8884 matches found
Description of the security update for SharePoint Foundation 2013: September 13, 2022 (KB5002159)
Description of the security update for SharePoint Foundation 2013: September 13, 2022 KB5002159 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures...
September 13, 2022—KB5017365 (Security-only update)
None None...
Description of the security update for SharePoint Enterprise Server 2016 Language Pack: September 13, 2022 (KB5002142)
None None...
PT-2022-24443 · Archery · Archery
Name of the Vulnerable Software and Affected Versions: Archery versions 1.4.5 through 1.8.5 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities exist via the start file, end file, start time, and stop time parameters in the binlog2sql interface...
TYPO3 授权问题漏洞
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. TYPO3 suffers from an authorization issue vulnerability that stems from never evaluating the expiration time of the password reset link for TYPO3 back-end users...
TYPO3 安全漏洞
TYPO3 is a free and open source content management system framework CMS/CMF from the TYPO3 Association in Switzerland. A security vulnerability exists in TYPO3. An attacker exploited the vulnerability to distinguish between existing and non-existing user accounts by observing the response time...
KB5017396: Servicing stack update for Windows 10, version 1607 and Server 2016: September 13, 2022
None None...
Malicious code in e2e-test-repo (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6572edea50875b7a4383ee4b7dbed53e89120ed815f6699c7033f43c636fc189 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Shopware 安全漏洞
Shopware is a suite of open source e-commerce software from German company Shopware. A security vulnerability exists in Shopware version 5.7.14 and earlier versions, which stems from an ACL that can be bypassed by invoking the back-end management controller using a specific symbol...
CVE-2022-33941
PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products/versions are as...
Debian dla-3083 : puma - security update
The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3083 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3083-1 [email protected]...
NSC* ANNOUNCEMENT FOR CITRIX ADC(NETSCALER) MPX/SDX 14030 FIPS, 14060 FIPS, 14080 FIPS, 14000Z FIPS
Citrix Systems, Inc. announces a Notice of Status Change for the Citrix ADC NetScaler MPX 14030 FIPS, MPX 14060, MPX 14080 FIPS, MPX 14000Z FIPS, SDX 14030 FIPS, FIPS, SDX 14060 FIPS, SDX 14080 FIPS, SDX 14000Z FIPS Note: 14xxx FIPS upgrade SKUs and 14000Z FIPS upgrade SKUs for these models will ...
CVE-2022-37128
In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...
CVE-2022-37128
In D-Link DIR-816 A2v1.10CNB04.img the network can be initialized without authentication via /goform/wizardend...
D-Link DIR-816 安全漏洞
The D-Link DIR-816 and D-Link DIR-816 A2 are both wireless routers from China-based AUO D-Link. A security vulnerability exists in D-Link DIR-816 A2v1.10CNB04.img, which originates from the ability to initialize a network without authenticating via /goform/wizardend...
CISA Adds 10 New Known Actively Exploited Vulnerabilities to its Catalog
The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added 10 new actively exploited vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, including a high-severity security flaw affecting industrial automation software from Delta Electronics. The issue, tracked ...
PT-2022-7236 · Linux +1 · Linux Kernel +1
Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: A use-after-free flaw was found in the Linux Kernel. When a disk is removed, bdi unregister is called to stop further write-back and waits for associated delayed work to complete...
[The Lost Bots] S02E03: Browser-in-Browser Attacks — Don't Get (Cat)-Phished
!\The Lost Bots\ S02E03: Browser-in-Browser Attacks — Don't Get \Cat-Phishedhttps://blog.rapid7.com/content/images/2022/08/The-Lost-Bots-logo-large.png Welcome back to The Lost Bots! In our latest episode, we're talking about phishing attacks — but not your standard run-of-the-mill version...
2021 Top Malware Strains
Summary Immediate Actions You Can Take Now to Protect Against Malware: • Patch all systems and prioritize patching known exploited vulnerabilities. • Enforce multifactor authentication MFA. • Secure Remote Desktop Protocol RDP and other risky services. • Make offline backups of your data. • Provi...
