PT-2022-34338

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.257 Description The issue is related to a potential security vulnerability in the Linux Kernel. It involves the md stop writes function. The actual impact and attack plausibility have not yet been proven...

PT-2022-34194 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.212 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves the function md stop writes and is associated with commits that introduced and fixed the issue. T...

GSD-2022-1005377 KVM: x86/xen: Stop Xen timer before changing IRQ

KVM: x86/xen: Stop Xen timer before changing IRQ This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

Researchers Find Link b/w PrivateLoader and Ruzki Pay-Per-Install Services

Cybersecurity researchers have exposed new connections between a widely used pay-per-install PPI malware service known as PrivateLoader and another PPI platform offered by a cybercriminal actor dubbed ruzki. "The threat actor ruzki aka les0k, zhigalsz advertises their PPI service on underground...

PT-2022-33688

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.64 Description The issue is related to a potential security vulnerability in the Linux Kernel. It involves the md stop writes function. The actual impact and attack plausibility have not yet been proven...

PT-2022-33277 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.19.6 Description: The issue is related to a potential security vulnerability in the Linux Kernel. It involves the md stop writes function. The actual impact and attack plausibility have not yet been proven...

CVE-2022-38541

Archery v1.8.3 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the starttime and stoptime parameters in the my2sql interface...

CVE-2022-38537

Archery v1.4.5 to v1.8.5 was discovered to contain multiple SQL injection vulnerabilities via the startfile, endfile, starttime, and stoptime parameters in the binlog2sql interface...

Malicious code in internallib_v243 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware f110561be9a972bdf8bbf2868742b8e147ac0e6647cc9ce9f0cee19bcd2506bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Archery SQL注入漏洞

Archery is a set of open source vulnerability assessment and management tools. A security vulnerability exists in Archery versions v1.8.3 through v1.8.5, which stems from the starttime and stoptime parameters in the my2sql interface containing SQL injection vulnerabilities...

PT-2022-24443 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery versions 1.4.5 through 1.8.5 Description: The issue concerns multiple SQL injection vulnerabilities. These vulnerabilities exist via the start file, end file, start time, and stop time parameters in the binlog2sql interface...

PT-2022-24447 · Archery · Archery

Name of the Vulnerable Software and Affected Versions: Archery versions 1.8.3 through 1.8.5 Description: The issue is related to multiple SQL injection vulnerabilities. These vulnerabilities can be exploited via the start time and stop time parameters in the my2sql interface. Recommendations: For...

CVE-2022-1663

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request...

CVE-2022-1663

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request...

CVE-2022-1663

CVE-2022-1663 describes an information-disclosure/credential-bypass issue in the WordPress Stop Spam Comments plugin (versions ≤ 0.2.1.2). The vulnerability stems from improper generation of the Javascript access token (ssc_key) intended to prevent abuse of the comment section, allowing an attack...

WordPress plugin Stop Spam Comments 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An information disclosure...

PT-2022-14032 · WordPress · Stop Comment Spam

Name of the Vulnerable Software and Affected Versions: Stop Spam Comments WordPress plugin versions 0.2.1.2 and earlier Description: The issue arises from the improper generation of the Javascript access token, which is intended to prevent abuse of the comment section. This allows threat authors ...

CVE-2022-1663: Exposure of Sensitive Information to an Unauthorized Actor

The Stop Spam Comments WordPress plugin through 0.2.1.2 does not properly generate the Javascript access token for preventing abuse of comment section, allowing threat authors to easily collect the value and add it to the request...

Malicious code in gulpreplae (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7186692889cc7ad37d17f2278a3973c92dc0d3a45dca16d95bdcdbfbcc995d0 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

WordPress Stop Spam Comments plugin <= 0.2.1.2 - Access Token Bypass vulnerability

Access Token Bypass vulnerability discovered by Daniel Ruf in WordPress Stop Spam Comments plugin versions = 0.2.1.2. Solution Deactivate and delete. This plugin has been closed as of August 3, 2022 and is not available for download. This closure is temporary, pending a full review...