Google Android Security Bypass Vulnerability (CNVD-2022-89769)

Google Android is a Linux-based open source operating system from Google. A security bypass vulnerability exists in Google Android. An attacker can exploit this vulnerability to bypass security restrictions and gain out-of-bounds access...

TIBCO Security Advisory: September 21, 2022 - TIBCO EBX -CVE-2022-30577

TIBCO EBX Stored XSS vulnerability Original release date: September 21, 2022 Lastrevised: --- CVE-2022-30577 Source: TIBCOSoftware Inc. Products Affected TIBCO EBX versions 6.0.0 through 6.0.8 The following component is affected: Web Server Description The component listed above contains an easil...

Malicious code in logging-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24435d7a32e57c6147e074584cc772197d3b7a48db6ea6c2e05c8983f3a37e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4688 Malicious code in monitor-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5c011b2b9d9594136fc39f460cd41b7b6bc2d83f0e4d683f1e396184ff66b222 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4378 Malicious code in logging-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ca24435d7a32e57c6147e074584cc772197d3b7a48db6ea6c2e05c8983f3a37e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in module-config-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d812c19b53f06574d5863b3003258dc87f976c21a6187600441a3b74e1d3261e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in optimizer-plugin-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07b2794871339a2d8424d71ca9e8e0514ee68eda9532a9b9877de950becac68a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5111 Malicious code in optimizer-plugin-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 07b2794871339a2d8424d71ca9e8e0514ee68eda9532a9b9877de950becac68a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in commons-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862814d566867240e7ce2abb5bd5070f301f288285ce73b803bfb14a4b158e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2128 Malicious code in commons-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 862814d566867240e7ce2abb5bd5070f301f288285ce73b803bfb14a4b158e20 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4665 Malicious code in module-config-inc (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d812c19b53f06574d5863b3003258dc87f976c21a6187600441a3b74e1d3261e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31322

The CVE-2022-31322 entry affects Penta Security Systems’ WAPPLES, specifically version 6.0 r3 with 4.10-hotfix1. The vulnerability allows privilege escalation by overwriting files using SUID-enabled executables. Root cause and affected component: SUID flagged executables enabling local privilege ...

CVE-2022-31324

An arbitrary file download vulnerability in the downloadAction function of Penta Security Systems Inc WAPPLES v6.0 r3 4.10-hotfix1 allows attackers to download arbitrary files via a crafted POST request...

CVE-2022-35582

CVE-2022-35582 pertains to Penta Security WAPPLES (versions 4.0., 5.0.0. , 5.0.12.*) with an Incorrect Access Control flaw: the OS includes a built-in non-privileged user named ‘penta’ with a predefined password, whose existence and credentials are not documented. This enables potential unauthori...

TIBCO JasperReports Server 8.0.2 Community Edition Code Execution

Advisory ID: SYSS-2022-041 Product: JasperReports Server Manufacturer: TIBCO Software Inc. Tested Versions: 8.0.2 Community Edition Vulnerability Type: CWE-502: Deserialization of Untrusted Data Risk Level: High Solution Status: Fixed Manufacturer Notification: 2022-06-10 Solution Date: 2022-08-1...

CVE-2022-33941

PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products/versions are as...

CVE-2022-33941

PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. Affected products/versions are as...

CVE-2022-33941

CVE-2022-33941 : PowerCMS XMLRPC API from Alfasado Inc. contains a command injection vulnerability reachable via POST requests, allowing arbitrary Perl script execution and potentially arbitrary OS commands. Affected: PowerCMS 6.021 and earlier, 5.21 and earlier, 4.51 and earlier; developer notes...

CVE-2022-36427

The CVE-2022-36427 entry concerns the WordPress About Rentals plugin (versions

JVN#76024879: PowerCMS XMLRPC API vulnerable to command injection

PowerCMS XMLRPC API provided by Alfasado Inc. contains a command injection vulnerability CWE-74. Sending a specially crafted message by POST method to PowerCMS XMLRPC API may allow arbitrary Perl script execution, and an arbitrary OS command may be executed through it. According to the developer,...