‼ CVE-2022-31762 ‼
📖 Read
via "National Vulnerability Database".
The AMS module has a vulnerability in input validation. Successful exploitation of this vulnerability may cause privilege escalation.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29244 ‼
📖 Read
via "National Vulnerability Database".
npm pack ignores root-level .gitignore and .npmignore file exclusion directives when run in a workspace or with a workspace flag (ie. `--workspaces`, `--workspace=<name>`). Anyone who has run `npm pack` or `npm publish` inside a workspace, as of v7.9.0 and v7.13.0 respectively, may be affected and have published files into the npm registry they did not intend to include. Users should upgrade to the latest, patched version of npm v8.11.0, run: npm i -g npm@latest . Node.js versions v16.15.1, v17.19.1, and v18.3.0 include the patched v8.11.0 version of npm.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30308 ‼
📖 Read
via "National Vulnerability Database".
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-web-viewer-request-on" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1657 ‼
📖 Read
via "National Vulnerability Database".
Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversal and Local File inclusion. In the JupiterX theme, the jupiterx_cp_load_pane_action AJAX action present in the lib/admin/control-panel/control-panel.php file calls the load_control_panel_pane function. It is possible to use this action to include any local PHP file via the slug parameter. The Jupiter theme has a nearly identical vulnerability which can be exploited via the mka_cp_load_pane_action AJAX action present in the framework/admin/control-panel/logic/functions.php file, which calls the mka_cp_load_pane_action function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1961 ‼
📖 Read
via "National Vulnerability Database".
The Google Tag Manager for WordPress (GTM4WP) plugin is vulnerable to Stored Cross-Site Scripting due to insufficient escaping via the `gtm4wp-options[scroller-contentid]` parameter found in the `~/public/frontend.php` file which allowed attackers with administrative user access to inject arbitrary web scripts, in versions up to and including 1.15.1. This affects multi-site installations where unfiltered_html is disabled for administrators, and sites where unfiltered_html is disabled.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1659 ‼
📖 Read
via "National Vulnerability Database".
Vulnerable versions of the JupiterX Core (<= 2.0.6) plugin register an AJAX action jupiterx_conditional_manager which can be used to call any function in the includes/condition/class-condition-manager.php file by sending the desired function to call in the sub_action parameter. This can be used to view site configuration and logged-in users, modify post conditions, or perform a denial of service attack.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1654 ‼
📖 Read
via "National Vulnerability Database".
Jupiter Theme <= 6.10.1 and JupiterX Core Plugin <= 2.0.7 allow any authenticated attacker, including a subscriber or customer-level attacker, to gain administrative privileges via the "abb_uninstall_template" (both) and "jupiterx_core_cp_uninstall_template" (JupiterX Core Only) AJAX actions📖 Read
via "National Vulnerability Database".
‼ CVE-2022-30311 ‼
📖 Read
via "National Vulnerability Database".
In Festo Controller CECC-X-M1 product family in multiple versions, the http-endpoint "cecc-x-refresh-request" POST request doesn’t check for port syntax. This can result in unauthorized execution of system commands with root privileges due to improper access control command injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24077 ‼
📖 Read
via "National Vulnerability Database".
Naver Cloud Explorer Beta allows the attacker to execute arbitrary code as System privilege via malicious DLL injection.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1749 ‼
📖 Read
via "National Vulnerability Database".
The WPMK Ajax Finder WordPress plugin is vulnerable to Cross-Site Request Forgery via the createplugin_atf_admin_setting_page() function found in the ~/inc/config/create-plugin-config.php file due to a missing nonce check which allows attackers to inject arbitrary web scripts, in versions up to and including 1.0.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46814 ‼
📖 Read
via "National Vulnerability Database".
The video framework has an out-of-bounds memory read/write vulnerability. Successful exploitation of this vulnerability may affect system availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31763 ‼
📖 Read
via "National Vulnerability Database".
The kernel module has the null pointer and out-of-bounds array vulnerabilities. Successful exploitation of this vulnerability may affect system availability.📖 Read
via "National Vulnerability Database".
⚠ You’re invited! Join us for a live walkthrough of the “Follina” story… ⚠
📖 Read
via "Naked Security".
Live demo, plain English, no sales pitch, just a chance to watch an attack dissected in safety. Join us if you can!📖 Read
via "Naked Security".
Sophos News
You’re invited! Join us for a live walkthrough of the “Follina” story…
Live demo, plain English, no sales pitch, just a chance to watch an attack dissected in safety. Join us if you can!
‼ CVE-2021-46811 ‼
📖 Read
via "National Vulnerability Database".
HwSEServiceAPP has a vulnerability in permission management. Successful exploitation of this vulnerability may cause disclosure of the Card Production Life Cycle (CPLC) information.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-23168 ‼
📖 Read
via "National Vulnerability Database".
The attacker could get access to the database. The SQL injection is in the username parameter at the login panel: username: admin'--📖 Read
via "National Vulnerability Database".
‼ CVE-2021-41446 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29455 ‼
📖 Read
via "National Vulnerability Database".
DOM-based Reflected Cross-Site Scripting (XSS) vulnerability in Elementor's Elementor Website Builder plugin <= 3.5.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46815 ‼
📖 Read
via "National Vulnerability Database".
Configuration defects in the secure OS module. Successful exploitation of this vulnerability can affect availability.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28217 ‼
📖 Read
via "National Vulnerability Database".
Some part of SAP NetWeaver (EP Web Page Composer) does not sufficiently validate an XML document accepted from an untrusted source, which allows an adversary to exploit unprotected XML parking at endpoints, and a possibility to conduct SSRF attacks that could compromise system’s Availability by causing system to crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2021-46812 ‼
📖 Read
via "National Vulnerability Database".
The Device Manager has a vulnerability in multi-device interaction. Successful exploitation of this vulnerability may affect data integrity.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-31055 ‼
📖 Read
via "National Vulnerability Database".
kCTF is a Kubernetes-based infrastructure for capture the flag (CTF) competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want to test challenges privately can mark them as `public: false` and use `kctf chal debug port-forward` to connect.📖 Read
via "National Vulnerability Database".