Privilege escalation

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27991

Online Banking System in PHP v1 was discovered to contain multiple SQL injection vulnerabilities at /stafflogin.php via the Staff ID and Staff Password parameters...

CVE-2022-27357

Ecommerce-Website v1 was discovered to contain an arbitrary file upload vulnerability via /customerregister.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27357

CVE-2022-27357 affects Ecommerce-Website v1, exposing an arbitrary file upload vulnerability via /customer_register.php that allows executing crafted PHP code. Public references (e.g., Red Hat, CNVD, NVD, CNVD CNVD, PACKETSTORM) describe file upload leading to remote code execution, with PoCs and...

CVE-2022-27348

CVE-2022-27348 affects Social Codia SMS v1 (inventory management system). The connected documents confirm a stored cross-site scripting (XSS) vulnerability in add_post.php, where an attacker can inject a crafted payload into the Post Title text field to execute arbitrary web scripts/HTML. Root ca...

CVE-2022-27064

CVE-2022-27064 : In Musical World v1, an arbitrary file upload vulnerability in uploaded_songs.php allows remote code execution via a crafted PHP file. Public PoCs show uploading a shell to /songs/uploaded_songs/shell.php due to missing file validation. Connected advisories (Red Hat RH:CVE-2022-2...

CVE-2022-27064

Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploadedsongs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

SUSE: Security Advisory (SUSE-SU-2022:1036-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2022:1036-1 Security update for the Linux Kernel (Live Patch 42 for SLE 12 SP3)

This update for the Linux Kernel 4.4.180-94153 fixes one issue. The following security issue was fixed: - CVE-2022-0492: Fixed a privilege escalation related to cgroups v1 releaseagent feature, which allowed bypassing namespace isolation unexpectedly bsc1195543...

LSN-0085-1: Kernel Live Patch Security Notice

Yiqi Sun and Kevin Wang discovered that the cgroups implementation in the Linux kernel did not properly restrict access to the cgroups v1 releaseagent feature. A local attacker could use this to gain administrative privileges.CVE-2022-0492 Nick Gregory discovered that the Linux kernel incorrectly...

Important: Red Hat Security Advisory: kpatch-patch-4_18_0-147_58_1 security and bug fix update

An update for kpatch-patch-4180-147581 is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RHEL 8 : kpatch-patch (RHSA-2022:0851)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0851 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

RHEL 8 : kpatch-patch (RHSA-2022:0849)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2022:0849 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...

Important: Red Hat Security Advisory: kpatch-patch security update

An update for kpatch-patch is now available for Red Hat Enterprise Linux 8.1 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

kernel security, bug fix, and enhancement update

4.18.0-348.20.15.OL8 - Update Oracle Linux certificates Kevin Lyons - Disable signing for aarch64 Ilya Okomin - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list olkmodsigningkey.pem Orabug: 29539237 - Update x509.genkey Orabug: 24817676 - Conflict with shim-ia32 and...

kernel: local privilege escalation by exploiting the fsconfig syscall parameter leads to container breakout

A use-after-free flaw was found in cgroup1parseparam in kernel/cgroup/cgroup-v1.c in the Linux kernel's cgroup v1 parser. A local attacker with a user privilege could cause a privilege escalation by exploiting the fsconfig syscall parameter leading to a container breakout and a denial of service ...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

An update for kernel-rt is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

Debian: Security Advisory (DSA-5095-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Linux 15.0 kernel-generic Multiple Vulnerabilities (SSA:2022-067-01)

The version of kernel-generic installed on the remote host is prior to 5.15.27 / 5.15.27smp. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-067-01 advisory. - A use-after-free vulnerability was found in rtsxusbmsdrvremove in drivers/memstick/host/rtsxusbms.c ...

Security update for the Linux Kernel (important)

openSUSE Security Update: Security update for the Linux Kernel Announcement ID: openSUSE-SU-2022:0755-1 Rating: important References: 1089644 1154353 1156395 1157038 1157923 1176447 1176940 1178134 1181147 1181588 1183872 1187716 1188404 1189126 1190812 1190972 1191580 1191655 1191741 1192210...