PT-2023-1595 · Microsoft · Windows Mshtml Platform +2

Name of the Vulnerable Software and Affected Versions: Windows MSHTML Platform affected versions not specified Description: The issue is related to incorrect code generation management in the MSHTML platform of Microsoft Windows. It allows remote attackers to execute arbitrary code and affect the...

Debian: Security Advisory (DSA-5308-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5273-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5273-1 [email protected] https://www.debian.org/security/ Alberto Garcia November 08, 2022 https://www.debian.org/security/faq -...

Twisted 跨站脚本漏洞

Twisted is an event-driven open source web engine written in Python. A security vulnerability exists in Twisted versions 0.9.4 through 22.10.0rc1, which stems from the fact that when the host header does not match the configured host, "twisted.web.vhost. "NoResource" resource that unescapes the...

[SECURITY] [DLA 3087-1] webkit2gtk security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3087-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky August 30, 2022 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5210-1] webkit2gtk security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5210-1 [email protected] https://www.debian.org/security/ Alberto Garcia August 16, 2022 https://www.debian.org/security/faq -...

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34053

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

Design/Logic Flaw

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PYSEC-2022-43132

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

CVE-2022-34053

CVE-2022-34053 concerns the DR-Web-Engine package for PyPI, v0.2.0b0, featuring a code execution backdoor via the request package. The root cause is a backdoor enabling an attacker to access sensitive user information and digital currency keys and to escalate privileges. Documented sources (NVD, ...

DR-Web-Engine 安全漏洞

DR-Web-Engine is built on python based on the lxml package and uses JSON as the query structure. A security vulnerability exists in DR-Web-Engine. An attacker could exploit the vulnerability to access sensitive user information and digital currency keys, as well as elevate privileges...

CVE-2022-34053: Undefined Security Weakness

The DR-Web-Engine package in PyPI v0.2.0b0 was discovered to contain a code execution backdoor via the request package. This vulnerability allows attackers to access sensitive user information and digital currency keys, as well as escalate privileges...

PT-2022-7558 · Unknown +6 · Wpe Webkit +6

Name of the Vulnerable Software and Affected Versions: WPE WebKit versions prior to 2.36.4 WebKitGTK versions prior to 2.36.4 Description: The issue is related to errors in resource release, allowing a remote attacker to impact data integrity. It involves a logic problem in handling concurrent...

CVE-2022-20764

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...

CVE-2022-20794

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...

CVE-2022-20794

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...

CVE-2022-20794

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...

CVE-2022-20764

Multiple vulnerabilities in the web engine of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow a remote attacker to cause a denial of service DoS condition, view sensitive data on an affected device, or redirect users to an attacker-controlled destinatio...