PT-2022-17730 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Remisol Advance versions 2.0.12.1 and below Description: A vulnerability was discovered in the Remisol Advance for the Normand Message Server, where the permissions set by Remisol Advance allow non-privileged users to overwrite and/or...

Beckman Coulter Remisol Advance 安全漏洞

Beckman Coulter Remisol Advance is a leading middleware solution for clinical laboratories, bridging laboratory information systems LIS and instrumentation from Beckman Coulter, Inc. A security vulnerability exists in Beckman Coulter Remisol Advance v2.0.12.1 and prior versions, which stems from...

CVE-2022-41301

A maliciously crafted PKT file when consumed through SubassemblyComposer.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

CVE-2022-40486

TP Link Archer AX10 V1 Firmware Version 1.3.1 Build 20220401 Rel. 574505553 was discovered to allow authenticated attackers to execute arbitrary code via a crafted backup file...

CVE-2022-38932

readelf in ToaruOS 2.0.1 has a global overflow allowing RCE when parsing a crafted ELF file...

PT-2022-24621 · Toaruos · Toaruos

Name of the Vulnerable Software and Affected Versions: ToaruOS version 2.0.1 Description: The issue allows for remote code execution when a crafted ELF file is parsed, due to a global overflow in the readelf component. Recommendations: For ToaruOS version 2.0.1, consider avoiding the use of reade...

Backdoor.Win32.Augudor.b MVID-2022-0644 Code Execution

Discovery / credits: Malvuln John Page aka hyp3rlinx c 2022 Original source: https://malvuln.com/advisory/94ccd337cbdd4efbbcc0a6c888abb87d.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Augudor.b Vulnerability: Remote File Write Code Execution Description: The...

CVE-2022-40979

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable...

CVE-2022-40979

In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable...

PT-2022-19291 · F Secure +1 · F-Secure +1

Name of the Vulnerable Software and Affected Versions: F-Secure and WithSecure products affected versions not specified Description: A Denial-of-Service issue was discovered in F-Secure and WithSecure products. The aerdl.so or aerdl.dll component may enter an infinite loop when unpacking PE files...

CVE-2022-35025

OTFCC commit 617837b was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8...

Malicious NPM Package Caught Mimicking Material Tailwind CSS Package

A malicious NPM package has been found masquerading as the legitimate software library for Material Tailwind, once again indicating attempts on the part of threat actors to distribute malicious code in open source software repositories. Material Tailwind is a CSS-based framework advertised by its...

CVE-2022-38532

Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component CFeatures of MSI.CentralServer.exe. This vulnerability allows attackers to escalate privileges via running a crafted executable...

CVE-2022-38532

Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component CFeatures of MSI.CentralServer.exe. This vulnerability allows attackers to escalate privileges via running a crafted executable...

CVE-2022-38532

Micro-Star International Co., Ltd MSI Center 1.0.50.0 was discovered to contain a vulnerability in the component CFeatures of MSI.CentralServer.exe. This vulnerability allows attackers to escalate privileges via running a crafted executable...

CVE-2022-40978

The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking...

Micro-Star International MSI Center 安全漏洞

Micro-Star International MSI Center is a monitoring and management platform from Micro-Star International China. All your favorite features can be found on the feature set page, such as Game Mode or Smart Priority. A security vulnerability exists in Micro-Star International MSI Center version...

JetBrains IntelliJ IDEA 代码问题漏洞

JetBrains IntelliJ IDEA is a set of integrated development environments for the Java language from the Czech company JetBrains. A security vulnerability exists in JetBrains IntelliJ IDEA versions prior to 2022.2.2, which stems from the vulnerability of the installer to an EXE search command...

PT-2022-24440 · Msi · Msi Center

Name of the Vulnerable Software and Affected Versions: MSI Center version 1.0.50.0 Description: The issue allows attackers to escalate privileges via running a crafted executable, exploiting a vulnerability in the component C Features of MSI.CentralServer.exe. Recommendations: For version 1.0.50....

CVE-2022-3214

Delta Industrial Automation's DIAEnergy, an industrial energy management system, is vulnerable to CWE-798, Use of Hard-coded Credentials. Versions prior to 1.9.03.009 have this vulnerability. Executable files could be uploaded to certain directories using hard-coded bearer authorization, allowing...