26145 matches found
Researchers Disclose Details of Critical 'CosMiss' RCE Flaw Affecting Azure Cosmos DB
Microsoft on Tuesday said it addressed an authentication bypass vulnerability in Jupyter Notebooks for Azure Cosmos DB that enabled full read and write access. The tech giant said the problem was introduced on August 12, 2022, and rectified worldwide on October 6, 2022, two days after responsible...
Researchers Detail Windows Event Log Vulnerabilities: LogCrusher and OverLog
Cybersecurity researchers have disclosed details about a pair of vulnerabilities in Microsoft Windows, one of which could be exploited to result in a denial-of-service DoS. The exploits, dubbed LogCrusher and OverLog by Varonis, take aim at the EventLog Remoting Protocol MS-EVEN, which enables...
Ankr Launches Chainscanner Blockchain Explorer Tool
By Waqas The Chainscanner is available for free on the Ankr website, allowing users to search for transaction data, addresses, smart contracts, and much more. This is a post from HackRead.com Read the original post: Ankr Launches Chainscanner Blockchain Explorer Tool...
GHSA-MF4P-WJRM-CMJP AWS secrets displayed without masking by Jenkins S3 Explorer Plugin
S3 Explorer Plugin stores AWSSECRETACCESSKEY in its global configuration file s3explorer.xml on the Jenkins controller as part of its configuration. While this secret is stored encrypted on disk, in S3 Explorer Plugin 1.0.8 and earlier the global configuration form does not mask the...
CVE-2022-43426
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWSSECRETACCESSKEY form field, increasing the potential for attackers to observe and capture it...
CVE-2022-43426
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWSSECRETACCESSKEY form field, increasing the potential for attackers to observe and capture it...
Design/Logic Flaw
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWSSECRETACCESSKEY form field, increasing the potential for attackers to observe and capture it...
Awareness and guidance related to potential Service Fabric Explorer (SFX) v1 web client risk
Summary Microsoft was recently made aware of a Cross-Site Scripting XSS vulnerability CVE-2022-35829, that under limited circumstances, affects older versions of Service Fabric Explorer SFX. The current default SFX web client SFXv2 is not vulnerable to this attack. However, customers can manually...
潜在的な Service Fabric Explorer (SFX) v1 Web クライアント リスクに関する認識とガイダンス
本ブログは、Awareness and guidance related to potential Service Fabric Explorer SFX v1 web client riskの抄訳版です。最新の情報は原文を参照し...
Awareness and guidance related to potential Service Fabric Explorer (SFX) v1 web client risk
Summary Summary Microsoft was recently made aware of a Cross-Site Scripting XSS vulnerability CVE-2022-35829, that under limited circumstances, affects older versions of Service Fabric Explorer SFX. The current default SFX web client SFXv2 is not vulnerable to this attack. However, customers can...
CVE-2022-35829
creationtimestamp| type| source ---|---|--- 2022-10-19 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/10/awareness-and-guidance-related-to-potential-service-fabric-explorer-sfx-v1-web-client-risk/ 2023-01-05 21:55:21+00:00| published-proof-of-concept| https://t.me/RESOLUTEATTACK/316...
CVE-2022-43426
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWSSECRETACCESSKEY form field, increasing the potential for attackers to observe and capture it...
CVE-2022-43426
CVE-2022-43426 refers to Jenkins S3 Explorer Plugin versions 1.0.8 and earlier, where the AWS_SECRET_ACCESS_KEY field in the global configuration form is not masked. This creates a risk that an attacker could observe or capture the secret, as described in the CVE entry and corroborated by multipl...
PT-2022-26910 · Jenkins · Jenkins S3 Explorer Plugin +1
Name of the Vulnerable Software and Affected Versions: Jenkins S3 Explorer Plugin versions 1.0.8 and earlier Description: The issue concerns the Jenkins S3 Explorer Plugin, where the AWS SECRET ACCESS KEY form field is not masked, increasing the potential for attackers to observe and capture it...
CVE-2022-43426
Jenkins S3 Explorer Plugin 1.0.8 and earlier does not mask the AWSSECRETACCESSKEY form field, increasing the potential for attackers to observe and capture it...
October 18, 2022—KB5019509 (OS Build 22621.675) Out-of-band
None None...
CVE-2022-35829
Service Fabric Explorer Spoofing Vulnerability...
CVE-2022-35829
Service Fabric Explorer Spoofing Vulnerability...
