CVE-2022-46438

creationtimestamp| type| source ---|---|--- 2023-01-13 02:35:28+00:00| seen| https://t.me/cibsecurity/56460...

ikcaedu.kr Cross Site Scripting vulnerability OBB-3147710

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-46622

creationtimestamp| type| source ---|---|--- 2023-01-13 00:30:39+00:00| seen| https://t.me/cibsecurity/56457 2025-04-08 14:47:11+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10918...

CVE-2023-0257

creationtimestamp| type| source ---|---|--- 2023-01-13 00:30:37+00:00| published-proof-of-concept| https://t.me/cibsecurity/56455...

CVE-2022-46472

creationtimestamp| type| source ---|---|--- 2023-01-13 00:30:33+00:00| seen| https://t.me/cibsecurity/56454...

CVE-2022-47102

creationtimestamp| type| source ---|---|--- 2023-01-13 00:30:31+00:00| seen| https://t.me/cibsecurity/56452...

CVE-2017-5242

creationtimestamp| type| source ---|---|--- 2023-01-13 00:30:30+00:00| seen| https://t.me/cibsecurity/56451...

WordPress Map Multi Marker Plugin <= 3.2.1 is vulnerable to Cross Site Scripting (XSS)

Software Map Multi Marker Type Plugin Vulnerable versions = 3.2.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2022-47591 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 0fa0897cb0de Credits minhtuanact Requir...

CVE-2022-23525 affecting package helm 3.4.1-13

CVE-2022-23525 affecting package helm 3.4.1-13. A patched version of the package is available...

AZL-12970 CVE-2022-4415 affecting package systemd for versions less than 250.3-13

A vulnerability was found in systemd. This security flaw can cause a local information leak due to systemd-coredump not respecting the fs.suiddumpable kernel setting...

GLSA-202301-08 : Mbed TLS: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202301-08 Mbed TLS: Multiple Vulnerabilities - A Lucky 13 timing side channel in mbedtlsssldecryptbuf in library/sslmsg.c in Trusted Firmware Mbed TLS through 2.23.0 allows an attacker to recover secret key information. This affec...

CVE-2022-43974

MatrixSSL 4.0.4 through 4.5.1 has an integer overflow in matrixSslDecodeTls13. A remote attacker might be able to send a crafted TLS Message to cause a buffer overflow and achieve remote code execution. This is fixed in 4.6.0...

CVE-2022-4236

creationtimestamp| type| source ---|---|--- 2023-01-03 00:17:05+00:00| seen| https://t.me/cibsecurity/55766 2023-11-13 19:56:56+00:00| seen| https://t.me/arpsyndicate/167...

CVE-2022-4732

creationtimestamp| type| source ---|---|--- 2022-12-27 18:13:44+00:00| seen| https://t.me/cibsecurity/55422...

Debian dla-3249 : libmbedcrypto3 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3249 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3249-1 [email protected]...

CVE-2022-44510

creationtimestamp| type| source ---|---|--- 2022-12-22 20:13:47+00:00| seen| https://t.me/cibsecurity/55124...

CVE-2022-20609

creationtimestamp| type| source ---|---|--- 2022-12-16 18:30:47+00:00| seen| https://t.me/cibsecurity/54703 2025-04-18 13:58:39+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12436...

CVE-2022-20558

In registerReceivers of DeviceCapabilityListener.java, there is a possible way to change preferred TTY mode due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2022-20540

In SurfaceFlinger::doDump of SurfaceFlinger.cpp, there is possible arbitrary code execution due to a use after free. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20556

In launchConfigNewNetworkFragment of NetworkProviderSettings.java, there is a possible way for the guest user to add a new WiFi network due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede...