CVE-2022-39221 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod

McWebserver mod runs a simple HTTP server alongside the Minecraft server in seperate threads. Path traversal in McWebserver Minecraft Mod for Fabric and Quilt up to and including 0.1.2.1 and McWebserver Minecraft Mod for Forge up to and including 0.1.1 allows all files, accessible by the program,...

CVE-2022-39221 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') McWebserver Minecraft Mod

McWebserver mod runs a simple HTTP server alongside the Minecraft server in seperate threads. Path traversal in McWebserver Minecraft Mod for Fabric and Quilt up to and including 0.1.2.1 and McWebserver Minecraft Mod for Forge up to and including 0.1.1 allows all files, accessible by the program,...

CVE-2022-39221

CVE-2022-39221 concerns the McWebserver Minecraft Mod. A path-traversal flaw exists in the McWebserver mod for Fabric and Quilt up to and including 0.1.2.1 and for Forge up to 0.1.1, allowing an attacker to read any files accessible to the mod via HTTP requests. A patch was released in version 0....

PT-2022-24821 · Unknown · Mcwebserver Minecraft Mod

Name of the Vulnerable Software and Affected Versions: McWebserver Minecraft Mod for Fabric and Quilt versions 0.1.2.1 and earlier McWebserver Minecraft Mod for Forge versions 0.1.1 and earlier Description: The McWebserver mod runs a simple HTTP server alongside the Minecraft server in separate...

McWebserver 路径遍历漏洞

McWebserver is a simple web server that runs with the Minecraft server by the individual developer JonasJones. A path traversal vulnerability exists in McWebserver mod for Fabric and Quilt 0.1.2.1 and earlier, and McWebserver Minecraft Mod for Forge 0.1.1 and earlier, which can be exploited by an...

CVE-2022-39221: Improper Limitation of a Pathname to a Restricted Directory

McWebserver mod runs a simple HTTP server alongside the Minecraft server in seperate threads. Path traversal in McWebserver Minecraft Mod for Fabric and Quilt up to and including 0.1.2.1 and McWebserver Minecraft Mod for Forge up to and including 0.1.1 allows all files, accessible by the program,...

Ubuntu: Security Advisory (USN-339-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM Spectrum Discover is vulnerable to multiple vulnerabilities

Summary RamdaCVE-2021-42581 is vulnerable to remote attackers to execute arbitrary code on the system, caused by a prototype pollution in functions. An attacker could exploit this vulnerability to execute arbitrary code on the system. Node-forgeCVE-2022-24773, 217313, CVE-2022-24771, CVE-2020-772...

msg.sender lending pool and initiator can be forged in executeOperationin MImoLeverage

Lines of code Vulnerability details Impact Detailed description of the impact of this finding. the function signature is function executeOperation address calldata assets, uint256 calldata amounts, uint256 calldata premiums, address initiator, bytes calldata params external override returns bool...

CVE-2022-24912

The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret. It can allow an attacker to recover this secret as an...

CVE-2022-24912 Timing Attack

The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret. It can allow an attacker to recover this secret as an...

CVE-2022-24912

The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret. It can allow an attacker to recover this secret as an...

CVE-2022-24912: Observable Discrepancy

The package github.com/runatlantis/atlantis/server/controllers/events before 0.19.7 are vulnerable to Timing Attack in the webhook event validator code, which does not use a constant-time comparison function to validate the webhook secret. It can allow an attacker to recover this secret as an...

Security Bulletin: A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager

Summary A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager. Vulnerability Details CVEID:CVE-2022-24771 DESCRIPTION: Node.js node-forge module could allow a remote attacker to bypass security restrictions, caused by improper signature verification when checking the...

Security Bulletin: A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager

Summary A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager. Vulnerability Details CVEID:CVE-2022-24772 DESCRIPTION: Node.js node-forge module could allow a remote attacker to bypass security restrictions, caused by improper signature verification when checking for...

Security Bulletin: A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager

Summary A security vulnerability in Node.js node-forge affects IBM Cloud Automation Manager. Vulnerability Details CVEID:CVE-2022-24773 DESCRIPTION: Node.js node-forge module could allow a remote attacker to bypass security restrictions, caused by improper signature verification when checking...

Security Bulletin: A security vulnerability in Node.js node-forge affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Node.js node-forge affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID:CVE-2022-24772 DESCRIPTION: Node.js node-forge module could allow a remote attacker to bypass security restrictions, caused by improper signature...

Security Bulletin: A security vulnerability in Node.js node-forge affects IBM Cloud Pak for Multicloud Management Managed Services

Summary A security vulnerability in Node.js node-forge affects IBM Cloud Pak for Multicloud Management Managed Services. Vulnerability Details CVEID:CVE-2022-24771 DESCRIPTION: Node.js node-forge module could allow a remote attacker to bypass security restrictions, caused by improper signature...

MAL-2022-3104 Malicious code in forge-app-bones (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3069aeafe663cf9337bc77330ec228f4cb688a902ec121e7603182048669301d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in forge-app-bones (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3069aeafe663cf9337bc77330ec228f4cb688a902ec121e7603182048669301d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...