KGExplore security vulnerabilities

KGExplore is a publicly available knowledge graph exploration project for individual developers. A security vulnerability exists in the KGExplore package for PyPI versions v0.1.1 through v0.1.2. An attacker exploited the vulnerability to access sensitive user information and digital currency keys...

Beginner Security Vulnerabilities

Beginner is a handy code package for Python beginners. A security vulnerability exists in Beginner. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

drxhello security vulnerability

drxhello is a pip package for individual developers. A security vulnerability exists in the PyPI v0.0.1 version of the drxhello package. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as to elevate privileges...

Sixfab security vulnerabilities

Sixfab is a pip package for individual developers. A security vulnerability exists in the Sixfab-Tool package in PyPI versions v0.0.2 through v0.0.3. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

Zibal security vulnerabilities

Zibal is the Zibal payment gateway. A security vulnerability exists in Zibal. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

Togglee security vulnerabilities

Togglee is a simple library for separating feature deployment from release time. A security vulnerability exists in Togglee. An attacker exploited the vulnerability to access sensitive user information and digital currency keys, as well as elevated privileges...

Flaws in Smart Jacuzzi App Could Be Exploited To Extract Users’ Data

By Deeba Ahmed The vulnerability existed in Jacuzzi Brand LLC’s SmartTub app web interface that could reveal users private data to… This is a post from HackRead.com Read the original post: Flaws in Smart Jacuzzi App Could Be Exploited To Extract Users Data...

Recipes Cross-Site Scripting Vulnerability (CNVD-2022-58299)

Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 1.0.5 through 1.2.5, which stems from a filtered escape of user data missing from the name parameter. A low-privileged attacker can exploit thi...

Recipes Cross-Site Scripting Vulnerability (CNVD-2022-58298)

Recipes are apps for managing recipes, planning meals, creating shopping lists, and more. A cross-site scripting vulnerability exists in Recipes versions 1.0.5 through 1.2.5, which stems from a filtered escape of user data missing from the name parameter. A low-privileged attacker can exploit thi...

IBM Robotic Process Automation information leakage vulnerability

IBM Robotic Process Automation is a robotic process automation product from IBM USA. It helps you automate more business and IT processes at scale with the ease and speed of traditional RPA. IBM Robotic Process Automation suffers from an information disclosure vulnerability that stems from...

CVE-2022-30229

A vulnerability has been identified in SICAM GridEdge Classic All versions V2.6.6. The affected application does not require authenticated access for privileged functions. This could allow an unauthenticated attacker to change data of a user, such as credentials, in case that user's id is known...

CVE-2022-22103

Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto...

CVE-2022-22103

Memory corruption in multimedia driver due to double free while processing data from user in Snapdragon Auto...

PT-2022-20024

Name of the Vulnerable Software and Affected Versions SICAM GridEdge Essential ARM versions prior to 2.6.6 SICAM GridEdge Essential Intel versions prior to 2.6.6 SICAM GridEdge Essential with GDS ARM versions prior to 2.6.6 SICAM GridEdge Essential with GDS Intel versions prior to 2.6.6 Descripti...

Siemens SICAM GridEdge Essential authorization issue vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC 61850 devices with just a few clicks.Siemens SICAM GridEdge is vulnerable to an authentication error, which stems from the fact that the affected software does not require authenticated access to privileged functions and can be exploit...

PT-2025-26000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the apparmor module. The issue occurs when the copy from user function fails, causing a memory leak due to th...

Siemens SINEMA Remote Connect Server log information leakage vulnerability

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunneled connections VPN between headquarters, service technicians and installed machines or plants. An information disclosure vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from ...

The Tricky Business of Elon Musk Getting Twitter Fire-Hose Access

Twitter has reportedly given the billionaire access to its full stream of tweets and related user data. Is your privacy in jeopardy?...

Spectrum Scale and IBM Elastic Storage System Licensing Issues Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management. The product supports helping customers reduce storage costs while improving security and management efficiency in...

Samsung Account Information Disclosure Vulnerability (CNVD-2022-81377)

Samsung Account is a comprehensive free membership to Samsung services for Samsung mobile devices that can be used on smartphones, tablets, websites, TVs and other devices.An information disclosure vulnerability exists in versions prior to Samsung Account 13.2.00.6, which stems from the exposure ...