seksshopistanbul.net Cross Site Scripting vulnerability OBB-2956728

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-25407 · Wazuh · Wazuh

Name of the Vulnerable Software and Affected Versions: Wazuh versions 3.6.1 through 3.13.5 Wazuh versions 4.0.0 through 4.2.7 Wazuh versions 4.3.0 through 4.3.7 Description: The issue is an authenticated remote code execution RCE vulnerability. It can be exploited via the Active Response endpoint...

CVE-2022-3049

Use after free in SplitScreen in Google Chrome on Chrome OS, Lacros prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via a crafted HTML page...

CVE-2022-2859

Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions...

UBUNTU-CVE-2022-2858

Use after free in Sign-In Flow in Google Chrome prior to 104.0.5112.101 allowed a remote attacker to potentially exploit heap corruption via specific UI interaction...

CVE-2022-2859

Use after free in Chrome OS Shell in Google Chrome prior to 104.0.5112.101 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via specific UI interactions...

Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium (CVE-2012-3309)

Abstract Security Bulletin: CSRF vulnerability in IBM Infosphere Guardium CVE-2012-3309 Content SUMMARY: Account creation panel is susceptible to cross site request forgery. VULNERABILITY DETAILS: CVE ID: CVE-2012-3309 DESCRIPTION: Account creation panel is susceptible to cross site request forge...

hartgersradiateuren.nl Cross Site Scripting vulnerability OBB-2941200

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-3080

A flaw was found in the Bind package, where the resolver can crash when stale cache and stale answers are enabled, option stale-answer-client-timeout is set to 0 and there is a stale CNAME in the cache for an incoming query. By sending specific queries to the resolver, an attacker can cause named...

DEBIAN-CVE-2022-3080

By sending specific queries to the resolver, an attacker can cause named to crash...

CVE-2022-3080

By sending specific queries to the resolver, an attacker can cause named to crash...

AZL-11000 CVE-2022-3080 affecting package bind for versions less than 9.16.33-1

By sending specific queries to the resolver, an attacker can cause named to crash...

CVE-2022-3080

By sending specific queries to the resolver, an attacker can cause named to crash...

CVE-2022-3080

By sending specific queries to the resolver, an attacker can cause named to crash...

CVE-2022-3080

By sending specific queries to the resolver, an attacker can cause named to crash...

CVE-2022-32912

An out-of-bounds read was addressed with improved bounds checking. This issue is fixed in Safari 16, iOS 16, iOS 15.7 and iPadOS 15.7. Processing maliciously crafted web content may lead to arbitrary code execution...

USN-5617-1: Xen vulnerabilities

It was discovered that memory contents previously stored in microarchitectural special registers after RDRAND, RDSEED, and SGX EGETKEY read operations on Intel client and Xeon E3 processors may be briefly exposed to processes on the same or different processor cores. A local attacker could use th...

Exploit for Argument Injection in Atlassian Bitbucket

CVE-2022-36804-PoC Multithreaded exploit script for CVE-2022-3...

CVE-2022-35939

TensorFlow is an open source platform for machine learning. The ScatterNd function takes an input argument that determines the indices of of the output tensor. An input index greater than the output tensor or less than zero will either write content at the wrong index or trigger a crash. We have...

PT-2022-33380 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.14 through v5.19.3 Description: A potential memory leak issue exists in the rpc sysfs xprt state change function. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...