ps-latene.ch Cross Site Scripting vulnerability OBB-3108224

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Behind The Success Of Phenomenon Game Fortnite

By Owais Sultan Did you know Fortnite was the first game to break through on a variety of console platforms, including XBOX/PS/Switch? This is a post from HackRead.com Read the original post: Behind The Success Of Phenomenon Game Fortnite...

Information Disclosure

convert2rhel is vulnerable to information disclosure. When the activation key option is used, the activation key is subsequently passed to the subscription manager via the command line, which allows unauthorized users to view the activation key via the process command line through the htop or ps,...

ps.3lib.net Cross Site Scripting vulnerability OBB-2975707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

The vulnerability of the ps_mix_phase function in the libfaad/ps_dec.c component of the Freeware Advanced Audio Decoder 2 (FAAD2) allows a hacker to gain access to confidential data and also trigger a service failure.

The vulnerability of the psmixphase function in the libfaad/psdec.c component of the Freeware Advanced Audio Decoder 2 FAAD2 decoder is related to the lack of checking for the iidindex. Exploiting this vulnerability allows an attacker to gain access to confidential data and also cause service...

ps.3lib.net Cross Site Scripting vulnerability OBB-2934097

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

RHEL 7 : rh-mysql80-mysql (RHSA-2022:6518)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:6518 advisory. MySQL is a multi-user, multi-threaded SQL database server. It consists of the MySQL server daemon, mysqld, and many client programs. The...

ps.1lib.vip Cross Site Scripting vulnerability OBB-2896282

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0851

There is a flaw in convert2rhel. When the --activationkey option is used with convert2rhel, the activation key is subsequently passed to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the activation key via the process command line v...

Design/Logic Flaw

There is a flaw in convert2rhel. convert2rhel passes the Red Hat account password to subscription-manager via the command line, which could allow unauthorized users locally on the machine to view the password via the process command line via e.g. htop or ps. The specific impact varies upon the...

CVE-2022-29550

An issue was discovered in Qualys Cloud Agent 4.8.0-49. It writes "ps auxwwe" output to the /var/log/qualys/qualys-cloud-agent-scan.log file. This may, for example, unexpectedly write credentials from environment variables to disk in cleartext. NOTE: there are no common circumstances in which...

ps.3lib.net Cross Site Scripting vulnerability OBB-2825190

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

USN-5237-1 libmediainfo vulnerabilities

It was discovered that MediaInfoLib incorrectly handled certain specially crafted files. An attacker could possibly use this issue to cause a denial of service. CVE-2020-26797 It was discovered that MediaInfoLib incorrectly handled certain specially crafted MpegPs files. An attacker could possibl...

psps.uni-bremen.de Cross Site Scripting vulnerability OBB-2818729

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Malicious code in ps-brands-assets (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2157cfaf0f3a46fd498a20e0ed9db4f95c772c753bf21ebd49d591149b7186a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-request-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554463840ce09aa2698a9337ad6057d03c545cf3414cce6cf82c6f703a305975 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-react-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c99c8315c3edd20e2322aa14237ecde5a97bc740f633f94d73bb92bfa87bf39d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-asymmetric-crypts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bf882c658f1baddb43132fc9afceef3308ff5f31f6cbf3acfc4fa245b451a01d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ps-bootstrap (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 29a4dad53fa20e397c9d6fec72443b8465639a83bd580c0228e42a08a849a32e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5503 Malicious code in ps-request-ws (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 554463840ce09aa2698a9337ad6057d03c545cf3414cce6cf82c6f703a305975 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...