SQL injection vulnerability in the CONPROSYS HMI System (CHS) Ver.3.5.0 and earlier allows a remote authenticated attacker to execute an arbitrary SQL command. As a result, information stored in the d ...
Continue Reading
January 30, 2023
# Talos Vulnerability Report ### TALOS-2022-1641 ## FreshTomato httpd logs/view.cgi OS command injection vulnerability ##### January 26, 2023 ##### CVE Number CVE-2022-42484 ##### SUMMARY An OS comman ...
Continue Reading
January 30, 2023
# Talos Vulnerability Report ### TALOS-2022-1642 ## FreshTomato httpd update.cgi directory traversal vulnerability ##### January 26, 2023 ##### CVE Number CVE-2022-38451 ##### SUMMARY A directory trav ...
Continue Reading
January 30, 2023
Versions of the package eta before 2.0.0 are vulnerable to Remote Code Execution (RCE) by overwriting template engine configuration variables with view options received from The Express render API. ** ...
Continue Reading
January 30, 2023
The remote SUSE Linux SLES15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0187-1 advisory. - Rootless containers run with ...
Continue Reading
January 28, 2023
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0032-1 advisory. - Use after free in WebTransport. (CVE-2023-04 ...
Continue Reading
January 28, 2023
[
Back to Main
