Fedora: Security Advisory for bind-dyndb-ldap (FEDORA-2022-ef038365de)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-38095

Cross-Site Request Forgery CSRF vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin = 4.1.3 at WordPress...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in AlgolPlus Advanced Dynamic Pricing for WooCommerce plugin = 4.1.3 at WordPress...

CVE-2022-38095

The CVE-2022-38095 entry concerns the WordPress plugin AlgolPlus Advanced Dynamic Pricing for WooCommerce (versions ≤ 4.1.3). Connected sources indicate a Cross-Site Request Forgery (CSRF) vulnerability arising from insufficient verification when updating settings, enabling actions authenticated ...

WordPress plugin AlgolPlus Advanced Dynamic Pricing for WooCommerce 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forger...

The vulnerability of the Cscape software arises from overflowing buffers in dynamic memory, allowing a hacker to execute arbitrary code.

The vulnerability of the Cscape software arises from an overflow in the buffer of dynamic memory. Exploiting this vulnerability allows an attacker to execute arbitrary code...

The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, allows a hacker to execute arbitrary code or enhance their privileges on Windows operating systems.

The vulnerability of the McAfee Smart Installer, a antivirus software tool developed by McAfee, exists on Windows operating systems. It involves the possibility of replacing the dynamic library. Exploiting this vulnerability allows an attacker to execute arbitrary code or increase their privilege...

ROS-20220920-01

The grubscriptfunctioncreate function of the Grub configuration file has a vulnerability due to a function override error. function override error while this function is already executed. Exploitation of the vulnerability allows an attacker to gain access to confidential data, compromise its...

CVE-2022-38611

Incorrect access control in Watchdog Anti-Virus v1.4.158 allows attackers to perform a DLL hijacking attack and execute arbitrary code via a crafted binary...

GHSA-XVQG-MV25-RWVW Parsing issue in matrix-org/node-irc leading to room takeovers

Impact Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. Patched The vulnerability has been patched in matrix-appservice-irc 0.35.0...

How to Do Malware Analysis?

Based on the findings of Malwarebytes' Threat Review for 2022, 40 million Windows business computers' threats were detected in 2021. In order to combat and avoid these kinds of attacks, malware analysis is essential. In this article, we will break down the goal of malicious programs' investigatio...

Honeywell SoftMaster 代码问题漏洞

Honeywell SoftMaster is a software from Honeywell USA. A security vulnerability exists in Honeywell SoftMaster version 4.51. The vulnerability can be exploited by an attacker to trick a user into loading a malicious DLL to execute arbitrary code...

WordPress Advanced Dynamic Pricing for WooCommerce plugin <= 4.1.3 - Cross-Site Request Forgery (CSRF) vulnerability

Cross-Site Request Forgery CSRF vulnerability leading to plugin settings change discovered by Muhammad Daffa Patchstack Alliance in WordPress Advanced Dynamic Pricing for WooCommerce plugin versions = 4.1.3 Solution Update the WordPress Advanced Dynamic Pricing for WooCommerce plugin to the lates...

Advanced Dynamic Pricing for WooCommerce < 4.1.4 - Settings Update via CSRF

The plugin does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

CVE-2022-38633

Genymotion Desktop v3.2.1 was discovered to contain a DLL hijacking vulnerability which allows attackers to escalate privileges and execute arbitrary code via a crafted binary...

CVE-2022-34101

A vulnerability was discovered in the Crestron AirMedia Windows Application, version 4.3.1.39, in which a user can place a malicious DLL in a certain path to execute code and preform a privilege escalation attack...

CVE-2022-39203

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...

CVE-2022-39203 Parsing issue in matrix-org/node-irc leading to room takeovers

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...

CVE-2022-39203 Parsing issue in matrix-org/node-irc leading to room takeovers

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...

CVE-2022-39203 Parsing issue in matrix-org/node-irc leading to room takeovers

matrix-appservice-irc is an open source Node.js IRC bridge for Matrix. Attackers can specify a specific string of characters, which would confuse the bridge into combining an attacker-owned channel and an existing channel, allowing them to grant themselves permissions in the channel. The...