Design/Logic Flaw

Activity Watch is a free and open-source automated time tracker. Versions prior to 0.11.0 allow an attacker to execute arbitrary commands on any macOS machine with ActivityWatch running. The attacker can exploit this vulnerability by having the user visiting a website with the page title set to a...

CVE-2021-32692 Activity Watch vulnerable to command execution on macOS via printAppTitle.scpt

Activity Watch is a free and open-source automated time tracker. Versions prior to 0.11.0 allow an attacker to execute arbitrary commands on any macOS machine with ActivityWatch running. The attacker can exploit this vulnerability by having the user visiting a website with the page title set to a...

CVE-2021-32692

Activity Watch (aw-watcher-window) is vulnerable to OS command execution on macOS when pre-0.11.0 releases run. The flaw arises from printAppTitle.scpt, enabling an attacker to run arbitrary commands by persuading a user to visit a page with a crafted title (browser is the likely vector). Impact ...

CVE-2022-44699

Azure Network Watcher Agent Security Feature Bypass Vulnerability...

CVE-2022-44699

Azure Network Watcher Agent Security Feature Bypass Vulnerability...

Security feature bypass

Azure Network Watcher Agent Security Feature Bypass Vulnerability...

Azure Network Watcher Agent Security Feature Bypass Vulnerability

...

PT-2022-6013 · Microsoft · Azure Network Watcher Vm Agent

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher Agent affected versions not specified Description: The issue is related to authorization errors in the Azure Network Watcher Agent service, which can be exploited to bypass existing security restrictions. Recommendations...

KLA20119 SB vulnerability in Microsoft Azure

Security vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories CVE-2022-44699 Exploitation Public exploits exist for this vulnerability. Related products Microsoft-Azure CVE list CVE-2022-44699 high KB list...

CVE-2022-44699 Azure Network Watcher Agent Security Feature Bypass Vulnerability

...

CVE-2022-44699: Undefined Security Weakness

Azure Network Watcher Agent Security Feature Bypass Vulnerability...

CVE-2022-44699

CVE-2022-44699 affects the Azure Network Watcher Agent (VM extension). The connected docs describe a Security Feature Bypass caused by authorization errors in the Azure Network Watcher Agent service, enabling bypass of security controls and potentially missing logs from packet captures. Adjacent ...

Malicious code in package-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baa4cb3784d3ba6aafd1300c8861741e31526e2a3653564bc354e96cef74314c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-5184 Malicious code in package-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware baa4cb3784d3ba6aafd1300c8861741e31526e2a3653564bc354e96cef74314c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in dns-watcher-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57fd746756b5ce05a87ca574c72a05047e487d9420813968ea366c6a3c8025 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-2542 Malicious code in dns-watcher-frontend (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cf57fd746756b5ce05a87ca574c72a05047e487d9420813968ea366c6a3c8025 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in metric-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66806e22a1f590ee26637d60921fc3bf8dae035e72a8042a2fde3ae002e2f8de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2022-4576 Malicious code in metric-watcher (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 66806e22a1f590ee26637d60921fc3bf8dae035e72a8042a2fde3ae002e2f8de Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

November 9, 2021-KB5007152 Cumulative Update for .NET Framework 4.8 for Windows 10, version 1607 and Windows Server, version 2016

None None...

November 9, 2021-KB5006365 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10, version 2004, Windows Server, version 2004, Windows 10, version 20H2, and Windows Server, version 20H2, and Windows Version 21H1

None None...