CVE-2022-26431

creationtimestamp| type| source ---|---|--- 2022-08-01 18:17:00+00:00| seen| https://t.me/cibsecurity/47336...

CVE-2022-21789

creationtimestamp| type| source ---|---|--- 2022-08-01 18:16:56+00:00| seen| https://t.me/cibsecurity/47332 2026-07-29 12:01:02+00:00| seen| https://t.me/CVEhub/1366 2026-07-30 00:01:43+00:00| seen| https://t.me/CVEhub/1366 2026-08-01 06:00:04+00:00| published-proof-of-concept|...

CVE-2022-2273

creationtimestamp| type| source ---|---|--- 2022-08-01 16:17:09+00:00| seen| https://t.me/cibsecurity/47327...

CVE-2022-2317

creationtimestamp| type| source ---|---|--- 2022-08-01 16:17:03+00:00| seen| https://t.me/cibsecurity/47323...

CVE-2022-2325

creationtimestamp| type| source ---|---|--- 2022-08-01 16:17:02+00:00| seen| https://t.me/cibsecurity/47322...

CVE-2022-1600

creationtimestamp| type| source ---|---|--- 2022-08-01 16:16:59+00:00| seen| https://t.me/cibsecurity/47319...

CVE-2022-2245

creationtimestamp| type| source ---|---|--- 2022-08-01 16:16:48+00:00| seen| https://t.me/cibsecurity/47311...

CVE-2021-27785

creationtimestamp| type| source ---|---|--- 2022-08-01 00:10:14+00:00| seen| https://t.me/cibsecurity/47305...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...

iconsiglidilisa.it Cross Site Scripting vulnerability OBB-2768857

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CISA Adds One Known Exploited Vulnerability to Catalog 

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

CVE-2022-31533

The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

ytdl-sync 路径遍历漏洞

The ytdl-sync repository is a web interface for YTDL by Jake Garza, an individual developer in the United States. A security vulnerability exists in ytdl version 2021-01-02 and earlier, which stems from an incorrect call to Flask's sendfile function that results in absolute path traversal...

Slackware Linux 14.0 / 14.1 / 14.2 / 15.0 / current wavpack Multiple Vulnerabilities (SSA:2022-191-01)

The version of wavpack installed on the remote host is prior to 5.5.0. It is, therefore, affected by multiple vulnerabilities as referenced in the SSA:2022-191-01 advisory. - An out of bounds read was found in Wavpack 5.4.0 in processing .WAV files. This issue triggered in function...

CVE-2022-1245

creationtimestamp| type| source ---|---|--- 2022-07-08 07:15:53+00:00| seen| https://t.me/cibsecurity/45799 2024-01-28 04:07:31+00:00| seen| https://t.me/arpsyndicate/3197...

Slackware Linux 15.0 / current gnupg2 Vulnerability (SSA:2022-188-01)

The version of gnupg2 installed on the remote host is prior to 2.2.36. It is, therefore, affected by a vulnerability as referenced in the SSA:2022-188-01 advisory. - GnuPG through 2.3.6, in unusual situations where an attacker possesses any secret-key information from a victim's keyring and other...

Slackware: Security Advisory (SSA:2022-188-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-34007

EQS Integrity Line Professional through 2022-07-01 allows a stored XSS via a crafted whistleblower entry...

Malicious code in roar-01 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware aeaacbda79e7c5ad19617406b51e22bb02a81c23eed3c203b2214bf4b255f92e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

EQS Integrity Line Cross Site Scripting / Information Disclosure

EQS Integrity Line: Multiple Vulnerabilities Name Multiple Vulnerabilities in EQS Integrity Line Systems Affected EQS Integrity Line through 2022-07-01 Severity High Impact CVSSv2 High 8.8/10, score: AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Vendor EQS Group AG https://www.eqs.com/ Advisory...