CVE-2022-0536 Improper Removal of Sensitive Information Before Storage or Transfer in follow-redirects/follow-redirects

Improper Removal of Sensitive Information Before Storage or Transfer in NPM follow-redirects prior to 1.14.8...

Info-ZIP UnZip security vulnerability

Info-ZIP UnZip is a Unix-based tool for decompressing ".zip" file formats developed by Greg Roelofs. unzip is vulnerable to a buffer overflow vulnerability that results from the conversion of utf-8 strings to native strings resulting in a segmentation error. An attacker could exploit this...

Denial Of Service (DoS)

tensorflow is vulnerable to denial of service. When the default settings are used, an attacker can cause the application to crash due to a null pointer dereference in the BuildXlaCompilationCache in xla platform info.cc...

Release Information for Veeam Backup for Microsoft 365 5d Cumulative Patch KB4278

Requirements Please confirm you are running Veeam Backup for Microsoft 365 build 5.0.3.1033 or higher prior to installing this cumulative patch KB4278. You can check this under Help and Support About in Veeam Backup for Microsoft 365 console. After upgrading, your build version will change to...

PT-2025-8155

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved. The issue occurs when changing RX ring parameters using ethtool, which triggers kernel warnings. The igc ethtool set ringparam...

CVE-2022-22804

creationtimestamp| type| source ---|---|--- 2022-02-05 02:45:26+00:00| seen| https://t.me/cibsecurity/36905...

CVE-2021-45986

Tenda routers G1 and G3 v15.11.0.179502CN were discovered to contain a command injection vulnerability in the function formSetUSBShareInfo. This vulnerability allows attackers to execute arbitrary commands via the usbOrdinaryUserName parameter...

The evolution of a Mac trojan: UpdateAgent’s progression

Our discovery and analysis of a sophisticated Mac trojan in October exposed a year-long evolution of a malware family—and depicts the rising complexity of threats across platforms. The trojan, tracked as UpdateAgent, started as a relatively basic information-stealer but was observed distributing...

Iranian Hackers Using New PowerShell Backdoor in Cyber Espionage Attacks

An advanced persistent threat group with links to Iran has updated its malware toolset to include a novel PowerShell-based implant called PowerLess Backdoor, according to new research published by Cybereason. The Boston-headquartered cybersecurity company attributed the malware to a hacking group...

[SECURITY] Fedora 35 Update: usbview-3.0-1.fc35

Display information about the topology of the devices connected to the USB bus on a Linux machine. It also displays detailed information on the individual devices...

CVE-2022-23872

Emlog pro v1.1.1 was discovered to contain a stored cross-site scripting XSS vulnerability in the component /admin/configure.php via the parameter footerinfo...

PT-2022-9294 · Schneider Electric · Ecostruxure Power Monitoring Expert

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Monitoring Expert versions 9.0 and prior Description: A vulnerability exists due to improper input validation, which could lead to arbitrary code execution when a user visits a page containing a malicious payload...

Mageia: Security Advisory (MGASA-2018-0126)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2017-0151)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mageia: Security Advisory (MGASA-2015-0172)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 This is an exploit created for CVE-2021-4034 m...

CVE-2019-25056

In Bromite through 78.0.3904.130, there are adblock rules in the release APK; therefore, probing which resources are blocked and which aren't can identify the application version and defeat the User-Agent protection mechanism...

Exploit for Out-of-bounds Write in Polkit_Project Polkit

CVE-2021-4034 🎧...

PT-2022-12281 · Unknown · Jerryscript

Name of the Vulnerable Software and Affected Versions: Jerryscript versions 3.0.0 and below Description: A stack overflow issue was discovered in Jerryscript via the ecma find named property function in ecma-helpers.c. Recommendations: For Jerryscript versions 3.0.0 and below, consider restrictin...

Cross site scripting

ShortDescription is a MediaWiki extension that provides local short description support. A cross-site scripting XSS vulnerability exists in versions prior to 2.3.4. On a wiki that has the ShortDescription enabled, XSS can be triggered on any page or the page with the action=info parameter, which...