697 matches found
GHSA-455W-C45V-86RG fastify vulnerable to denial of service via malicious Content-Type
Impact An attacker can send an invalid Content-Type header that can cause the application to crash, leading to a possible Denial of Service attack. Only the v4.x line is affected. This was updated: upon a close inspection, v3.x is not affected after all. Patches Yes, update to v4.8.0. Workarounds...
CVE-2022-35150
Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...
Privilege escalation
Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...
CVE-2022-35150
Baijicms v4 contains an arbitrary file upload vulnerability due to lack of validation of uploaded files. Reported across multiple sources (CNVD/CNNVD/NI CVD records) with potential for remote code execution and high impact (based on CVSS 3.1 metrics: AV:N, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H). E...
CVE-2022-35150
Baijicms v4 was discovered to contain an arbitrary file upload vulnerability...
Fedora: Security Advisory for podman-tui (FEDORA-2022-5038c3236c)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 36 Update: golang-github-cloudflare-0.21.0-4.fc36
A Go library for interacting with Cloudflare's API v4. This library allows you to: - Manage and automate changes to your DNS records within Cloudflare - Manage and automate changes to your zones domains on Cloudflare, includi ng adding new zones to your account - List and modify the status of WAF...
IOTransfer 4.0 - Remote Code Execution Exploit
Exploit Title: IOTransfer V4 – Remote Code Execution RCE Exploit Author: Tomer Peled Vendor Homepage: https://www.iobit.com Software Link: https://iotransfer.itopvpn.com/ Version: V4 and onward Tested on: Windows 10 CVE : 2022-24562 References:...
fastify-bearer-auth vulnerable to Timing Attack Vector
Impact fastify-bearer-auth does not securely use crypto.timingSafeEqual. A malicious attacker could estimate the length of one valid bearer token. According to the corresponding RFC 6750, the bearer token has only base64 valid characters, reducing the range of characters for a brute force attack...
[SECURITY] Fedora 36 Update: podman-tui-0.4.0-2.fc36
podman-tui is a terminal user interface for Podman v4. podman-tui is using podman.socket service to communicate with podman environm ent and SSH to connect to remote podman machines...
[SECURITY] Fedora 36 Update: golang-github-cloudflare-0.21.0-3.fc36
A Go library for interacting with Cloudflare's API v4. This library allows you to: - Manage and automate changes to your DNS records within Cloudflare - Manage and automate changes to your zones domains on Cloudflare, includi ng adding new zones to your account - List and modify the status of WAF...
MAL-2022-1615 Malicious code in blockchain-wallet-v4-frontend (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a89d991ea9a446ae4d3d5807de7e61326972d6c0bd7e0ab2b217118d78c06be5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in discord.js-discord-selfbot-v4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8eed2fdf7ad75e62eebdf83520a0c2ba7528a1cf739ee597ddf57e5ab499e2b8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
GHSA-H2WQ-PRV9-2F56 Missing validation crashes `QuantizeAndDequantizeV4Grad`
Impact The implementation of tf.rawops.QuantizeAndDequantizeV4Grad does not fully validate the input arguments. This results in a CHECK-failure which can be used to trigger a denial of service attack: python import tensorflow as tf tf.rawops.QuantizeAndDequantizeV4Grad gradients=tf.constant1,...
GHSA-RQW2-HHRF-7936 OpenStack Keystone does not check signature TTL of the EC2 credential auth method
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...
OpenStack Keystone does not check signature TTL of the EC2 credential auth method
An issue was discovered in OpenStack Keystone before 15.0.1, and 16.0.0. The EC2 API doesn't have a signature TTL check for AWS Signature V4. An attacker can sniff the Authorization header, and then use it to reissue an OpenStack token an unlimited number of times...
Google TensorFlow输入验证错误漏洞
Google TensorFlow, an end-to-end open source platform for machine learning from Google, Inc. is vulnerable to an input validation error in versions prior to 2.9.0, 2.8.1, 2.7.2, and 2.6.4, which originates in tf.rawops QuantizeAndDequantizeV4Grad does not fully validate the input parameters and c...
PHP Code Injection by malicious block or filename
Impact Template authors could inject php code by choosing a malicous block name or include file name. Sites that cannot fully trust template authors should update asap. Patches Please upgrade to the most recent version of Smarty v3 or v4. Workarounds Is there a way for users to fix or remediate t...
CVE-2022-24858 Default redirect callback vulnerable to open redirects
next-auth v3 users before version 3.29.2 are impacted. next-auth version 4 users before version 4.3.2 are also impacted. Upgrading to 3.29.2 or 4.3.2 will patch this vulnerability. If you are not able to upgrade for any reason, you can add a configuration to your callbacks option. If you already...
TP-Link TL-WR802N OS Command Injection Vulnerability
TP-Link TL-WR802N is a wireless router from China Universal Link TP-Link.TP-Link TL-WR802N V4 suffers from an operating system command injection vulnerability, which stems from the fact that TP-Link wifi router TL-WR802N V4 is vulnerable to operating system command injection attacks. No detailed...