GLSA-202402-12 : GNU Tar: Out of Bounds Read

The remote host is affected by the vulnerability described in GLSA-202402-12 GNU Tar: Out of Bounds Read - GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrate...

CVE-2023-40265

An issue was discovered in Atos Unify OpenScape Xpressions WebAssistant V7 before V7R1 FR5 HF42 P911. It allows authenticated remote code execution via file upload...

Malicious code in o2-ionic-image-loader-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-941 Malicious code in o2-ionic-image-loader-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c645fd90c285367a338c640179963eff4cec0a670e47392a050ca826671442bd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GO-2023-2413 Sensitive information logged in github.com/elastic/beats/v7

Sensitive information logged in github.com/elastic/beats/v7...

Easy2Pilot 7 SQL Injection

==================================================================================================================================== | Title : Easy2Pilot V7 Auth By Pass Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 69.032-bit | | Vendo...

Huawei EulerOS: Security Advisory for tar (EulerOS-SA-2023-2457)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CMSgrafia 7 SQL Injection

====================================================================================================================================== | Title : CMSgrafia v7 Sql injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 61.0.1 32-bit | |...

Siemens SIMATIC WinCC V7

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Huawei EulerOS: Security Advisory for tar (EulerOS-SA-2023-2198)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for tar (EulerOS-SA-2023-2131)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in pmcrypto-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3a1eb09bba631f290225217047eab8997cef64f4c0e321d47728fc9ee46f6aa The OpenSSF Package Analysis project identified 'pmcrypto-v7' @ 8.999.0 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1267 Malicious code in pmcrypto-v7 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis a3a1eb09bba631f290225217047eab8997cef64f4c0e321d47728fc9ee46f6aa The OpenSSF Package Analysis project identified 'pmcrypto-v7' @ 8.999.0 npm as malicious. It is considered malicious because: - The package...

Malicious code in pmcrypto-v7-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis aa2e150fa7626c456fcd88a95dd114616578c8bf69b9cf9c772d3858a051b6ba The OpenSSF Package Analysis project identified 'pmcrypto-v7-test' @ 1.999.0 npm as malicious. It is considered malicious because: - The package...

Important: tar

Issue Overview: GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximate...

Important: tar

Issue Overview: GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximate...

Remote code execution

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

CVE-2023-27037

Qibosoft QiboCMS v7 was discovered to contain a remote code execution RCE vulnerability via the GetTitle function at labelsetrs.php...

CVE-2023-27037

Qibosoft QiboCMS v7 is affected by a remote code execution (RCE) vulnerability in the Get_Title function of label_set_rs.php. The CVE entry CVE-2023-27037 documents impact on QiboCMS v7 and indicates high-severity risk (CVSS 3.1: AV:N/AC:L/PR:L/UI:N/S:U/C/H/I/H). Several connected sources corrobo...

Updated tar packages fix security vulnerability

GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in fromheader in list.c via a V7 archive in which mtime has approximately 11 whitespace...