4862 matches found
CVE-2022-4064
A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...
UBUNTU-CVE-2022-4064
A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...
CVE-2022-4064 Dalli Meta Protocol request_formatter.rb self.meta_set injection
A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...
CVE-2022-4064 Dalli Meta Protocol request_formatter.rb self.meta_set injection
A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...
CVE-2022-4064
Dalli (Ruby memcached client) up to version 3.2.2 is affected by a vulnerability in self.meta_set within lib/dalli/protocol/meta/request_formatter.rb of the Meta Protocol Handler. Manipulating the cas/ttl argument leads to code injection that can be launched remotely. Attacker success probability...
Dalli 注入漏洞
Dalli is a high-performance pure Ruby client for accessing memcached servers by Peter Goldstein, a personal developer. Dalli suffers from an injection vulnerability that stems from an affected self.metaset function in the lib/dalli/protocol/meta/requestformatter.rb file of the component Meta...
Unsanitized input leading to code injection in Dalli
A vulnerability was found in Dalli. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation leads to injection. The exploit has been disclosed to the public and may be used. The name of the patch is...
CVE-2022-4064 Dalli Meta Protocol request_formatter.rb self.meta_set injection
A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...
CVE-2022-4064
A vulnerability was found in Dalli up to 3.2.2. It has been classified as problematic. Affected is the function self.metaset of the file lib/dalli/protocol/meta/requestformatter.rb of the component Meta Protocol Handler. The manipulation of the argument cas/ttl leads to injection. It is possible ...
Some Meta Employees and Security Guards Hacked User Accounts
By Deeba Ahmed The fired individuals included on-contract security guards who worked for Meta and could access an internal tool for employees. This is a post from HackRead.com Read the original post: Some Meta Employees and Security Guards Hacked User Accounts...
Meta Reportedly Fires Dozens of Employees for Hijacking Users' Facebook and Instagram Accounts
Meta Platforms is said to have fired or disciplined over two dozen employees and contractors over the past year for allegedly compromising and taking over user accounts, The Wall Street Journal reported Thursday. Some of these cases involved bribery, the publication said, citing sources and...
WordPress Export Users With Meta plugin <= 0.6.8 - Auth. CSV Injection vulnerability
Auth. CSV Injection vulnerability discovered by Mika Patchstack Alliance in the WordPress Export Users With Meta plugin versions = 0.6.8. Solution No patched version is available. This plugin has been closed as of November 14, 2022 and is not available for download. This closure is temporary,...
kernel: ath9k_htc: fix uninit value bugs
In the Linux kernel, the following vulnerability has been resolved: ath9khtc: fix uninit value bugs Syzbot reported 2 KMSAN bugs in ath9k. All of them are caused by missing field initialization. In htcconnectservice svcmetalen and pad are not initialized. Based on code it looks like in current sk...
[SECURITY] Fedora 37 Update: kernel-6.0.8-300.fc37
The kernel meta package...
[SECURITY] [DLA 3186-1] exiv2 security update
Debian LTS Advisory DLA-3186-1 [email protected] https://www.debian.org/lts/security/ Dominik George November 10, 2022 https://wiki.debian.org/LTS Package : exiv2 Version : 0.25-4+deb10u3 CVE ID : CVE-2017-11683 CVE-2020-19716 CVE-2022-3756 Debian Bug : 876893 Three vulnerabilities have...
Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...
GHSA-Q35W-85PQ-RV3X Payara, when deployed to the root context, allows attackers to visit META-INF and WEB-INF
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...
CVE-2022-45129
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...
Code injection
Payara before 2022-11-04, when deployed to the root context, allows attackers to visit META-INF and WEB-INF, a different vulnerability than CVE-2022-37422. This affects Payara Platform Community before 4.1.2.191.38, 5.x before 5.2022.4, and 6.x before 6.2022.1, and Payara Platform Enterprise befo...
Payara Server 路径遍历漏洞
Payara Server is a cloud-native, innovative open source middleware platform from Payara UK. A security vulnerability exists in versions of Payara prior to 2022-11-04. This vulnerability allows an attacker to access the META-INF and WEB-INF.The following products and versions are affected: Payara...