10480 matches found
IIS modules: The evolution of web shells and how to detect them
Web exploitation and web shells are some of the most common entry points in the current threat landscape. Web servers provide an external avenue directly into your corporate network, which often results in web servers being an initial intrusion vector or mechanism of persistence. Monitoring for...
MAL-2022-6038 Malicious code in setup-gamma (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deba7e063fe3b4609326e55cea28db816c7049297f8cef8b23d8c2d7589f69f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malware in setup-gamma
Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...
Malicious code in setup-gamma (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware deba7e063fe3b4609326e55cea28db816c7049297f8cef8b23d8c2d7589f69f8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
PT-2025-40132
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.0.0-rc7-02243-gb84a13ff4eda Description A crash can occur in the Bluetooth stack when attempting to connect multiple ISO sockets without using DEFER SETUP. This issue is related to a null-ptr-deref in the hci...
WP-Lister Lite for Amazon < 2.4.4 - Reflected XSS
The plugin does not sanitize and escapes a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which can be used against high-privilege users such as admin. PoC 1. Install and activate WooCommerce dependency, no setup required 2. Install and activate the...
Image Optimizer, Resizer and CDN < 6.8.1 - Admin+ Stored XSS
The plugin does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup. PoC Step 1: Install the plugin and register for a...
GSD-2022-1007937 riscv: fix reserved memory setup
riscv: fix reserved memory setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.79 by commit 518e49f0590de66555503aabe199ba8d3f2e24ac, it...
GSD-2022-1007911 cifs: Fix connections leak when tlink setup failed
cifs: Fix connections leak when tlink setup failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.81 by commit...
GSD-2022-1007777 riscv: fix reserved memory setup
riscv: fix reserved memory setup This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.9 by commit 93598deb101540c4f9e7de15099ea8255b965fc2, it w...
GSD-2022-1007744 cifs: Fix connections leak when tlink setup failed
cifs: Fix connections leak when tlink setup failed This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v6.0.10 by commit...
PT-2022-35996
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description A potential memory leak was identified in the octep device setup function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior t...
PT-2022-36391
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.225 Description The issue is related to a possible name leak in the tcm loop setup hba bus function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2022-35955
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description The issue is related to a possible name leak in the tcm loop setup hba bus function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versio...
PT-2022-36471
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.267 Description A potential issue exists in the tcm loop setup hba bus function, which may lead to a name leak. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux...
PT-2022-35999
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v6.0.10 Description A connections leak issue occurs when tlink setup fails. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v6.0.10, update t...
PT-2024-11819
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A buffer overflow issue has been identified in the Linux kernel's USB gadget UVC setup handler. The setup function uvc function setup allows control transfer requests with up to 64 bytes...
py7zr 0.20.0 Directory Traversal Vulnerability
CVE-2022-44900: path traversal vulnerability in py7zr Directory traversal vulnerability in SevenZipFile.extractall function of the python library py7zr version 0.20.0 and earlier allow attackers to read arbitrary files on the local machine via malicious 7z file extraction. CVE-2022-44900...
PT-2025-53142
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue was resolved in the Linux kernel related to the st of quadfs setup function. Specifically, if the st clk register quadfs pll function fails, the @lock resource was no...
