

Authenticated Command Injection in MyPRO use exploit/windows/scada/mypro/cmdexe msf undefinedcmdexe show actions ...actions... msf undefinedcmdexe set ACTION msf undefinedcmdexe show options ...show and set options... msf undefinedcmdexe run class MetasploitModule 'mySCADA MyPRO Authenticated...

CVE-2022-35621

creationtimestamp| type| source ---|---|--- 2022-09-21 22:41:26+00:00| seen| https://t.me/cibsecurity/50229...

mietv.com Cross Site Scripting vulnerability OBB-2940294

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

[Citrix VPN] Citrix Secure Access Client for MacOS gets error: "Error while processing request"

When connecting Citrix VPN from the latest Citrix Secure Access Client for MacOS, you may see the following error message before login: Error while processing request. Contact your administrator. Errors in client logs: Jul 6, 2022 at 9:43:32 AM GMT+9 : No certificate extension matching Subject...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC-Exploit A somewhat reliable PoC exploit for...

CVE-2022-29835

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content...

CVE-2022-29835

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content...

CVE-2022-29835

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content...

Design/Logic Flaw

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content...

CVE-2022-29835

CVE-2022-29835 concerns WD Discovery: WD Discovery Desktop App on Mac and Windows prior to 4.4.396 are signed with an unsafe SHA-1 hashing algorithm, enabling potential forged certificate signatures and compromising user content confidentiality. The issue affects WD Discovery software prior to ve...

CVE-2022-29835 WD Discovery's Use of Weak Hashing Algorithm for Code Signing

WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm. An attacker could use this weakness to create forged certificate signatures due to the use of a hashing algorithm that is not collision-free. This could thereby impact the confidentiality of user content...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-3...

Western Digital WD Discovery 加密问题漏洞

Western Digital MyCloud Home is a personal storage device from Western Digital.Western Digital WD Discovery is a remote connection management tool for Western Digital personal storage devices. A security vulnerability exists in Western Digital WD Discovery version 4.4.396 that stems from the use ...

PT-2022-19865 · Western Digital · Wd Discovery

Name of the Vulnerable Software and Affected Versions: Western Digital WD Discovery versions prior to 4.4.396 Description: The WD Discovery software executable files were signed with an unsafe SHA-1 hashing algorithm, which is not collision-free. This weakness could be exploited by an attacker to...

Cisco IOS XR Software Discovery Protocol DoS (cisco-sa-xr-cdp-wnALzvT2)

A vulnerability Cisco IOS XR can allow an unauthenticated, network-adjacent attacker to cause a denial of service DoS condition on an affected device. If the Cisco Discovery Protocol CDP is in use, an attacker can cause a heap buffer overflow resulting in a restart of the CDP process. Please see...

GSD-2022-1006320 drm/nouveau: fix another off-by-one in nvbios_addr

drm/nouveau: fix another off-by-one in nvbiosaddr This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006310 ext4: add EXT4_INODE_HAS_XATTR_SPACE macro in xattr.h

ext4: add EXT4INODEHASXATTRSPACE macro in xattr.h This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006307 net_sched: cls_route: remove from list when handle is 0

netsched: clsroute: remove from list when handle is 0 This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.9.326 by commit...

GSD-2022-1006277 iio: light: isl29028: Fix the warning in isl29028_remove()

iio: light: isl29028: Fix the warning in isl29028remove This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.291 by commit...