Opencast 安全漏洞

Opencast is a live video support software for large-scale automated video capture, management and distribution from the Opencast organization. A security vulnerability exists in Opencast versions prior to 9.6, which can be exploited by attackers to conduct denial-of-service attacks...

BlueCloud - Cyber Range including Velociraptor + HELK system with a Windows VM for security testing and R&D

Cyber Range deployment of HELK and Velociraptor! Automated terraform deployment of one system running HELK + Velociraptor server with one registered Windows endpoint in Azure or AWS. A collection of Terraform and Ansible scripts that automatically and quickly deploys a small HELK + Velociraptor R...

SUSE: Security Advisory (SUSE-SU-2021:1865-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2021:1870-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

SUSE SLES12 Security Update : kernel (Live Patch 36 for SLE 12 SP3) (SUSE-SU-2021:1865-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:1865-1 advisory. This update for the Linux Kernel 4.4.180-94135 fixes several issues. The following security issues were fixed: - Fix a kernel warni...

CVE-2021-32923

HashiCorp Vault and Vault Enterprise allowed the renewal of nearly-expired token leases and dynamic secret leases specifically, those within 1 second of their maximum TTL, which caused them to be incorrectly treated as non-expiring during subsequent use. Fixed in 1.5.9, 1.6.5, and 1.7.2...

PT-2021-19974 · Hashicorp · Hashicorp Vault +1

Name of the Vulnerable Software and Affected Versions: HashiCorp Vault and Vault Enterprise versions prior to 1.5.9 HashiCorp Vault and Vault Enterprise versions prior to 1.6.5 HashiCorp Vault and Vault Enterprise versions prior to 1.7.2 Description: The issue allowed the renewal of nearly-expire...

HashiCorp Vault 和 Vault Enterprise 代码问题漏洞

Hashicorp HashiCorp Vault is a private key access management tool from HashiCorp Hashicorp USA. A security vulnerability exists in HashiCorp Vault and Vault Enterprise that allows updates to expiring token leases and dynamic secret leases specifically those within 1 second of the maximum TTL, whi...

Weak Password Vulnerability in Huazhou Private Cloud-CDN Live Streaming Acceleration Server

Shenzhen Huashimida Information Technology Co., Ltd. is a smart hotel IT service provider. A weak password vulnerability exists in the Huashi Private Cloud-CDN live streaming acceleration server, which can be exploited by attackers to obtain sensitive information...

GetPaid < 2.3.4 - Authenticated Stored XSS

In the plugin, users with the contributor role and above can create a new Payment Form, however the Label and Help Text input fields were not getting sanitized properly. So it was possible to inject malicious content such as img tags, leading to a Stored Cross-Site Scripting issue which is...

Important: Red Hat Security Advisory: kpatch-patch security update

An update is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41722)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers ...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-41723)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve work efficiency, access to more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit the...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41721)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Generation System (CNVD-2021-41720)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Generation System, which can be exploited by attackers to obtain...

SQL Injection Vulnerability in Ricochet Cloud's WeChat Live Code Management System

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the RikCloud WeChat Live Code Management System. An attacker can exploit this vulnerability to...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40236)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

SQL Injection Vulnerability in Ricochet Cloud Group Live Code Management System (CNVD-2021-40237)

RikerCloud live code management system is an open source, free, live code system that can be operated online to improve efficiency, get more resources and so on. A SQL injection vulnerability exists in the Ricochet Cloud Live Code Management System. An attacker can exploit this vulnerability to...

Asus Zenfone Live (L1) phone has information leakage vulnerability

Asus Zenfone Live L1 is a smartphone launched by Asus in 2018. The Asus Zenfone Live L1 phone suffers from an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...