CVE-2022-25800: Server-Side Request Forgery (SSRF)

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool...

PT-2022-17528

Name of the Vulnerable Software and Affected Versions Best Practical RT for Incident Response RTIR versions 4.0.3 and earlier, 5.x versions prior to 5.0.3 Description The issue allows for Server-Side Request Forgery SSRF via Scripted Action tools. Recommendations For versions prior to 4.0.3, upda...

PT-2022-17527

Name of the Vulnerable Software and Affected Versions Best Practical RT for Incident Response RTIR versions 4.0.3 and earlier, 5.x versions prior to 5.0.3 Description The issue allows for Server-Side Request Forgery SSRF via the whois lookup tool. Recommendations For versions prior to 4.0.3, upda...

Rocky Linux 8 : kernel-rt (RLSA-2022:5565)

The remote Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2022:5565 advisory. - kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 Note that Nessus has not tested for this issue but has instead relied only ...

CVE-2022-25801: Server-Side Request Forgery (SSRF)

Best Practical RT for Incident Response RTIR before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools...

RHEL 8 : kernel-rt (RHSA-2022:5565)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:5565 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 For more details about the security issues, including...

ALSA-2022:5565 Important: kernel-rt security and bug fix update

The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Security Fixes: kernel: race condition in perfeventopen leads to privilege escalation CVE-2022-1729 For more details about the security issues, including...

KB5016264: Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 12, 2022

KB5016264: Servicing stack update for Windows 8.1, RT 8.1, and Server 2012 R2: July 12, 2022 Summary This update makes quality improvements to the servicing stack, which is the component that installs Windows updates. Servicing stack updates SSU makes sure that you have a robust and reliable...

ASUS RT-A88U Cross-Site Scripting Vulnerability

The ASUS RT-A88U is a wireless router from ASUS of Taiwan, China. A cross-site scripting vulnerability exists in ASUS RT-A88U version 3.0.0.4.38645898, which stems from the router's administration panel failing to properly clean WiFi logs. An attacker can exploit the vulnerability to be able to...

Cross site scripting

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

CVE-2021-43702

Affected product: ASUS RT-A88U (firmware 3.0.0.4.386_45898). Vulnerability: Cross-Site Scripting (XSS) in the router admin panel due to improper sanitization of WiFi logs, enabling a stored XSS when an attacker changes the SSID with a crafted payload. Root cause: inadequate input/output sanitizat...

CVE-2021-43702

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

CVE-2021-43702: Improper Neutralization of Input During Web Page Generation

ASUS RT-A88U 3.0.0.4.38645898 is vulnerable to Cross Site Scripting XSS. The ASUS router admin panel does not sanitize the WiFI logs correctly, if an attacker was able to change the SSID of the router with a custom payload, they could achieve stored XSS on the device...

PT-2022-11888

Name of the Vulnerable Software and Affected Versions ASUS RT-A88U version 3.0.0.4.386 45898 Description The ASUS router admin panel does not sanitize the WiFi logs correctly. If an attacker is able to change the SSID of the router with a custom payload, they could achieve stored Cross Site...

GSD-2022-1003950 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.14.283 by commit...

GSD-2022-1003835 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.247 by commit...

GSD-2022-1003687 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.198 by commit...

GSD-2022-1003488 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.10.122 by commit...

GSD-2022-1003230 tracing: Fix sleeping function called from invalid context on RT kernel

tracing: Fix sleeping function called from invalid context on RT kernel This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.47 by commit...