CVE-2022-21810

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

CVE-2022-21810: Improper Neutralization of Special Elements used in an OS Command

All versions of the package smartctl are vulnerable to Command Injection via the info method due to improper input sanitization...

PT-2023-12672 · Smartctl · Smartctl

Name of the Vulnerable Software and Affected Versions: smartctl versions all Description: The issue is related to Command Injection via the info method due to improper input sanitization. This allows for potential exploitation. No information is provided about the estimated number of potentially...

Tracking the Stealthy Movements of Vidar Info-Stealer Malware

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary Vidar is an info-stealer malware that was first spotted in the wild in late 2018. It is considered a distinct fork of the Arkei malware family and has a simple business model where customers pay between...

PT-2025-37653

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak exists in the driver core due to the failure to free the acpi pld info structure before returning from an allocation failure. Specifically, the ACPI FREE function was not...

LastPass users should move their crypto funds, experts warn

Several experts have warned LastPass users who store cryptocurrency-related login information in their vaults to change that login information as soon as they can. Apparently, cybercriminals who have access to the stolen information are making it a priority to decrypt the data in an attempt to...

Third-Party Firm Exposes Personal Info for Nissan Customers

By Habiba Rashid In total, 18,000 customers of Nissan North America, Inc. had their personal information exposed to the public by a third-party developer. This is a post from HackRead.com Read the original post: Third-Party Firm Exposes Personal Info for Nissan Customers...

PT-2023-33371 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.226 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. This problem was introduced in version v5.3 and is fixed in Linux Kernel version...

PT-2023-33459 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.19 Description: The issue is related to the initialization of panic info to zero in the ASoC: SOF: mediatek component. The actual impact and attack plausibility have not yet been proven. Recommendations: Fo...

PT-2023-34135

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.86 Description The issue concerns a null pointer dereferencing in the power supply get battery info function. This problem was introduced in version v5.0 and fixed in version v5.15.86. The actual impact and...

PT-2023-10002 · Unknown · Bricco Authenticator Plugin

Name of the Vulnerable Software and Affected Versions: Bricco Authenticator Plugin versions prior to 1.39 Description: A critical issue was found in the Bricco Authenticator Plugin, affecting the authenticate/compare function of the DBAuthenticator.java file. This issue leads to sql injection...

PT-2023-33311 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.158 Description: The issue concerns an attempt to delete a multipath route when the fib info contains an nh reference. This problem was introduced in version v5.3 and is fixed in Linux Kernel version...

NethServer nethserver-phonenehome SQL注入漏洞

nethserver-phonenehome is an open source application for NethServer. It is used to track all NethServer installations worldwide. NethServer nethserver-phonenehome suffers from a SQL injection vulnerability that originates from a security issue in the function getinfo/getcountrycoor in the file...

PT-2023-12417 · Unknown · Nethserver

Name of the Vulnerable Software and Affected Versions: NethServer phonenehome affected versions not specified Description: A critical issue affects the function get info/get country coor of the file server/index.php, leading to sql injection. Recommendations: Apply a patch to fix this issue. As a...

GitLab 13.7 < 15.4.6 / 15.5 < 15.5.5 / 15.6 < 15.6.1 (CVE-2022-4255)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An info leak issue was identified in all versions of GitLab EE from 13.7 prior to 15.4.6, 15.5 prior to 15.5.5, and 15.6 prior to 15.6.1 which exposes user email id through webhook payload...

CVE-2022-2815

Insecure Storage of Sensitive Information in GitHub repository publify/publify prior to 9.2.10...

PT-2023-10221 · Unknown · Dovgalyuk Aibattle

Name of the Vulnerable Software and Affected Versions: Dovgalyuk AIBattle affected versions not specified Description: A critical vulnerability was found in Dovgalyuk AIBattle. The issue affects the registerUser function in the file site/procedures.php. The manipulation of the postLogin argument...

hikaku123.info Cross Site Scripting vulnerability OBB-3145350

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-18964

Name of the Vulnerable Software and Affected Versions UPX affected versions not specified Description A heap-based buffer overflow issue was discovered in UPX in the PackTmt::pack function in the p tmt.cpp file. The issue allows an attacker to cause a denial of service abort via a crafted file...

Gather MinIO Client Key

This module searches for MinIO Client credentials on a Windows host. Module Options msf use post/multi/gather/minioclient msf postminioclient show actions ...actions... msf postminioclient set ACTION msf postminioclient show options ...show and set options... msf postminioclient run This module...