15693 matches found
xrdp -- multiple vulnerabilities
xrdp project reports: This update is recommended for all xrdp users and provides following important security fixes: CVE-2022-23468 CVE-2022-23477 CVE-2022-23478 CVE-2022-23479 CVE-2022-23480 CVE-2022-23481 CVE-2022-23483 CVE-2022-23482 CVE-2022-23484 CVE-2022-23493 These security issues are...
CVE-2022-44295
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assignteam.php?id=...
Sanitization Management System SQL注入漏洞
Sanitization Management System is a sanitization management system by Carlo Montero Personal Developer. A security vulnerability exists in Sanitization Management System v1.0, which can be exploited by an attacker to perform SQL injection via /php-sms/admin/orders/assignteam.php?id=...
CVE-2022-41676 TEAM JOHNLONG SOFTWARE CO., LTD. MAILD Mail Server - Cross-Site Scripting
Raiden MAILD Mail Server website mail field has insufficient filtering for user input. A remote attacker with general user privilege can send email using the website with malicious JavaScript in the input field, which triggers XSS Reflected Cross-Site Scripting attack to the mail recipient...
Iran’s Fars News Agency website hacked as part of anti-govt protests
By Habiba Rashid The hackers from Black Reward Team are also claiming to have deleted nearly 250 terabytes of data from the website from its servers and computers. This is a post from HackRead.com Read the original post: Irans Fars News Agency website hacked as part of anti-govt protests...
Nighthawk Likely to Become Hackers' New Post-Exploitation Tool After Cobalt Strike
A nascent and legitimate penetration testing framework known as Nighthawk is likely to gain threat actors' attention for its Cobalt Strike-like capabilities. Enterprise security firm Proofpoint said it detected the use of the software in mid-September 2022 by a red team with a number of test emai...
Tensorflow vulnerable to Out-of-Bounds Read
Impact When the BaseCandidateSamplerOp function receives a value in trueclasses larger than rangemax, a heap oob vuln occurs. python tf.rawops.ThreadUnsafeUnigramCandidateSampler trueclasses=0x100000,1, numtrue = 2, numsampled = 2, unique = False, rangemax = 2, seed = 2, seed2 = 2 Patches We have...
Google Identifies 34 Cracked Versions of Popular Cobalt Strike Hacking Toolkit in the Wild
Google Cloud last week disclosed that it identified 34 different hacked release versions of the Cobalt Strike tool in the wild, the earliest of which shipped in November 2012. The versions, spanning 1.44 to 4.7, add up to a total of 275 unique JAR files, according to findings from the Google Clou...
Disneyland Malware Team: It’s a Puny World After All
A financial cybercrime group calling itself the Disneyland Team has been making liberal use of visually confusing phishing domains that spoof popular bank brands using Punycode, an Internet standard that allows web browsers to render domain names with non-Latin alphabets like Cyrillic. The...
Samba Releases Security Updates
The Samba Team has released security updates to address vulnerabilities in multiple versions of Samba. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Samba security announcement CVE-2022-42898 and...
Unbreakable Enterprise kernel-container security update
4.14.35-2047.519.2.1.el7 - xfs: trim IO to found COW extent limit Eric Sandeen Orabug: 34765284 - xfs: don't use delalloc extents for COW on files with extsize hints Christoph Hellwig Orabug: 34765284 4.14.35-2047.519.2 - Revert 'xfs: don't use delalloc extents for COW on files with extsize hints...
Fixed in Apache Tomcat 9.0.69
Low: Apache Tomcat JsonErrorReportValve injection CVE-2022-45143 The JsonErrorReportValve did not escape the type, message or description values. In some circumstances these are constructed from user provided data and it was therefore possible for users to supply values that invalidated or...
Culture Fitness
Have you checked in on the overall health of your team lately? What would a new hire think of your current team? Companies all over the world – particularly those of the higher-profile variety – tout their positive cultures and how great it is to be part of the team. This is especially true in th...
Lin CMS 授权问题漏洞
Lin CMS is a front-end and back-end separated CMS solution by TaleLin team. A security vulnerability exists in Lin CMS v0.2.1. An attacker exploited the vulnerability to escalate privileges to super administrator privileges...
CVE-2022-40632
Cross-Site Request Forgery CSRF vulnerability in gVectors Team wpForo Forum plugin = 2.0.5 on WordPress leading to topic deletion...
CVE-2022-27858
CSV Injection vulnerability in Activity Log Team Activity Log = 2.8.3 on WordPress...
CVE-2022-27858
CSV Injection vulnerability in Activity Log Team Activity Log = 2.8.3 on WordPress...
Design/Logic Flaw
CSV Injection vulnerability in Activity Log Team Activity Log = 2.8.3 on WordPress...