CVE-2022-41839

CVE-2022-41839 affects the WordPress LoginPress plugin (versions ≤ 1.6.2). The issue is a Broken Access Control that allows unauthorized changes to Opt-In/Opt-Out tracking settings. The published sources consistently describe unauthenticated modification of tracking preferences as the impact. Rem...

Sourcecodester Hotel and Lodge Management System 2.0 - SQL Injection

Sourcecodester Hotel and Lodge Management System 2.0 contains a SQL injection vulnerability via the email parameter to the edit page for Customer, Room, Currency, Room Booking Details, or Tax Details. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized...

CVE-2022-25371 Unauth Path Traversal with file corruption affecting the Birt plugin of Apache OFBiz

Apache OFBiz uses the Birt project plugin https://eclipse.github.io/birt-website/ to create data visualizations and reports. By leveraging a bug in Birt https://bugs.eclipse.org/bugs/showbug.cgi?id=538142 it is possible to perform a remote code execution RCE attack in Apache OFBiz, release 18.12....

[SECURITY] [DSA 5177-1] ldap-account-manager security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5177-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff July 05, 2022 https://www.debian.org/security/faq -...

Malicious code in base-app-unauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c282e858f02d0a1d6e81763b2171173fe453c784ee5584e7dbb4d2ba0ec8cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-1464 Malicious code in base-app-unauth (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83c282e858f02d0a1d6e81763b2171173fe453c784ee5584e7dbb4d2ba0ec8cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Stack-based Buffer Overflow in Cisco Rv340_Firmware

CVE-2022-20699 🎧 Br...

CVE-2021-36169

Fortinet FortiOS FortiGate (FortiOS 7.x before 7.0.1 and 6.4.x before 6.4.7) is affected by CVE-2021-36169 due to a hidden/debug functionality that enables an attacker with high privileges to execute unauthorized code or commands by manipulating specific hex read/write operations via CLI memory a...

DEBIAN-CVE-2017-6062

The "OpenID Connect Relying Party and OAuth 2.0 Resource Server" aka modauthopenidc module before 2.1.5 for the Apache HTTP Server does not skip OIDCCLAIM and OIDCAuthNHeader headers in an "OIDCUnAuthAction pass" configuration, which allows remote attackers to bypass authentication via crafted HT...

HP-UX get_system_info工具非授权更改配置漏洞

HP-UX是一款HP公司开发的UNIX操作系统。 Ignite-UX和DynRootDisk系统的getsysteminfo工具实现上存在漏洞，本地攻击者可能利用此漏洞非授权更改系统网络参数。 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.00 HP已经为此发布了一个安全公告（HPSBUX02249）以及相应补丁: HPSBUX02249：SSRT071442 rev.1 HP-UX Running the Ignite-UX or the DynRootDisk DRD getsysteminfo Command, Local...