Malicious code in cd-interfaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a8b7b09c42b8fcefe3154f688e1a5276a1ba7007bc4f8232b894575848f363d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1849 Malicious code in cd-interfaces (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0a8b7b09c42b8fcefe3154f688e1a5276a1ba7007bc4f8232b894575848f363d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SUSE-RU-2022:2145-1 Recommended update for SUSE Manager Proxy 4.1

This update fixes the following issues: golang-github-QubitProducts-exporterexporter: - Adapted to build on Enterprise Linux. - Fix build for Red Hat 7 - Require Go = 1.14 also for CentOS - Add support for CentOS - Replace %?systemdrequires with %?systemdordering...

Trudesk 安全漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame USA. A security vulnerability exists in versions prior to Trudesk 1.2.4 that stems from the application's incorrect use of privileged APIs...

PT-2022-14454 · Unknown · Polonel/Trudesk

Name of the Vulnerable Software and Affected Versions: polonel/trudesk versions prior to 1.2.4 Description: The issue concerns the incorrect use of privileged APIs in the GitHub repository polonel/trudesk. Recommendations: For versions prior to 1.2.4, update to version 1.2.4 or later to resolve t...

The vulnerability relates to Rest interfaces of the Access Mgr component within the Oracle Access Manager software platform of Oracle Fusion Middleware. This vulnerability allows an attacker to gain unauthorized access to protected information.

The vulnerability of Rest interfaces for Oracle Access Manager exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information through specially crafted HTTP requests...

Admin-Panel_Finder - A Burp Suite Extension That Enumerates Infrastructure And Application Admin Interfaces (OTG-CONFIG-005)

A burp suite extension that enumerates infrastructure and application Admin Interfaces. OWASP References: Classification : Web Application Security Testing 02-Configuration and Deployment Management Testing OTG v4 : OWASP OTG-CONFIG-005 WSTG : WSTG-CONF-05 Why should I use this extension?...

CVE-2022-31757

The setting module has a vulnerability of improper use of APIs. Successful exploitation of this vulnerability may affect data confidentiality...

Double Public Key Signing Function Oracle Attack on `ed25519-dalek`

Versions of ed25519-dalek prior to v2.0 model private and public keys as separate types which can be assembled into a Keypair, and also provide APIs for serializing and deserializing 64-byte private/public keypairs. Such APIs and serializations are inherently unsafe as the public key is one of th...

The vulnerability of the web-based service interfaces of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of the web-service interfaces of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to trigger a service failure through a specially...

The vulnerability of the web-service interface of Cisco Adaptive Security Appliance (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to enhance their privileges.

The vulnerability of the web-service interfaces of Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to the improper assignment of privileges. Exploiting this vulnerability can allow a malicious actor to enhance their privileges through a specially...

[SECURITY] Fedora 36 Update: cups-2.4.2-1.fc36

CUPS printing system provides a portable printing layer for UNIX=EF=BF=BD=EF=BF=BD operating systems. It has been developed by Apple Inc. to promote a standard printing solution for all UNIX vendors and users. CUPS provides the System V and Berkeley command-line interfaces...

CVE-2022-20806

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

CVE-2022-20807 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

CVE-2022-20807 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

CVE-2022-20807

Cisco Expressway Series and Cisco TelePresence Video Conferencing Server (VCS) have multiple CVEs (including CVE-2022-20807) impacting the API and web-based management interfaces. The vulnerabilities allow an authenticated, remote attacker to write files or disclose sensitive information on an af...

CVE-2022-20806 Cisco Expressway Series and Cisco TelePresence Video Communication Server Vulnerabilities

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

CVE-2022-20806

Summary (CVE-2022-20806) : Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS) contain multiple vulnerabilities in their API and web-based management interfaces that could allow an authenticated, remote attacker to write files or disclose sensitive information on an af...

Design/Logic Flaw

Multiple vulnerabilities in the API and web-based management interfaces of Cisco Expressway Series and Cisco TelePresence Video Communication Server VCS could allow an authenticated, remote attacker to write files or disclose sensitive information on an affected device. For more information about...

GHSA-PF94-6V2V-CM3J Exposure of Resource to Wrong Sphere in Spring Cloud OpenFeign

In Spring Cloud OpenFeign 3.0.0 to 3.0.4, 2.2.0.RELEASE to 2.2.9.RELEASE, and older unsupported versions, applications using type-level @RequestMappingannotations over Feign client interfaces, can be involuntarily exposing endpoints corresponding to @RequestMapping-annotated interface methods...