Design/Logic Flaw

IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 could allow a remote authenticated attacker to conduct an LDAP injection. By using a specially crafted request, an attacker could exploit this vulnerability and could result in in granting permission to unauthorized resources...

CVE-2022-22358

The CVE-2022-22358 issue affects IBM Sterling Partner Engagement Manager: XXE in XML processing impacts the following products/versions—Essentials Edition 6.1.2, Standard Edition 6.1.2, Essentials Edition 6.2, Standard Edition 6.2, and Cloud/SaaS 22.2. The root cause is an XML External Entity vul...

Pexip Infinity Resource Management Error Vulnerability

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from Pexip, a Norwegian company. Pexip Infinity is vulnerable to a resource management error that could be exploited by attackers to cause the system to consume excessive...

zrok

zrok - Secure internet sharing made simple !zrok logodocs/...

Directory traversal

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences...

Zenbuster - Multi-threaded URL Enumeration/Brute-Forcing Tool

ZenBuster is a multi-threaded, multi-platform URL enumeration tool written in Python by Zach Griffin @0xTas. I wrote this tool as a way to deepen my familiarity with Python, and to help increase my understanding of Cybersecurity tooling in general. ZenBuster may not be the fastest or most...

[SECURITY] Fedora 35 Update: golang-k8s-sample-controller-1.22.0-4.fc35

This package implements a simple controller for watching Foo resources as defined with a CustomResourceDefinition CRD...

[SECURITY] Fedora 35 Update: golang-github-tdewolff-minify-2.11.10-3.fc35

Minify is a minifier package written in Go. It provides HTML5, CSS3, JS, JSON, SVG and XML minifiers and an interface to implement any other minifier. Minification is the process of removing bytes from a file such as whitespace without changing its output and therefore shrinking its size and...

[SECURITY] Fedora 35 Update: golang-github-akavel-rsrc-0.10.2-4.fc35

Tool for embedding binary resources in Go programs...

Siemens RUGGEDCOM ROS Code Injection Vulnerability

RUGGEDCOM ROS-based devices, typically switches and serial-to-Ethernet devices, are used to connect devices operating in harsh environments, such as power substations and traffic control cabinets.A code injection vulnerability exists in Siemens RUGGEDCOM ROS, which could be exploited by an attack...

Microsoft Details App Sandbox Escape Bug Impacting Apple iOS, iPadOS, macOS Devices

Microsoft on Wednesday shed light on a now patched security vulnerability affecting Apple's operating systems that, if successfully exploited, could allow attackers to escalate device privileges and deploy malware. "An attacker could take advantage of this sandbox escape vulnerability to gain...

Uncovering a macOS App Sandbox escape vulnerability: A deep dive into CVE-2022-26706

Microsoft uncovered a vulnerability in macOS that could allow specially crafted codes to escape the App Sandbox and run unrestricted on the system. We shared these findings with Apple through Coordinated Vulnerability Disclosure CVD via Microsoft Security Vulnerability Research MSVR in October...

CVE-2022-30625

Directory listing is a web server function that displays the directory contents when there is no index file in a specific website directory. A directory listing provides an attacker with the complete index of all the resources located inside of the directory. The specific risks and consequences...

Today’s SOC Strategies Will Soon Be Inadequate

New research sponsored by Rapid7 explores the momentum behind security operations center SOC modernization and the role extended detection and response XDR plays. ESG surveyed over 370 IT and cybersecurity professionals in the US and Canada – responsible for evaluating, purchasing, and utilizing...

PT-2022-22406 · Centreon · Centreon

Name of the Vulnerable Software and Affected Versions: Centreon affected versions not specified Description: This issue allows remote attackers to escalate privileges on affected installations. Authentication is required to exploit this issue. The specific flaw exists within the configuration of...

Fedora: Security Advisory for golang-github-geertjohan-rice (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of Xen hypervisors arises from synchronization errors when using shared resources, allowing a perpetrator to execute arbitrary code.

The vulnerability of Xen hypervisors is related to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Google Android 竞争条件问题漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android, which arises from the concurrent execution of competing conditions in the GPU using incorrectly synchronized shared resources, and can be exploited by an attacker to remote...

Fedora: Security Advisory for golang-k8s-sample-controller (FEDORA-2022-fae3ecee19)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

The vulnerability of the mod_sed content filter in the Apache HTTP Server allows a hacker to induce a service failure.

The vulnerability of the modsed content filter in the Apache HTTP Server is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...