Equifax-vdp: Subdomain takeover at http://test.www.midigator.com

Vulnerability Subdomain test.www.midigator.com points to an AWS S3 bucket that no longer exists. I was able to take control of this bucket and serve my own content on it. Proof Of Concept code $ dig test.www.midigator.com snipped ;; ANSWER SECTION: test.www.midigator.com. 60 IN CNAME...

SUSE-SU-2022:3406-1 Security update for the Linux Kernel (Live Patch 2 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002418 fixes one issue. The following security issue was fixed: - CVE-2022-39188: Fixed a race condition between unmapmappingrange and munmap on VMPFNMAP mappings leads to stale TLB entry bsc1203116...

SUSE-SU-2022:3412-1 Security update for the Linux Kernel (Live Patch 1 for SLE 15 SP4)

This update for the Linux Kernel 5.14.21-1504002411 fixes several issues. The following security issues were fixed: - CVE-2022-29581: Fixed an improper Update of Reference Count vulnerability in net/sched that causes privilege escalation to root bsc1199695. - CVE-2022-39188: Fixed a race conditio...

SUSE-SU-2022:3409-1 Security update for the Linux Kernel (Live Patch 27 for SLE 15)

This update for the Linux Kernel 4.12.14-15083 fixes several issues. The following security issues were fixed: - CVE-2022-39188: Fixed a race condition between unmapmappingrange and munmap on VMPFNMAP mappings leads to stale TLB entry bsc1203116. - CVE-2022-1652: Fixed a use-after-free in...

SUSE-SU-2022:3379-1 Security update for the Linux Kernel (Live Patch 35 for SLE 12 SP5)

This update for the Linux Kernel 4.12.14-122133 fixes one issue. The following security issue was fixed: - CVE-2022-39188: Fixed a race condition between unmapmappingrange and munmap on VMPFNMAP mappings leads to stale TLB entry bsc1203116...

SUSE-SU-2022:3372-1 Security update for the Linux Kernel (Live Patch 28 for SLE 12 SP4)

This update for the Linux Kernel 4.12.14-95102 fixes one issue. The following security issue was fixed: - CVE-2022-39188: Fixed a race condition between unmapmappingrange and munmap on VMPFNMAP mappings leads to stale TLB entry bsc1203116...

SUSE-SU-2022:3362-1 Security update for the Linux Kernel (Live Patch 32 for SLE 15)

This update for the Linux Kernel 4.12.14-15000015098 fixes one issue. The following security issue was fixed: - CVE-2022-39188: Fixed a race condition between unmapmappingrange and munmap on VMPFNMAP mappings leads to stale TLB entry bsc1203116...

CVE-2022-38573

creationtimestamp| type| source ---|---|--- 2022-09-23 07:12:56+00:00| seen| https://t.me/cibsecurity/50298...

Ubuntu 20.04 LTS : etcd vulnerabilities (USN-5628-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5628-1 advisory. It was discovered that etcd incorrectly handled certain specially crafted WAL files. An attacker could possibly use this issue to cause a denial of...

Configure Virtual Channel Allow List for Epic Slingshot and Epic Warp Drive

The Virtual Channel Allow List feature has been enabled by default as of CVAD 2109 and has been carried forward to CVAD 2203 LTSR. When the allow list is enabled, Epic Slingshot and Epic Warp Drive require configuration of the Virtual Channel Allow List for their associated virtual channels to...

GHSA-MW37-WX8P-GP45 Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts

Craft CMS 3.70-RC1–3.7.55.1 and 4.0.0-RC1–4.2.0.1 are vulnerable to Cross Site Scripting XSS via entry revisions and drafts. Versions 3.7.55.2 and 4.2.1 contain patches for this issue...

Craft CMS vulnerable to Cross-site Scripting via entry revisions and drafts

Craft CMS 3.70-RC1–3.7.55.1 and 4.0.0-RC1–4.2.0.1 are vulnerable to Cross Site Scripting XSS via entry revisions and drafts. Versions 3.7.55.2 and 4.2.1 contain patches for this issue...

PT-2022-33916 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.15.61 Description: A boundary check issue in the put entry function has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

CVE-2022-29489

Cross-Site Request Forgery CSRF vulnerability in Sucuri Security plugin = 1.8.33 at WordPress leading to Event log entry creation...

CVE-2022-29489

Cross-Site Request Forgery CSRF vulnerability in Sucuri Security plugin = 1.8.33 at WordPress leading to Event log entry creation...

CVE-2022-29489

CVE-2022-29489 describes a CSRF vulnerability in the WordPress Sucuri Security plugin (versions

PT-2022-33583 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.2 Description: A boundary check issue in the put entry function has been identified. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to...

编号撤回

This CVE number has been withdrawn...

CVE-2022-36056

Cosign is a project under the sigstore organization which aims to make signatures invisible infrastructure. In versions prior to 1.12.0 a number of vulnerabilities have been found in cosign verify-blob, where Cosign would successfully verify an artifact when verification should have failed. First...

PT-2022-37274 · Git +1 · Hunspell

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow read, which occurs in the SfxEntry::add, AffixMgr::expand rootword, and SuggestMgr::ngsuggest functions. N...