50873 matches found
Adobe Commerce 2.4.7 XML Injection / Code Execution
Adobe Commerce versions 2.4.7, 2.4.6-p5, 2.4.5-p7, 2.4.4-p8 and earlier are affected by an improper restriction of XML External Entity Reference XXE vulnerability that could result in arbitrary code execution. https://packetstorm.news/download/188633...
WebKit DocumentFontLoader::fontLoadingTimerFired Use-After-Free
WebKit suffers from a use-after-free vulnerability in DocumentFontLoader::fontLoadingTimerFired. https://packetstorm.news/download/188628...
Linux inotify_rm_watch() Race Condition / Use-After-Free
Linux suffers from a race condition in inotifyrmwatch with umount that can lead to a superblock-related use-after-fre condition. Summary There's a UAF race between inotifyrmwatch and umount; my guess is that it is hard to hit at least when paniconoops is enabled because a more likely race orderin...
Netsweeper Privilege Escalation
Netsweeper allows for unauthorized changes to the account owner field due to a lack of server-side controls. Patched in NS1271GA. Description: Netsweeper's account management interface allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and a lack of...
Qsync Central Path Traversal / Information Disclosure
Qsync Central suffers from a symlink attack via an uploaded zip file that results in traversal and information disclosure. Qsync Central versions 4.4.0.1620240819 2024/08/19 and later address this issue. https://packetstorm.news/download/188634...
QNAP Symlink Remote Code Execution
The QNAP operating system suffers from a symlinking vulnerability. It is possible to upload a symlink trough a ZIP file and abuse the encrypt/decrypt function to gain an arbitrary file write primitive which can be turned into remote code execution. An attacker with privileges of a regular user ca...
CISA: Active Shooter Attacks Action Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Mitigating Attacks on Houses of Worship Security Guide - Simplified Chinese Translation
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: DHS Election Infrastructure Security Funding Consideration
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Jack Rabbit II Update and Impacts
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: FEMA Chemical, Biological, Radiological, and Nuclear (CBRN) Response and Recovery Efforts
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Chemical Security Analysis Center (CSAC) Overview
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Office for Bombing Prevention (OBP) Overview
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Mitigating Attacks on Houses of Worship Security Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Actions to Improve Chemical Facility Safety and Security - a Shared Commitment (Report for the President, May 2014)
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: International Supply Chain Protection Challenges and Solutions
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Dow Incident and Crisis Management
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Air Domain Awareness
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Security and Resiliency Guide - Public Assembly Annex
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: CISA SBOM-A-Rama Day 1 Slides
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Unattended vs. Suspicious Item Poster
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2021 ISC Annual Review
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: November 2014/1st Edition - Best Practices for Working with Lessors: an Interagency Security Committee Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Chemical Sector 101
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2019 Edition - Violence in the Federal Workplace: Appendices A, B, and C: Awareness, Resources, and Case Studies
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2019 Edition - Violence in the Federal Workplace: a Guide for Prevention and Response
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Building Relationships with First Responders: Tools and Resources
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: How Multinational Critical Infrastructure Corporations Protect Intellectual Property from Theft and Espionage
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Protecting Patrons during the Holiday Shopping Season Fact Sheet
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Waterside Security of Especially Hazardous Cargoes (EHC)
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Federally Sponsored C-IED Training and Education Resources Catalog
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Mitigating Attacks on Houses of Worship Security Guide - Spanish Translation
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Cyber Incident Resource Guide for Governors
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: SRG Fact Sheet
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: STS Scenarios Workshop 1 Scenario 2 a Fragmented World
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: DHS OSAI-OBP Partnership Fact Sheet
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2022 ISC Annual Review
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Active Shooter: How to Respond Booklet - Spanish Translation
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Multidisciplinary Partnerships in Chemical Security and Preparedness
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Suspicious UAS Identification Postcard
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Chemical Facility Anti-Terrorism Standards (CFATS) Case Study: Strategic and Tactical CFATS Considerations for a Multi-Tenant Dow, DuPont, and Corteva Facility
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Little Arc-Flash: How Digital Attacks Can Cause Physical Ramifications
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: 2022 Summit: ChemLock Overview
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: January 2017/2nd Edition - Security Specialist Competencies: an Interagency Security Committee Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Jack Rabbit III Initiatives
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Security and Resiliency Guide
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Suspicious UAS Identification Poster
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Three Ps of Voting
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...