MAL-2022-174 Malicious code in @cobalt-team/multi-invite (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e37ea81ad98e89c5f266cfa910ba2604c209fb890e8da13de13eb33951c1948e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58180）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58178）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. sourceCodester Multi Restaurant Table Reservation System version 1.0 is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to execute arbitrary...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58181）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can exploit this vulnerability to conduct cross-site...

SourceCodester Multi Restaurant Table Reservation System跨站脚本漏洞（CNVD-2022-58179）

SourceCodester Multi Restaurant Table Reservation System is a multi-restaurant table reservation system. version 1.0 of SourceCodester Multi Restaurant Table Reservation System is vulnerable to a cross-site scripting vulnerability. An attacker can use this vulnerability to conduct cross-site...

Fedora: Security Advisory for suricata (FEDORA-2022-0513984304)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Green Alliance NF firewall has information leakage vulnerability

Green Alliance NF Firewall is an enterprise-class next-generation border security product constructed by Green Alliance Technology on the basis of the latest generation 64-bit multi-core hardware platform, combined with the application layer security protection concept and high-speed packet...

[SECURITY] Fedora 35 Update: suricata-6.0.6-1.fc35

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

[SECURITY] Fedora 36 Update: suricata-6.0.6-1.fc36

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

CVE-2022-22217

An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent unauthenticated attacker to cause a Denial of Service DoS. The issue is caused by malformed MLD packets looping on a multi-homed Ethernet Segme...

4 Strategies for Achieving Greater Visibility in the Cloud

The cloud giveth, and the cloud taketh away. It giveth development teams the speed and scale to get applications into production and deployment faster than ever; it taketh away security teams' comfort that they know exactly what's going on in their environment. Much has been said about the...

[SECURITY] Fedora 35 Update: origin-3.11.2-6.fc35

OpenShift Origin is a distribution of Kubernetes optimized for enterprise app lication development and deployment. OpenShift Origin adds developer and operational c entric tools on top of Kubernetes to enable rapid application development, easy deployment and scaling, and long-term lifecycle...

Medium: git

Issue Overview: A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system when running commands specified in the local repository configuration. This issue allows the owner of the repository to cause arbitrary commands to ...

nodejs: Incorrect handling of certificate subject and issuer fields

A flaw was found in node.js, where it did not properly handle multi-value Relative Distinguished Names. This flaw allows a specially crafted x509 certificate to produce a false multi-value Relative Distinguished Name and to inject arbitrary data in node.js libraries...

Fedora: Security Advisory for manifest-tool (FEDORA-2022-3969b64d4b)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 35 Update: mass3-0-0.6.20200627gite1d5f1a.fc35

Quickly enumerate through a pre-compiled list of AWS S3 buckets using DNS instead of HTTP with a list of DNS resolvers and multi-threading...

[SECURITY] Fedora 35 Update: manifest-tool-1.0.3-5.fc35

This tool was mainly created for the purpose of viewing, creating, and pushing the new manifests list object type in the Docker registry. Manifest lists are defined in the v2.2 image specification and exist mainly for the purpose of supporting multi-architecture and/or multi-platform images withi...

CVE-2017-20132

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The...

CVE-2017-20132

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The...

Sql injection

A vulnerability was found in Itech Multi Vendor Script 6.49 and classified as critical. This issue affects some unknown processing of the file /multi-vendor-shopping-script/product-list.php. The manipulation of the argument pl leads to sql injection. The attack may be initiated remotely. The...