CVE-2022-26023

A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A specially-crafted series of network requests can lead to disabling security features. An attacker can send a sequence of requests to trigger this vulnerability...

Security Bulletin: IBM Security Verify Access is vulnerable to execute arbitrary code due to jsr-sasign component. [CVE-2022-25898]

Summary jsr-sasign is used by IBM Security Verify Access product. This has been fixed by updating the version used by IBM Security Verify Access. CVE-2022-25898 Vulnerability Details CVEID:CVE-2022-25898 DESCRIPTION: Node.js jsrsasign module could allow a remote attacker to execute arbitrary code...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

Sql injection

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

Security Bulletin: IBM Security Verify Governance is vulnerable to bypassing of security restrictions due to use of Apache Santuario XML Security (CVE-2019-12400, CVE-2021-40690)

Summary IBM Security Verify Governance uses Apache Santuario XML Security for Java which could allow a remote attacker to bypass security restrictions caused by a couple of vulnerabilities. This could allow the attacker to launch further attacks on the system CVE-2019-12400, CVE-2021-40690. The f...

Security Bulletin: IBM Security Verify Governance is vulnerable to SQL injection due to use of Hibernate ORM (CVE-2020-25638)

Summary IBM Security Verify Governance uses Hibernate ORM which is vulnerable to SQL injection, caused by misconfiguration for hibernate.usesqlcomments. A remote attacker could send specially-crafted SQL statements to manipulate data in the back-end databaseCVE-2020-25638. The affected jar was...

Security Bulletin: IBM Security Verify Governance is vulnerable to identity spoofing due to use of IBM WebSphere Application Server Liberty (CVE-2022-22476)

Summary IBM Security Verify Governance uses IBM WebSphere Application Server Liberty which is vulnerable to identity spoofing by an authenticated user using a specially crafted request CVE-2022-22476. The fix includes upgrading IBM WebSphere Application Server Liberty with the security patch...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

CVE-2020-22819

CVE-2020-22819 affects MKCMS V6.2, with a SQL injection in the /ucenter/active.php endpoint via the verify parameter. Public documents consistently describe an SQLi vulnerability in MKCMS 6.2 hosted parameter, leading to high-impact confidentiality/integrity/availability (CVSS 3.1 base 9.8). Root...

MKCMS SQL注入漏洞

MKCMS is a content management system. A SQL injection vulnerability exists in MKCMS version V6.2, which stems from the verify parameter of its /ucenter/active.php component that allows an attacker to achieve SQL injection...

CVE-2020-22819

MKCMS V6.2 has SQL injection via the /ucenter/active.php verify parameter...

PT-2022-17636 · Inhand Networks · Inrouter302

Name of the Vulnerable Software and Affected Versions: InHand Networks InRouter302 version 3.5.45 Description: A leftover debug code vulnerability exists in the console verify functionality. This vulnerability can be triggered by a specially-crafted series of network requests, leading to the...

InHand Networks InRouter302 console verify leftover debug code vulnerability

Talos Vulnerability Report TALOS-2022-1520 InHand Networks InRouter302 console verify leftover debug code vulnerability October 27, 2022 CVE Number CVE-2022-26023 SUMMARY A leftover debug code vulnerability exists in the console verify functionality of InHand Networks InRouter302 V3.5.45. A...

cancionesconnombre.com Cross Site Scripting vulnerability OBB-3000386

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Security Bulletin: Security vulnerabilities in IBM Db2 used by IBM Security Verify Governance, Identity Manager software component

Summary Vulnerabilities exists which affects IBM Db2, which in turn is used by IBM Security Verify Governance, Identity Manager software component. Information about the security vulnerabilities affecting IBM Db2 has been published in a security bulletin. Vulnerability Details Refer to the securi...

Security Bulletin: IBM has announced a release for IBM Security Verify Governance in response to a security vulnerability (CVE-2022-21824)

Summary IBM has announced a release for IBM Security Verify Governance ISVG in response to security vulnerability. The vulnerability is caused by Node.js which could provide weaker than expected security, caused by an error related to the formatting logic of the console.table function...

bind security update

32:9.16.23-1.1 - Fix possible serve-stale related crash CVE-2022-3080 - Fix memory leak in ECDSA verify processing CVE-2022-38177 - Fix memory leak in EdDSA verify processing CVE-2022-38178...

Security Bulletin: Multiple security vulnerabilities have been identified in IBM DB2, which is supported by IBM Security Verify Governance

Summary IBM DB2 is supported as an external component of IBM Security Verify Governance . Information about multiple security vulnerabilities affecting IBM DB2 has been published in three security bulletins. Vulnerability Details Refer to the security bulletins listed in the Remediation/Fixes...

The vulnerability of the `append_to_verify_fifo_interleaved_` function in the `streamencoder.c` component of the FLAC audio codec allows a hacker to gain access to confidential data.

The vulnerability of the appendtoverifyfifointerleaved function in the streamencoder.c component of the FLAC audio encoder is related to writing beyond the buffer boundaries. Exploiting this vulnerability allows an attacker to gain access to confidential data...