SolarWinds Network Performance Monitor PropertyBagJsonConverter Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the PropertyBagJsonConverter. The issue results from the lack of prop...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. Linux kernel is vulnerable. The vulnerability affects the function jlinkinit in the file monitor/jlink.c of the component BlueZ. manipulation leads to a denial of service. No details of the vulnerability...

Oracle MySQL Enterprise Monitor (Oct 2022 CPU)

The versions of MySQL Enterprise Monitor installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory. - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General Moment.js. Supported versions that...

Yield Monitor Integrates The DeFiChain Blockchain Into Its Database

By Owais Sultan The Yield Monitor database already includes various cryptocurrency projects, such as Algorand ALGO, Avalanche AVAX, Binance BNB, Ethereum ETH, Fantom FTM, and Polygon MATIC. This is a post from HackRead.com Read the original post: Yield Monitor Integrates The DeFiChain Blockchain...

CVE-2022-39267

Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With:...

Authentication flaw

Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With:...

Vulnerabilities fixed in Oracle MySQL

Vulnerabilities have been fixed in Oracle MySQL. The vulnerabilities allow a malicious party to perform attacks that lead to the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User Rights Access to sensitive data Oracle has fixed vulnerabilities i...

CVE-2022-39267 Brokercap Bifrost vulnerable to authentication bypass for admin and monitor user groups

Bifrost is a heterogeneous middleware that synchronizes MySQL, MariaDB to Redis, MongoDB, ClickHouse, MySQL and other services for production environments. Versions prior to 1.8.8-release are subject to authentication bypass in the admin and monitor user groups by deleting the X-Requested-With:...

PT-2022-5926 · Bluez +2 · Bluez +2

Name of the Vulnerable Software and Affected Versions: Linux Kernel affected versions not specified Description: The issue is related to the function jlink init in the file monitor/jlink.c of the BlueZ component, which is associated with incorrect resource cleanup or deallocation. This can lead t...

GHSA-MXRX-FG8P-5P5J Bifrost vulnerable to authentication check flaw that leads to authentication bypass

Impact The admin and monitor user groups need to be authenticated by username and password. If we delete the X-Requested-With: XMLHttpRequest field in the request header,the authentication will be bypassed. Patches https://github.com/brockercap/Bifrost/pull/201 Workarounds Upgrade to the latest...

Bifrost vulnerable to authentication check flaw that leads to authentication bypass

Impact The admin and monitor user groups need to be authenticated by username and password. If we delete the X-Requested-With: XMLHttpRequest field in the request header,the authentication will be bypassed. Patches https://github.com/brockercap/Bifrost/pull/201 Workarounds Upgrade to the latest...

Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2022-38712)

Summary IBM WebSphere Application Server is shipped as a component of Business Monitor. Information about a security vulnerability affecting WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixe...

Security Bulletin: Enterprise Content Management System Monitor is affected by vulnerability in Dojo [CVE-2021-23450]

Summary Vulnerability found in Dojo used by Enterprise Content Management System Monitor. Enterprise Content Management System Monitor has addressed the applicable CVE CVE-2021-23450. Vulnerability Details CVEID:CVE-2021-23450 DESCRIPTION: Dojo could allow a remote attacker to execute arbitrary...

PT-2022-5183 · Bifrost · Bifrost

Name of the Vulnerable Software and Affected Versions: Bifrost versions prior to 1.8.8-release Description: The issue is related to authentication bypass in the admin and monitor user groups. This can be achieved by deleting the X-Requested-With: XMLHttpRequest field in the request header. There...

多款TRUMPF产品安全漏洞

TRUMPF TruTops and others are TRUMPF products.TRUMPF TruTops is TRUMPF Oseon is an integrated solution for production and material flow control.TRUMPF Job Order Interface is a software job order interface. A security vulnerability exists in several TRUMPF products that stems from the use of defau...

CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

Design/Logic Flaw

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

CVE-2022-40187

CVE-2022-40187 affects Foresight GC3 Launch Monitor 1.3.15.68, where the Target Communication Framework (TCF) service is enabled and listens on a TCP port on all interfaces. The service allows root-level actions including process debugging, file system modification, and terminal access. Combined ...

CVE-2022-40187

Foresight GC3 Launch Monitor 1.3.15.68 ships with a Target Communication Framework TCF service enabled. This service listens on a TCP port on all interfaces and allows for process debugging, file system modification, and terminal access as the root user. In conjunction with a hosted wireless acce...

The vulnerability of the Download Monitor plugin of the WordPress content management system allows a hacker to disclose protected information.

The vulnerability of the Download Monitor plugin in the WordPress content management system is related to insufficient protection of registration data. Exploiting this vulnerability could allow a malicious actor to disclose the protected information...