TurboWarp 安全漏洞

TurboWarp is a TurboWarp open source application. A security vulnerability exists in versions prior to TurboWarp 1.8.0 that stems from allowing a malicious project or custom extension to read arbitrary files from disk and upload them to a remote server...

CVE-2022-24584

Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server. The Yubico OTP supposedly creates hardware bound second factor credentials. When a user reprograms the OTP functionality by "writing" it on a token using the Yubico...