CVE-2022-24932: Improper Protection of Alternate Path

Improper Protection of Alternate Path vulnerability in Setup wizard process prior to SMR Mar-2022 Release 1 allows physical attacker package installation before finishing Setup wizard...

CVE-2022-25214

Improper access control on the LocalClientList.asp interface allows an unauthenticated remote attacker to obtain sensitive information concerning devices on the local area network, including IP and MAC addresses. Improper access control on the wirelesssetup.asp interface allows an unauthenticated...

What steps are needed to configure new StoreFront servers with an existing Gateway and Store URL

The objective of this article is to provide the recommended steps at a high level in order to configure two new StoreFront servers to work with an existing Gateway virtual server that utilizes an URL created with an old set of StoreFront servers...

InsightAppSec GitHub Integration Keeps Risky Code From Reaching Production

We've all been there. The software development life cycle SDLC is moving at a mile a minute. Developers are writing code, updating features, and all the while attempting to keep everything introduced into production as safe and secure as possible. GitHub Actions are essential to automation and...

PT-2025-8045

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A refcount leak issue has been identified in the Linux kernel, specifically in the ill acc of setup function related to the MIPS architecture and Ralink setup. The issue arises when pdev...

CVE-2021-24803

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account a...

CVE-2021-24803

The CVE-2021-24803 entry concerns the WordPress plugin Core Tweaks WP Setup (versions

CVE-2021-24803 Core Tweaks WP Setup <= 4.1 - Arbitrary Admin Account Creation / Admin Email Update via CSRF

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account a...

PT-2022-9467

Name of the Vulnerable Software and Affected Versions Core Tweaks WP Setup WordPress plugin versions through 4.1 Description The issue allows an attacker to arbitrarily change the admin email or create another admin account due to the lack of CSRF protection, potentially leading to website takeov...

CVE-2021-24803: Cross-Site Request Forgery (CSRF)

The Core Tweaks WP Setup WordPress plugin through 4.1 allows to bulk-set many settings in WordPress, including the admin email, as well as creating a new admin account. There is no CSRF protection in place, allowing an attacker to arbitrary change the admin email or create another admin account a...

PT-2022-28943

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.8 through v5.16.7 Description A potential memory leak issue exists in the intel setup irq remapping function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel version...

PT-2022-28858

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.22 Description A potential memory leak issue exists in the intel setup irq remapping function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions...

PT-2022-28906

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.5 Description The issue is related to an invalid parameter check in the dpu setup dspp pcc function. It was introduced in version v5.8 and fixed in Linux Kernel version v5.16.5. The actual impact and attack...

Let’s Get Under the Hood of Imperva Snapshot

A stress-free guide for the prudent cloud operator With minimal setup, Imperva Snapshot enables you to immediately start your in-depth Amazon Web Services AWS RDS database assessment. With no prior training required, cloud operators can use this useful tool to pinpoint deficiencies in their...

Zabbix setup.php Configuration Modification

The vulnerability of the setup.php configuration file of the Zabbix monitoring system is related to authentication errors. Exploiting this vulnerability allows a malicious actor to modify the configuration parameters remotely...

Advanced Contact form 7 DB < 1.8.7 - Subscriber+ Arbitrary File Deletion

The plugin does not have authorisation nor CSRF checks in the acf7dbeditscrfiledelete AJAX action, and does not validate the file to be deleted, allowing any authenticated user to delete arbitrary files on the web server. For example, removing the wp-config.php allows attackers to trigger WordPre...

SSRFire - An Automated SSRF Finder. Just Give The Domain Name And Your Server And Chill! Also Has Options To Find XSS And Open Redirects

An automated SSRF finder. Just give the domain name and your server and chill! ; It also has options to find XSS and open redirects. Syntax ./ssrfire.sh -d domain.com -s yourserver.com -f customfile.txt -c cookies domain.com --- The domain for which you want to test yourserver.com --- Your server...

PT-2022-28451

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.4.54 through 5.4.177 Description A potential memory leak issue exists in the intel setup irq remapping function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28391

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.14.190 through 4.14.264 Description A potential memory leak issue exists in the intel setup irq remapping function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-28479

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.96 Description The issue is related to an invalid parameter check in the dpu setup dspp pcc function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...