USN-5549-1 python-django vulnerability

It was discovered that Django incorrectly handled certain FileResponse. An attacker could possibly use this issue to expose sensitive information or gain access over user machine...

CVE-2022-32965

OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service...

CVE-2022-32965

CVE-2022-32965 affects OMICARD EDM due to a hard-coded machine key in the server, enabling an unauthenticated remote attacker to send a serialized payload to execute arbitrary code, manipulate system data, and disrupt service. The PT-2022-21613 entry provides concrete details (affected software, ...

CVE-2022-32965

OMICARD EDM has a hard-coded machine key. An unauthenticated remote attacker can use the machine key to send serialized payload to the server to execute arbitrary code, manipulate system data and disrupt service...

wildfly: incorrect JBOSS_LOCAL_USER challenge location may lead to giving access to all the local users

A flaw was found in Wildfly. An incorrect JBOSSLOCALUSER challenge location when using the elytron configuration may lead to JBOSSLOCALUSER access to all users on the machine. The highest threat from this vulnerability is to confidentiality, integrity, and availability...

ITPison OMICARD EDM 信任管理问题漏洞

ITPison OMICARD EDM is a high-speed newsletter EDM marketing and distribution system from ITPison, China. A security vulnerability exists in ITPison OMICARD EDM. A remote attacker could exploit the vulnerability to send a serialized payload to the server using a machine key to execute arbitrary...

PT-2022-21613 · Unknown · Omicard Edm

Name of the Vulnerable Software and Affected Versions: OMICARD EDM affected versions not specified Description: The issue is related to a hard-coded machine key in OMICARD EDM. This allows an unauthenticated remote attacker to send a serialized payload to the server, which can result in the...

Malicious code in lwc-playground (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 98e335481687ce6c9f293923692ec4f19da6a49f4d5fe8c014625761fe5a23cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PVS : Failed to created machines using CVAD wizard , error : Cannot create BDM partition for device

PVS : Failed to created machines using Citrix Virtual Apps and Desktop wizard , error : Cannot create BDM partition for device xxxxxxx PVSDllHypervisorPlatforms,,0,,5,EntryExit," targetFolder: Rxxxtestxxx Esx.cs5185: UploadFile",""PVSDllHypervisorPlatformsAO,,0,,5,Information," httpUrl:...

[SECURITY] Fedora 36 Update: xe-guest-utilities-latest-7.30.0-6.fc36

Scripts for monitoring XAPI project virtual machine. Writes distribution version information and IP address to XenStore. This package follows the latest version of xe-guest-utilities upstream...

Fedora: Security Advisory for golang-github-denisbrodbeck-machineid (FEDORA-2022-ea8f4e232d)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 36 Update: butane-0.15.0-2.fc36

Butane translates human-readable Butane Configs into machine-readable Ignition configs for provisioning operating systems that use Ignition...

Information disclosure

Trend Micro Security 2021 and 2022 Consumer is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine...

CVE-2022-35234

Trend Micro Security 2021 and 2022 Consumer is vulnerable to an Out-Of-Bounds Read Information Disclosure Vulnerability that could allow an attacker to read sensitive information from other memory locations and cause a crash on an affected machine...

How to Combat the Biggest Security Risks Posed by Machine Identities

The rise of DevOps culture in enterprises has accelerated product delivery timelines. Automation undoubtedly has its advantages. However, containerization and the rise of cloud software development are exposing organizations to a sprawling new attack surface. Machine identities vastly outnumber...

CLSA-2022-1659018147 Fixed CVE-2021-22543 in kernel

KVM: do not allow mapping valid but non-reference-counted pages CVE-2021-22543...

Zulip 安全漏洞

Zulip is a powerful open source group chat application from the Zulip team. It is used to combine the immediacy of real-time chat with the productivity benefits of threaded conversations. A security vulnerability exists in versions prior to Zulip 1.3.12, which stems from the fact that other users...

Malicious code in db-dolphin (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4f31c91df2858e430559be9af39930325d40063e82634ee7dff673a2d7fab5cc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2022-31206

The Omron SYSMAC Nx product family PLCs NJ series, NY series, NX series, and PMAC series through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software which compiles IEC 61131-3 conformant POU code to native machine code for execution...

Design/Logic Flaw

The Omron SYSMAC Nx product family PLCs NJ series, NY series, NX series, and PMAC series through 2022-005-18 lack cryptographic authentication. These PLCs are programmed using the SYMAC Studio engineering software which compiles IEC 61131-3 conformant POU code to native machine code for execution...