Appleは6月6日（米国時間）、米カリフォルニアで開催中の開発者向けイベント「WWDC22」におい…
「iPadOS 16」発表。複数ウィンドウ重ねて表示、外部ディスプレイ対応
Appleは現地時間6月6日、2022年秋に提供開始する次期OS「iPadOS 16」の概要を、開発…
[silverstripe/silverstripe-omnipay] Failed payment recorded has completed in Silverstripe Omnipay
Impact
For a subset of Omnipay gateways (those that use intermediary states like isNotification() or isRedirect()), if the payment identifier or success URL is exposed it is possible for payments to be prematurely marked as completed without payment be…
[django-s3file] Path Traversal in django-s3file
Impact
It was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files.
The issue was discovered by the maintainer. There were no reports of the vulnerability
being known to or exploited by a third party, before the rel…
[vyper] Multiple evaluation of contract address in call in vyper
Impact
when a calling an external contract with no return value, the contract address could be evaluated twice. this is usually only an efficiency problem, but if evaluation of the contract address has side effects, it could result in double evaluation…
[github.com/pingcap/tidb] TiDB authentication bypass vulnerability
Impact
Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in privilege escalation or unauthorized access.
Only users using TiDB 5.3.0 are affected by this vulnerability….
[trilogy] Use of Uninitialized Variable in trilogy
Impact
When authenticating, a malicious server could return a specially crafted authentication packet, causing the client to read and return up to 12 bytes of data from an uninitialized variable in stack memory.
Patches
Users of the trilogy gem should …
[oauthenticator] Authorization Bypass Through User-Controlled Key when using CILogonOAuthenticator oauthenticator
Background
CILogon is a federated auth provider that allows users to authenticate
themselves via a number of Identity Providers (IdP), focused primarily on educational and
research institutions (such as Universities). More traditional and open IdPs
suc…
NHKが映らない“テレビ”に続いて、今度はホームプロジェクターが人気！
このところ、配信サイトの放送を見るために、家庭用のホームプロジェクターの売り上げが急速に伸びているという。日本経済新聞が6日に配信した「プロジェクターがテレビ侵食 東大発スタートアップなど」という見出しの記事によると、家
アップル、さらに自動車に融合する次世代「CarPlay」発表
日本時間7日未明に開催されたアップルの開発者カンファレンスWWDC22で、アップルはiOSのカーイン…