Debian dla-3442 : jupyter-nbconvert - security update

The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3442 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3442-1 [email protected] https://www.debian.org/lts/security/...

GHSA-X7FR-PG8F-93F5 sccache vulnerable to privilege escalation if server is run as root

Impact On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package, this means a user running the sccache...

GitHub Security Lab: [Python] Add Unicode Bypass Validation query tests and help

Vulnerability description not provided...

GitHub Security Lab: [Javascript]: Add new queries for Javascript Github Actions

Vulnerability description not provided...

[slackware-security] ntfs-3g

New ntfs-3g packages are available for Slackware 14.2 and 15.0 to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/ntfs-3g-2022.10.3-i586-1slack15.0.txz: Upgraded. Fixed vulnerabilities that may allow an attacker using a maliciously crafted...

CVE-2022-47174

Cross-Site Request Forgery CSRF vulnerability in WordPress Performance Team Performance Lab plugin = 2.2.0 versions...

CVE-2022-47174

Cross-Site Request Forgery CSRF vulnerability in WordPress Performance Team Performance Lab plugin = 2.2.0 versions...

Cross site request forgery (csrf)

Cross-Site Request Forgery CSRF vulnerability in WordPress Performance Team Performance Lab plugin = 2.2.0 versions...

CVE-2022-47174 WordPress Performance Lab Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WordPress Performance Team Performance Lab plugin = 2.2.0 versions...

CVE-2022-47174

CVE-2022-47174 is a CSRF vulnerability in the WordPress WordPress Performance Lab plugin, affecting versions

CVE-2022-47174 WordPress Performance Lab Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in WordPress Performance Team Performance Lab plugin = 2.2.0 versions...

WordPress plugin Performance Team Performance Lab 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

Wafaray - Enhance Your Malware Detection With WAF + YARA (WAFARAY)

WAFARAY is a LAB deployment based on Debian 11.3.0 stable x64 made and cooked between two main ingredients WAF + YARA to detect malicious files e.g. webshells, virus, malware, binaries typically through web functions upload files. Purpose In essence, the main idea came to use WAF + YARA YARA...

Performance Lab < 2.3.0 - CSRF

The plugin does not have CSRF checks in some places, which could allow attackers to make logged in users perform unwanted actions via CSRF attacks...

WordPress Performance Lab Plugin <= 2.2.0 is vulnerable to Cross Site Request Forgery (CSRF)

Software Performance Lab Type Plugin Vulnerable versions = 2.2.0 Fixed in 2.3.0 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2022-47174 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 59169cc460a1 Credits Muhammad Daffa...

[slackware-security] curl

New curl packages are available for Slackware 14.0, 14.1, 14.2, 15.0, and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/curl-8.1.0-i586-1slack15.0.txz: Upgraded. This update fixes security issues: more POST-after-PUT confusion. IDN...

CVE-2023-2692

A vulnerability has been found in SourceCodester ICT Laboratory Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file views/roominfo.php of the component GET Parameter Handler. The manipulation of the argument name leads to cro...

Screen SFT DAB 600/C Authentication Bypass Reset Board Config Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

Screen SFT DAB 600/C Authentication Bypass Erase Account Exploit

Summary Screen's new radio DAB Transmitter is reaching the highest technology level in both Digital Signal Processing and RF domain. SFT DAB Series - Compact Radio DAB Transmitter - Air. Thanks to the digital adaptive precorrection and configuatio flexibility, the Hot Swap System technology, the...

Intel® QAT Driver Advisory

Summary: Potential security vulnerabilities in some Intel® QuickAssist Technology QAT drivers may allow escalation of privilege, information disclosure or denial of service. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-218...