5199 matches found
Koh - The Token Stealer
Koh is a C and Beacon Object File BOF toolset that allows for the capture of user credential material via purposeful token/logon session leakage. Some code was inspired by Elad Shamir's Internal-Monologue project no license, as well as KB180548. For why this is possible and Koh's approeach, see t...
Amazon Linux 2 : git (ALAS-2022-1810)
The version of git installed on the remote host is prior to 2.34.3-1. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2022-1810 advisory. A vulnerability was found in Git. This flaw occurs due to Git not checking the ownership of directories in a local multi-user system...
EulerOS 2.0 SP9 : git (EulerOS-SA-2022-1965)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...
Returned Value not checked when Depositing Eth
Lines of code Vulnerability details Impact In fillorder function, when eth is converted to weth, at line 335, it deposit the msg.value here. But it does not check the return value if the call succeeded. Proof of Concept IWETHweth.depositvalue: msg.value; Tools Used Visual Studio Code Recommended...
EulerOS 2.0 SP8 : git (EulerOS-SA-2022-1929)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...
Spring Tools 4.15.1 released
Dear Spring Community, I am happy to announce the 4.15.1 release of the Spring Tools 4 for Eclipse, Visual Studio Code, and Theia. fixes and improvements Spring Boot fixed: VScode incorrectly suggests removing @Autowired annotation from methods 787 Spring Boot fixed: VScode quick fix should not...
The vulnerability of Visual Studio Code’s source editor, related to deficiencies in access control, allows attackers to escalate their privileges.
The vulnerability of Visual Studio Code’s source editor is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to enhance their privileges...
Security Updates for Visual Studio 2019/2022 (June 2022) (macOS)
The Microsoft Visual Studio Products installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by the following vulnerabilities: - A potential privilege escalation vulnerability. An attacker can exploit this to elevate their privileges. CVE-2022-24513...
EulerOS 2.0 SP5 : git (EulerOS-SA-2022-1888)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git for Windows is a fork of Git containing Windows-specific patches. This vulnerability affects users working on multi-user machines, where...
Security Updates for Microsoft Visual Studio Products (June 2022)
The Microsoft Visual Studio Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2022-24513 - An information disclosure vulnerability exists in Visual...
Oracle Linux 8 : .NET / 6.0 (ELSA-2022-5046)
The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-5046 advisory. 6.0.106-1.0.1 - Add missing Oracle RIDs 6.0.106-1 - Update to .NET SDK 6.0.106 and Runtime 6.0.6 - Resolves: RHBZ2093432 6.0.105-1 - Update to .NET SDK 6.0.105...
CVE-2022-30184
.NET and Visual Studio Information Disclosure Vulnerability...
CVE-2022-30184
.NET and Visual Studio Information Disclosure Vulnerability...
Information disclosure
.NET and Visual Studio Information Disclosure Vulnerability...
CVE-2022-30184
CVE-2022-30184 is a .NET/Visual Studio information-disclosure vulnerability. Connected sources confirm it targets Microsoft software via improper input validation, enabling a local attacker to obtain sensitive information when processing crafted content. The CVSSv3.1 base score is 5.5 (AV:L/AC:L/...
CVE-2022-30184
.NET and Visual Studio Information Disclosure Vulnerability...
CVE-2022-30184 .NET and Visual Studio Information Disclosure Vulnerability
...
CVE-2022-30184 .NET and Visual Studio Information Disclosure Vulnerability
...
