GHSA-6G43-88CP-W5GV Prototype pollution in matrix-react-sdk

Impact In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and potentially affecting program logic. This is part 2, where...

Security Bulletin: GUI DOS vulnerability in SAN Volume Controller and Storwize Family (CVE-2014-0050)

Summary Security Bulletin: Security Bulletin: GUI DoS vulnerability in SAN Volume Controller and Storwize Family CVE-2014-0050 Vulnerability Details Security Bulletin --- Summary --- GUI interface can be disrupted by exploitation of Apache Tomcat vulnerability Vulnerability Details --- CVEID:...

Security Bulletin: CLI access security issue on IBM SAN Volume Controller and Storwize Family (CVE-2014-0880)

Summary Security Bulletin: CLI access security issue on IBM SAN Volume Controller and Storwize Family CVE-2014-0880 Vulnerability Details Security Bulletin --- Summary --- CLI security issue Vulnerability Details --- CVEID: CVE-2014-0880 DESCRIPTION: An unauthorized user with network access to a...

DEBIAN-CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

Authentication flaw

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor w...

CVE-2022-36060 Prototype pollution in matrix-react-sdk

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear...

CVE-2022-36060

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. Events sent with special strings in key places can temporarily disrupt or impede the matrix-react-sdk from functioning properly, such as by causing room or event tile crashes. The remainder of the application can appear...

CVE-2023-28103 Prototype pollution in matrix-react-sdk

matrix-react-sdk is a Matrix chat protocol SDK for React Javascript. In certain configurations, data sent by remote servers containing special strings in key locations could cause modifications of the Object.prototype, disrupting matrix-react-sdk functionality, causing denial of service and...

CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-36059

CVE-2022-36059 affects the matrix-js-sdk (Matrix JavaScript client) in versions before 19.4.0, where events containing special strings in key places can temporarily disrupt the SDK’s operation and may corrupt runtime data presented to the consumer. The issue is fixed in matrix-js-sdk 19.4.0; upgr...

CVE-2022-36059

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2023-28398 CVE-2023-28398

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor w...

CVE-2023-28398 CVE-2023-28398

Osprey Pump Controller version 1.01 could allow an unauthenticated user to create an account and bypass authentication, thereby gaining unauthorized access to the system. A threat actor could exploit this vulnerability to create a user account without providing valid credentials. A threat actor w...

CVE-2023-28398

CVE-2023-28398 affects the Osprey Pump Controller (version 1.01). The vulnerability allows an unauthenticated user to create an account and bypass authentication via an alternate path/channel, enabling unauthorized access to the pump controller. Impact per the sources includes disruption of opera...

Breaking the Mold: Pen Testing Solutions That Challenge the Status Quo

Malicious actors are constantly adapting their tactics, techniques, and procedures TTPs to adapt to political, technological, and regulatory changes quickly. A few emerging threats that organizations of all sizes should be aware of include the following: Increased use of Artificial Intelligence a...

Breaking the Mold: Pen Testing Solutions That Challenge the Status Quo

Malicious actors are constantly adapting their tactics, techniques, and procedures TTPs to adapt to political, technological, and regulatory changes quickly. A few emerging threats that organizations of all sizes should be aware of include the following: Increased use of Artificial Intelligence a...

The vulnerability of the Exiv2::PngImage::readMetadata() function in the pngimage.cpp component of the Exiv2 metadata management library allows a hacker to cause a service failure.

The vulnerability of the Exiv2::PngImage::readMetadata function in the pngimage.cpp component of the Exiv2 metadata management library is related to reading data beyond the buffer’s allowed limits. Exploiting this vulnerability could allow a malicious actor to cause service failures by using a...

The vulnerability of the coders/psd.c component in the console-based ImageMagick graphics editor allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the coders/psd.c component in the console-based ImageMagick graphics editor is related to a potential overflow condition. Exploiting this vulnerability could allow an attacker to access confidential data, compromise its integrity, and even cause service interruptions...

The vulnerability of the inet_http_server component in the Supervisor process control system allows a perpetrator to access confidential data and also cause service interruptions.

The vulnerability of the inethttpserver component in the Supervisor process control system is related to a file logging error. Exploiting this vulnerability can allow an attacker to gain access to confidential data and also cause service interruptions...