Medium: tomcat

Issue Overview: A flaw was found in the Apache Tomcat package. An example web application did not filter the form authentication example, exposing a Cross-site scripting XSS vulnerability. CVE-2022-34305 Affected Packages: tomcat Note: This advisory is applicable to Amazon Linux 2 - Tomcat8.5...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

CVE-2023-42336

An issue in NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 allows a remote attacker to execute arbitrary code and obtain sensitive information via the password parameter in the /etc/shadow.sample component...

NETIS SYSTEMS WF2409E Trust Management Issues Vulnerability

NETIS SYSTEMS WF2409E is a wireless router from NETIS SYSTEMS. A security vulnerability exists in the NETIS SYSTEMS WF2409Ev4 v.1.0.1.705 version that originates from obtaining sensitive information via the password parameter in the /etc/shadow.sample component...

An issue was discovered in json-c from 20200420 (post 0.14 unreleased code) through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program json_parse which is located in the function parseit.

...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

DEBIAN-CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

Stack overflow

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

UBUNTU-CVE-2021-32292

An issue was discovered in json-c from 20200420 post 0.14 unreleased code through 0.15-20200726. A stack-buffer-overflow exists in the auxiliary sample program jsonparse which is located in the function parseit...

Malicious code in braze-webpack-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc71db731ac5e637112dcd53e9aef14f68b79db997c03e693ec04014b9178c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-141 Malicious code in braze-webpack-sample (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc71db731ac5e637112dcd53e9aef14f68b79db997c03e693ec04014b9178c76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

The vulnerability of the gf_isom_fragment_add_sample_ex() function (isomedia/movie_fragments.c) in the multimedia platform GPAC allows a hacker to execute arbitrary code.

The vulnerability of the gfisomfragmentaddsampleex function isomedia/moviefragments.c in the multimedia platform GPAC involves the use of a zero pointer. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Malicious code in meetingsdk-sample-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb53d02e988a276631d13cbb6486793e2858c3a6f266fb6601d395b5d6fd97d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-588 Malicious code in meetingsdk-sample-vuejs (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cb53d02e988a276631d13cbb6486793e2858c3a6f266fb6601d395b5d6fd97d7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-587 Malicious code in meetingsdk-sample-react (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b35b4caef11623ed6a19de27a6ca20f776482dc18bfe6fb11b3d852adb69eed Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-755 Malicious code in sample-app-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a7432b767dd8bf532a686b3a40add828170682af3dcfdcab09c7d7a012a83e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sample-app-typescript (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a7432b767dd8bf532a686b3a40add828170682af3dcfdcab09c7d7a012a83e1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Skuld: The Infostealer that Speaks Golang

Skuld: The Infostealer that Speaks Golang By Ernesto Fernández Provecho · June 13, 2023 In May 2023, the Trellix Advanced Research Center discovered a new Golang stealer, known as Skuld, that compromised systems worldwide, something that security researchers had also noticed. The usage of Golang,...