Rawchen blog-ssm 跨站脚本漏洞

blog-ssm is a JavaWeb-based blog project by the individual developer Rawchen in China. A security vulnerability exists in Rawchen blog-ssm v1.0, which stems from a cross-site scripting XSS vulnerability that can be exploited by an attacker to execute arbitrary code via the notifyInfo parameter...

PT-2023-13742 · Rawchen · Rawchen Blog-Ssm

Name of the Vulnerable Software and Affected Versions: Rawchen blog-ssm version 1.0 Description: A Cross-Site Scripting XSS issue allows attackers to execute arbitrary code via the notifyInfo parameter. This enables attackers to inject malicious scripts into websites, potentially leading to...

CVE-2022-40034

Cross-Site Scripting XSS vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter...

CVE-2022-40034

Cross-Site Scripting XSS vulnerability found in Rawchen blog-ssm v1.0 allows attackers to execute arbitrary code via the 'notifyInfo' parameter...

SUSE SLES12 Security Update : amazon-ssm-agent (SUSE-SU-2022:3654-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2022:3654-1 advisory. - Update to version 3.1.1260.0 - CVE-2022-29527: Fixed a bug which creates world-writable sudoers file during runtime. bsc1196556 Tenable ha...

SUSE: Security Advisory (SUSE-SU-2022:3654-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:3654-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - Update to version 3.1.1260.0 - CVE-2022-29527: Fixed a bug which creates world-writable sudoers file during runtime. bsc1196556...

ssm-sprachen.de Cross Site Scripting vulnerability OBB-2806934

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Amazon Linux 2 : amazon-ssm-agent (ALAS-2022-1807)

The version of amazon-ssm-agent installed on the remote host is prior to 3.1.1575.0-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1807 advisory. A buffer overflow flaw was found in Golang's library encoding/pem. This flaw allows an attacker to use a large PEM...

The vulnerability of the amazon-ssm-agent software, related to incorrect default permissions, allows attackers to create files with arbitrary extensions and elevate their privileges to root.

The vulnerability of the amazon-ssm-agent software is related to incorrect default permissions. Exploiting this vulnerability allows an attacker to create a file with any desired extension and increase their privileges to root...

CVE-2022-20808

CVE-2022-20808 affects Cisco Smart Software Manager On-Prem (SSM On-Prem). The issue is a DoS caused by incorrect handling of multiple simultaneous device registrations, exploitable by an authenticated remote attacker sending multiple registration requests. The impact is an affected device experi...

airtestproject (>=0.1.0 <=0.1.2), centercitypcs-utils (>=0.2.0 <=0.2.6) +22 more potentially affected by CVE-2017-5992 via openpyxl (>=1.1.0 <=2.4.11)

openpyxl PYPI version =1.1.0, =0.1.0, =0.2.0, =0.9.2, =3.1.10, =0.8.2, =0.2.0, =2.0.2, =0.260128.9, =1.3.0, =4.2.1, =0.1.0, =0.9.0, =0.10.1 and more Source cves: CVE-2017-5992 Source advisory: OSV:GHSA-CHQF-HX79-GXC6...

openSUSE: Security Advisory for amazon-ssm-agent (SUSE-SU-2022:1510-1)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SUSE-SU-2022:1510-1 Security update for amazon-ssm-agent

This update for amazon-ssm-agent fixes the following issues: - CVE-2022-29527: Fixed unsafe file creation mode of ssm-agent-users sudoer file bsc1196556. Update to version 3.1.1260.0...

SUSE: Security Advisory (SUSE-SU-2022:1510-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-29527

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition...

CVE-2022-29527

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition...

CVE-2022-29527

The CVE-2022-29527 issue affects Amazon AWS amazon-ssm-agent up to version 3.1.1207.x (i.e., before 3.1.1208.0). The vulnerability arises when the agent creates a world-writable sudoers file, enabling local attackers to inject sudo rules and escalate to root. The root cause is tied to a race cond...

CVE-2022-29527

Amazon AWS amazon-ssm-agent before 3.1.1208.0 creates a world-writable sudoers file, which allows local attackers to inject Sudo rules and escalate privileges to root. This occurs in certain situations involving a race condition...

Amazon AWS 安全漏洞

Amazon AWS is a cloud computing platform from the U.S.-based Amazon.com that provides a range of services including information technology infrastructure and applications, such as storage, databases, computing, machine learning, and more, to individuals, businesses, and governments. A security...