WordPress WordPress Tag Cloud Plugin – Tag Groups plugin < 1.43.10.1 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress WordPress Tag Cloud Plugin – Tag Groups plugin versions 1.43.10.1. Solution Update the WordPress WordPress Tag Cloud Plugin – Tag Groups plugin to the latest available version at least 1.43.10.1...

WordPress WordPress Tag Cloud Plugin – Tag Groups plugin < 1.43.10.1 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress WordPress Tag Cloud Plugin – Tag Groups plugin versions 1.43.10.1. Solution Update the WordPress WordPress Tag Cloud Plugin – Tag Groups plugin to the latest available version at least 1.43.10.1...

PT-2022-28941

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.10 through v5.16.7 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

PT-2022-28856

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

Ukraine’s Defense—and Hacktivists—Have Raised Over $4M in Crypto

Russia’s invasion into the country sparked a surge of crypto donations to resistance groups...

The vulnerability of the Tab Groups component in Google Chrome allows a hacker to execute arbitrary code.

The vulnerability of Google Chrome’s Tab Groups component is caused by an overflow in the buffer in the dynamic memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Gitlab -- multiple vulnerabilities

Gitlab reports: Runner registration token disclosure through Quick Actions Unprivileged users can add other users to groups through an API endpoint Inaccurate display of Snippet contents can be potentially misleading to users Environment variables can be leaked via the sendmail delivery method...

GSD-2022-1000285 Unsafe default configuration values in Nginx version all version

INFORMATIONAL In Nginx, all versions, a number of unsafe default configuration values exists in the web server that can be attacked via the network resulting in disclosure of information and availability. These include but are not limited to: 1. Not enough file descriptors per worker 2. The...

openSUSE 15 Security Update : chromium (openSUSE-SU-2022:0042-1)

The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2022:0042-1 advisory. - Use after free in File Manager. CVE-2022-0603 - Heap buffer overflow in Tab Groups. CVE-2022-0604 - Use after free in Webstore API...

Heap Buffer Overflow

Google Chrome is vulnerable to heap buffer overflow. The vulnerability exist in Tab Groups...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

Design/Logic Flaw

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

PT-2022-28503

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.99 Description The issue concerns the RDMA/ucma component, specifically the protection of multicast groups during concurrent leaves. The actual impact and attack plausibility have not yet been proven...

Cerebrate 安全漏洞

Cerebrate is an open source platform. Designed to act as an interconnection orchestrator for trusted contact information providers and other security tools, a security vulnerability exists in Cerebrate 1.4, which stems from a faulty shared group ACL allowing non-privileged users to edit and modif...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

CVE-2022-25318

An issue was discovered in Cerebrate through 1.4. An incorrect sharing group ACL allowed an unprivileged user to edit and modify sharing groups...

CVE-2022-25318

CVE-2022-25318 affects Cerebrate up to version 1.4. The issue stems from an incorrect sharing group ACL that allows an unprivileged user to edit and modify sharing groups. Reported across multiple feeds, the vulnerability enables modification of sharing-group configuration by non-privileged users...

Chromium: CVE-2022-0604 Heap buffer overflow in Tab Groups

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...