The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to the use of memory after it is freed, allows attackers to execute arbitrary code or cause service interruptions.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit relates to the use of memory after it is freed. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code or cause a service failure using specially created web content...

The vulnerability of the eBPF subsystem in the Linux operating system allows a hacker to trigger a service failure or increase their privileges.

The vulnerability of the eBPF subsystem in the Linux operating system is related to reading data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure or increase their privileges...

CVE-2022-41675

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

CVE-2022-32966

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

Code injection

A remote attacker with general user privilege can inject malicious code in the form content of Raiden MAILD Mail Server website. Other users export form content as CSV file can trigger arbitrary code execution and allow the attacker to perform arbitrary system operation or disrupt service on the...

Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

CVE-2022-41675

CVE-2022-41675 affects Raiden MAILD Mail Server (Team Johnlong) with a formula/injection vulnerability in form content. A remote attacker with general user privileges can inject malicious code into the form content on the web interface. When another user exports that content to CSV, the exported ...

CVE-2022-32966 Realtek RTL8111FP-CG - Missing Authorization

RTL8168FP-CG Dash remote management function has missing authorization. An unauthenticated attacker within the adjacent network can connect to DASH service port to disrupt service...

CVE-2022-32966

CVE-2022-32966 concerns Realtek RTL8111FP-CG/RTL8168FP-CG devices. The Dash remote management function has missing authorization, enabling an unauthenticated attacker on an adjacent network to connect to the DASH service port and disrupt service. The CVE is documented with a CVSSv3.1 base score o...

PT-2022-26018 · Unknown · Raiden Maild Mail Server

Name of the Vulnerable Software and Affected Versions: Raiden MAILD Mail Server affected versions not specified Description: A remote attacker with general user privilege can inject malicious code in the form content of the Raiden MAILD Mail Server website. When other users export the form conten...

The vulnerability of the microprogrammed software of Moxa routers series TN-5916, TN-4900, EDR-G903, EDR-G902, and EDR-810 is related to errors in processing input data, which can allow a perpetrator to cause service failures.

The vulnerability of the microprogrammed routing software from Moxa, models TN-5916, TN-4900, EDR-G903, EDR-G902, and EDR-810, is related to errors in processing input data. Exploiting this vulnerability can allow an attacker to cause service failures by sending specially crafted HTTP/HTTPS...

The vulnerability of VMware Cloud Foundation’s virtualization platform, related to incorrect restrictions on XML links to external objects, allows attackers to trigger service failures or expose protected information.

The vulnerability of VMware Cloud Foundation’s virtualization platform is related to incorrect restrictions on XML references to external objects. Exploiting this vulnerability can allow a malicious actor to cause service failures or expose sensitive information using specially created XML code...

The vulnerability of the TIFFReadRGBATileExt() function in the LibTIFF library, related to integer overflow, allows attackers to cause a service failure.

The vulnerability of the TIFFReadRGBATileExt function libtiff/tifgetimage.c in the LibTIFF library is related to integer overflow. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created file...

The vulnerability of the USB redirection channel (urbdrc) in the FreeRDP remote desktop protocol allows a intruder to gain unauthorized access to protected information or cause a service failure.

The vulnerability of the USB redirection channel urbdrc in the FreeRDP remote desktop protocol is related to the issue where operations are performed outside the buffer during data input length checking. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...

Security Advisory - Improper Input Validation Vulnerability in a Huawei Children's Watch

Huawei Aslan Children's Watch has an improper input validation vulnerability. Successful exploitation may cause the watch's application service abnormal. Vulnerability ID:HWPSIRT-2022-53187 This vulnerability has been assigned a CVE ID: CVE-2022-39012...

Stegowiper - A Powerful And Flexible Tool To Apply Active Attacks For Disrupting Stegomalware

Over the last 10 years, many threat groups have employed stegomalware or other steganography-based techniques to attack organizations from all sectors and in all regions of the world. Some examples are: APT15/Vixen Panda, APT23/Tropic Trooper, APT29/Cozy Bear, APT32/OceanLotus, APT34/OilRig,...

The vulnerability of the Unbound DNS-server module allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Unbound DNS-server module involves a lack of measures for securing input data. Exploiting this vulnerability allows a remote attacker to access confidential data, compromise its integrity, and cause service failures...

The vulnerability of the PCIDSK::CPCIDSKFile::ReadFromFile function in the GDAL geospatial data translator library allows a attacker to cause a service failure.

The vulnerability of the PCIDSK::CPCIDSKFile::ReadFromFile function in the GDAL geospatial data transformation library is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

The vulnerability of the my_strcasecmp_8bit component of the MariaDB database, related to memory usage after its deallocation, allows a attacker to cause a service failure.

The vulnerability of the mystrcasecmp8bit component of the MariaDB database is related to the use of memory after it is freed. Exploiting this vulnerability allows an attacker to cause a service failure through a specially crafted SQL query...

The vulnerability of the software platform for managing administrative policies and privileges, Policykit, is related to the lack of mechanisms for encoding or shielding output data. This allows attackers to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the software platform for managing administrative policies and privileges related to Policykit lies in the lack of mechanisms for encoding or shielding output data. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrity,...