CVE-2022-3369

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It...

CVE-2022-3369

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It...

CVE-2022-3369 Improper handling of registry symbolic links in Bitdefender Engines

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It...

CVE-2022-3369

CVE-2022-3369 describes an Improper Access Control flaw in the bdservicehost.exe component used by Bitdefender engines on Windows. An attacker can delete privileged registry keys by directing a registry symbolic link to a privileged key, enabling local impact. Affected products include Bitdefende...

CVE-2022-3369 Improper handling of registry symbolic links in Bitdefender Engines

An Improper Access Control vulnerability in the bdservicehost.exe component, as used in Bitdefender Engines for Windows, allows an attacker to delete privileged registry keys by pointing a Registry symlink to a privileged key. This issue affects: Bitdefender Engines versions prior to 7.92659. It...

PT-2022-21805 · Bitdefender · Bitdefender Internet Security +5

Name of the Vulnerable Software and Affected Versions: Bitdefender Engines versions prior to 7.92659 Bitdefender Antivirus Free versions prior to 7.92659 Bitdefender Antivirus Plus versions prior to 7.92659 Bitdefender Internet Security versions prior to 7.92659 Bitdefender Total Security version...

Evasion by manipulating MIME attachment

...

Yelp: Robots.txt file with potentially sensitive content.

Vulnerability description not provided...

PT-2022-5128 · Cisco · Cisco Secure Web Appliance +1

Name of the Vulnerable Software and Affected Versions: Cisco Secure Web Appliance versions affected versions not specified Description: The issue is related to insufficient input validation in the scanning engines of Cisco AsyncOS Software for Cisco Secure Web Appliance. This could allow a remote...

Ubuntu: Security Advisory (USN-5611-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8 Online Best Dark Web Search Engines for Tor Browser (2022)

By Waqas When it comes to the best dark web search engines, first and foremost, you want a search engine that is private and secure, as well as one that can be used anonymously. This is a post from HackRead.com Read the original post: 8 Online Best Dark Web Search Engines for Tor Browser 2022...

Malicious Package

Overview runkit-engines is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package wa...

Malicious code in runkit-engines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be2464f6278dde07fc3ccb7f25f3ffdac703b1655b64da93ec12e41a65f7e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5868 Malicious code in runkit-engines (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4be2464f6278dde07fc3ccb7f25f3ffdac703b1655b64da93ec12e41a65f7e8a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Simple Job Board < 2.10.0 - Resume Disclosure via Directory Listing

The plugin is susceptible to Directory Listing which allows the public listing of uploaded resumes in certain configurations. curl https://example.com/wp-content/uploads/jobpost Search for this path / folder in search engines to find uploaded resumes...

[SECURITY] Fedora 35 Update: hulk-0-0.6.20200620git9670699.fc35

HULK is a web server denial of service tool. It is designed to generate volumes of unique and obfuscated traffic at a web server, bypassing caching engines and therefore hitting the server's direct resource pool...

USN-5457-1 webkit2gtk vulnerabilities

A large number of security issues were discovered in the WebKitGTK Web and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could exploit a variety of issues related to web browser security, including cross-site scripting attacks, denial of service...

GtkRadiant 1.6.6 Buffer Overflow

===== Intro ===== GtkRadiant is a cross-platform level editor software for idtech game engines such as Quake. It comes with data authoring tools and a BSP map compiler called q3map2 which parses MAP files. The code has been around for a long time and uses unsafe string copy and format functions. ...

Latest Mobile Malware Report Suggests On-Device Fraud is on the Rise

An analysis of the mobile threat landscape in 2022 shows that Spain and Turkey are the most targeted countries for malware campaigns, even as a mix of new and existing banking trojans are increasingly targeting Android devices to conduct on-device fraud ODF. Other frequently targeted countries...

GHSA-PHQJ-XP48-7P7C Moodle does not use the forceloginforprofiles setting for course-profiles access control

Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via vectors involving use of a search engine, as demonstrated by the search functionality of Google,...