CVE-2022-1888 Fuji Electric Alpha7 PC Loader Fuji Electric Alpha7 PC Loader

Alpha7 PC Loader All versions is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacker to execute arbitrary code...

CVE-2022-1888 Fuji Electric Alpha7 PC Loader Fuji Electric Alpha7 PC Loader

Alpha7 PC Loader All versions is vulnerable to a stack-based buffer overflow while processing a specifically crafted project file, which may allow an attacker to execute arbitrary code...

CVE-2022-1888

CVE-2022-1888 affects Fuji Electric Alpha7 PC Loader (all versions). The issue is a stack-based buffer overflow that occurs while processing a specifically crafted project file, potentially allowing arbitrary code execution. CVSS indicates a HIGH impact with local attack vector and user interacti...

CVE-2022-34303

A flaw was found in Eurosoft bootloaders before 2022-06-01. An attacker may use this bootloader to bypass or tamper with Secure Boot protections. In order to load and execute arbitrary code in the pre-boot stage, an attacker simply needs to replace the existing signed bootloader currently in use...

CVE-2021-3856

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available...

Ubuntu: Security Advisory (USN-103-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2022-10737 · Red Hat · Keycloak

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns ClassLoaderTheme and ClasspathThemeResourceProviderFactory, which allow reading any file available as a resource to the classloader. ...

SUSE SLES15 Security Update : python-PyYAML (SUSE-SU-2022:2841-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:2841-1 advisory. - CVE-2020-1747: Fixed an arbitrary code execution issue when parsing an untrusted YAML file with the default loader bsc1165439. -...

MAL-2022-6306 Malicious code in stklus-loaer (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7e561a36b793215d238ce833fba5aeb0db52df8493ea94d982756b4da2fcf24c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5933 Malicious code in sass-loadre (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bb51edea624a3e91103abc49a51dd9751f229edb78a32272995972dd71e8927c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in hytm-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb22528f4b73bb053a055547c46308bd7c90ae86bd831c417e640a4204cd1ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3742 Malicious code in hytm-loader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb22528f4b73bb053a055547c46308bd7c90ae86bd831c417e640a4204cd1ece Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1189 Malicious code in awesomeypescriptxoader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0d5a948a553c5251cdff015a140d7b5bf901fdf5f4f2c15e1b12374ca9a8a707 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Hackers Using Bumblebee Loader to Compromise Active Directory Services

The malware loader known as Bumblebee is being increasingly co-opted by threat actors associated with BazarLoader, TrickBot, and IcedID in their campaigns to breach target networks for post-exploitation activities. "Bumblebee operators conduct intensive reconnaissance activities and redirect the...

UPX 安全漏洞

UPX is a portable and extensible executable compression program. A security vulnerability exists in UPX version 3.96, which stems from a Segmentaation error found in the invertptdynamic function of plxelf.cpp, where an attacker utilizes a crafted input file to allow invalid access to a memory...

vulkan bug fix and enhancement update

An update is available for shaderc, glslang, spirv-tools, vulkan-loader, vulkan-headers, vulkan-validation-layers, vulkan-tools. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

The vulnerability of the New Horizon Data Systems loader for Windows operating systems allows a hacker to circumvent existing security restrictions.

The vulnerability of the New Horizon Data Systems driver for Windows operating systems is related to security configuration errors. Exploiting this vulnerability could allow a hacker to circumvent existing security restrictions...

Malicious Package

Overview test-loader-utils is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package...

CERT/CC: CVE-2022-34301 Eurosoft Boot Loader Bypass

...

CVE-2022-34927

MilkyTracker v1.03.00 was discovered to contain a stack overflow via the component LoaderXM::load. This vulnerability is triggered when the program is supplied a crafted XM module file...