Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affects Rational Performance Tester (CVE-2021-35550)

Summary A vulnerability in IBM SDK Java Version 1.8 and IBM Runtime Environment Java Version 1.8 used by Rational Performance Tester. Rational Performance Tester has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-35550 DESCRIPTION: An unspecified vulnerability in Java SE relat...

Fedora: Security Advisory for golang-github-heistp-irtt (FEDORA-2022-ba365d3703)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

[SECURITY] Fedora 36 Update: golang-github-heistp-irtt-0.9.1-2.fc36

Isochronous Round-Trip Tester...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Functional Tester

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Functional Tester. Rational Functional Tester has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2022-21496 DESCRIPTION: An...

Malicious code in idx-auto-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 316816f786f1ccb11686d45bb8934f4aa4b2ae407d7bb5320a5557b369522091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-3781 Malicious code in idx-auto-tester (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 316816f786f1ccb11686d45bb8934f4aa4b2ae407d7bb5320a5557b369522091 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

OS Command Injection

docker-tester is vulnerable to OS command injection. The vulnerability exists in the port attribute in the getExternalPort function of docker-compose.js, allowing an attacker to inject and execute malicious commands through the docker-compose.yml by providing shell meta characters...

GHSA-RJ88-4777-828H Command injection in docker-tester

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

Command injection in docker-tester

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

Command injection

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

Docker-Tester 操作系统命令注入漏洞

Docker-Tester uses docker-compose files to set up test environments and verify them before running tests. A security vulnerability exists in version 1.2.1 of Docker-Tester, which can be exploited by an attacker to maliciously execute operating system commands...

CVE-2021-34079

OS Command injection vulnerability in Mintzo Docker-Tester through 1.2.1 allows attackers to execute arbitrary commands via shell metacharacters in the 'ports' entry of a crafted docker-compose.yml file...

CVE-2021-34079

CVE-2021-34079 affects Mintzo Docker-Tester up to version 1.2.1. The Red Hat, Veracode, GitHub advisories and CVE records describe an OS command injection vulnerability in the docker-tester tooling, exploitable via shell metacharacters in the ports entry of a crafted docker-compose.yml file. The ...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Service Tester

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Service Tester. Rational Service Tester has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2021-35578 DESCRIPTION: An...

Plaintext Storage of a Password in Jenkins Eagle Tester Plugin

Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...

GHSA-VJ6F-Q4W6-QX9P Plaintext Storage of a Password in Jenkins Eagle Tester Plugin

Jenkins Eagle Tester Plugin 1.0.9 and earlier stores a password unencrypted in its global configuration file on the Jenkins master where it can be viewed by users with access to the master file system...

GHSA-VQ59-X6MQ-4WGW Contao SQL injection in the file manager

David Wind, penetration tester with A1 Digital, has discovered that the SQL injection vulnerability originally published under CVE-2017-16558 can still be exploited in the file manager in Contao 4...

Security Bulletin: Multiple vulnerabilities in IBM Java SDK and IBM Java Runtime affect Rational Performance Tester

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, Version 1.8 and IBM® Runtime Environment Java™ Version 1.8 used by Rational Performance Tester. Rational Performance Tester has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2021-35578 DESCRIPTION: ...