7633 matches found
Rapid7 Named a Visionary in 2022 Magic Quadrantâĸ for Application Security Testing Second Year in a Row
For the second year in a row, Rapid7 has been named a Visionary in the GartnerÂŽ 2022 Magic Quadrant for Application Security Testing. We believe we accomplished this by combining an industry-leading dynamic application security testing DAST solution with container and cloud security, security...
GHSA-48WW-8H7G-4HWQ TYPO3 is vulnerable to Spam Abuse in the native form content element
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. An attacker could abuse the form to send mails to arbitrary email addresses...
TYPO3 is vulnerable to Spam Abuse in the native form content element
TYPO3 before 4.1.14, 4.2.x before 4.2.13, 4.3.x before 4.3.4 and 4.4.x before 4.4.1 allows Spam Abuse in the native form content element. An attacker could abuse the form to send mails to arbitrary email addresses...
Dell OpenManage Enterprise elevation of privilege vulnerability (CNVD-2022-42737)
Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. The software enables cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. An elevation of privilege vulnerability...
testing-native-go-fuzzing:parser_fuzzer: Null-dereference READ with empty stacktrace
Detailed Report: https://oss-fuzz.com/testcase?key=5693012748926976 Project: testing-native-go-fuzzing Fuzzing Engine: libFuzzer Fuzz Target: parserfuzzer Job Type: libfuzzerasantesting-native-go-fuzzing Platform Id: linux Crash Type: Null-dereference READ Crash Address: 0x000000000000 Crash Stat...
Reading the API Security Tea Leaves for 2022
Just as the global pandemic persists in redefining the new norm, so has enterprisesâ growing investments in digital transformation initiatives to keep one step ahead of their competitors. APIs are the engine that are helping drive these digital transformations from the innovation of new services...
Microsoft Windows Digital Media Receiver Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Digital Media Receiver. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. ...
Microsoft Windows Telephony Serve Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Telephony Server. The vulnerability stems from an incorrect programmatic call to an advanced local procedure. An...
Microsoft Windows Endpoint Configuration Manager Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Endpoint Configuration Manager. The vulnerability stems from an incorrect programmatic call to an advanced local...
Microsoft Windows Cluster Client Failover Elevation of Privilege Vulnerability
Microsoft Windows is a set of operating systems for use on personal devices from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Cluster Client Failover. The vulnerability stems from an incorrect programmatic call to an advanced local procedure...
Microsoft Windows Installer Elevation of Privilege Vulnerability
Microsoft Windows Installer is a component of the Windows operating system from Microsoft. It provides a standard basis for installing and uninstalling software. An elevation of privilege vulnerability exists in Microsoft Windows Installer. The vulnerability stems from an incorrect programmatic...
Cisco SD-WAN security vulnerabilities
Cisco SD-WAN is a highly secure cloud-scale architecture from Cisco USA that is open, programmable, and scalable. an elevation of privilege vulnerability exists in Cisco SD-WAN, which stems from an incorrect programmatic call to a high-level native procedure. An attacker could exploit the...
NimPackt-v1 - Nim-based Assembly Packer And Shellcode Loader For Opsec And Profit
ByCas van Cooten @chvancooten With special thanks to Marcello Salvati @byt3bl33der and Fabian Mosch @S3cur3Th1sSh1t Description Update: NimPackt-v1 is among the worst code I have ever written I was just starting out learning Nim. Because of this, I started on a full rewrite of NimPackt, dubbed...
Dell Technologies Dell PowerScale OneFS security vulnerabilities
Dell PowerScale OneFS is a PowerScale OneFS operating system that provides a horizontally scalable NAS. An elevation of privilege vulnerability exists in Dell PowerScale OneFS, which stems from an incorrect programmatic call to a high-level native procedure. A local attacker could exploit this...
Microsoft DWM Core Library: Permissions and access control issues
Microsoft DWM Core Library is the United States Microsoft Microsoft company's Microsoft windows get a core library. An elevation of privilege vulnerability exists in the Microsoft DWM Core Library. The vulnerability arises from an incorrect programmatic call to a high-level native procedure. An...
Microsoft Visual Studio security vulnerabilities
Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio Code, which stems from...
CVE-2022-29035
In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...
CVE-2022-29035
In JetBrains Ktor Native before version 2.0.0 random values used for nonce generation weren't using SecureRandom implementations...
