7575 matches found
Puppet Server Security Vulnerability
Puppet Server is a software from Puppet Labs in the United States that is used to push configurations from a master server to other servers. A security vulnerability exists in Puppet Server that stems from the presence of a denial of service DOS vulnerability...
CVE-2023-44011
An issue in mojoPortal v.2.7.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component...
PT-2023-29066 · Unknown · Mojoportal
Name of the Vulnerable Software and Affected Versions: mojoPortal version 2.7.0.0 Description: An issue in mojoPortal allows a remote attacker to execute arbitrary code via a crafted script to the layout.master skin file at the Skin management component. Recommendations: For mojoPortal version...
SUSE SLES15: python3-salt / salt / salt-api / salt-bash-completion / salt-cloud / etc (SUSE-SU-2023:3864-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3864-1 advisory. Security issues fixed: - CVE-2023-20897: Fixed DOS in minion return. bsc1214796, bsc1213441 - CVE-2023-20898: Fixed Git Providers c...
Important: firefox
Issue Overview: A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes the issue of Mozilla developers and the Mozilla Fuzzing Team reporting memory safety bugs in Firefox 102. Some of these bugs showed evidence of memory corruption, and we presume that with enough effort...
LastPass: ‘Horse Gone Barn Bolted’ is Strong Password
The password manager service LastPass is now forcing some of its users to pick longer master passwords. LastPass says the changes are needed to ensure all customers are protected by their latest security improvements. But critics say the move is little more than a public relations stunt that will...
Dynmx - Signature-based Detection Of Malware Features Based On Windows API Call Sequences
dynmx spoken dynamics is a signature-based detection approach for behavioural malware features based on Windows API call sequences. In a simplified way, you can think of dynmx as a sort of YARA for API call traces so called function logs originating from malware sandboxes. Hence, the data basis f...
MAL-2023-8144 Malicious code in master-vanthinh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e920045339327b03cd9fdec06856b9d4779266c4a2deb959f5751a9b76f45f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in master-vanthinh (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e920045339327b03cd9fdec06856b9d4779266c4a2deb959f5751a9b76f45f0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Catalog Creation or Change Master Image fails when attempting to create ProvVM
Machine Creation Services actions, such as catalog creation, master image change, or adding additional VMs, may error unexpectedly for failure to create image preparation machine. CDF traces may indicate one of the following: "Error: creating virtual machine failed. AzureWriter-1 timed out while...
CVE-2023-5018
A vulnerability classified as critical has been found in SourceCodester Lost and Found Information System 1.0. This affects an unknown part of the file /classes/Master.php?f=savecategory of the component POST Parameter Handler. The manipulation of the argument id leads to sql injection. It is...
Lost and Found Information System SQL Injection Vulnerability
Lost and Found Information System is a lost and found information system by the individual developer oretnom23. A SQL injection vulnerability exists in Lost and Found Information System version 1.0, which originates from an unknown part of the file /classes/Master.php?f=savecategory in the...
[SECURITY] Fedora 38 Update: redis-7.0.13-1.fc38
Redis is an advanced key-value store. It is often referred to as a data structure server since keys can contain strings, hashes, lists, sets and sorted sets. You can run atomic operations on these types, like appending to a string; incrementing the value in a hash; pushing to a list; computing se...
WordPress Quiz And Survey Master Plugin <= 8.1.15 is vulnerable to Cross Site Request Forgery (CSRF)
Software Quiz And Survey Master Type Plugin Vulnerable versions = 8.1.15 Fixed in 8.1.16 OWASP Top 10 A5: Broken Access Control Classification Cross Site Request Forgery CSRF CVE N/A Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b180dc3e78fb Credits Unknown Required...
ROS-20230911-02
Vulnerability of the KeePass password manager password text field is related to storing credentials in unencrypted form. Exploitation of the vulnerability could allow an attacker acting remotely, to recover the master password in plaintext...
GHSA-7CWQ-P8CR-H9QG Buttercup allows attackers to obtain the hash of the master password
Buttercup allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/. This affects the Buttercup app up to version 2.20.3...
Buttercup allows attackers to obtain the hash of the master password
Buttercup allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/. This affects the Buttercup app up to version 2.20.3...
CVE-2023-41646
Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...
