QNAP QTS / QuTS hero Improper Authorization Vulnerability in HBS 3 (QSA-21-13)

The version of QNAP QTS or QuTS hero on the remote host is affected by an improper authorization vulnerability when running HBS 3 Hybrid Backup Sync. If exploited, the vulnerability allows remote attackers to log in to a device. Note that Nessus has not tested for this issue but has instead relie...

Google Releases First Developer Preview of Privacy Sandbox on Android 13

Google has officially released the first developer preview for the Privacy Sandbox on Android 13, offering an "early look" at the SDK Runtime and Topics API to boost users' privacy online. "The Privacy Sandbox on Android Developer Preview program will run over the course of 2022, with a beta...

Heap buffer overflow in vim_strncpy find_word

✍️ Description When fuzzing vim commit fc78a0369 works with latest build and latest commit 202b4bd3a per this time of this report with clang 13 and ASan, I discovered a buffer overflow. Proof of Concept Here is the poc bash...

CVE-2022-28193

creationtimestamp| type| source ---|---|--- 2022-04-27 22:13:19+00:00| seen| https://t.me/cibsecurity/41527...

CVE-2021-34588

creationtimestamp| type| source ---|---|--- 2022-04-27 20:13:25+00:00| seen| https://t.me/cibsecurity/41517...

CVE-2021-46424

creationtimestamp| type| source ---|---|--- 2022-04-27 16:13:01+00:00| seen| https://t.me/cibsecurity/41490 2026-09-01 20:01:41+00:00| seen| https://t.me/hackingAttack/53213 2026-09-02 01:01:50+00:00| seen| https://t.me/hackingAttack/53213 2026-09-05 21:00:05+00:00| published-proof-of-concept|...

CVE-2021-22054

creationtimestamp| type| source ---|---|--- 2022-04-27 09:49:16+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6207 2022-04-27 17:05:37+00:00| published-proof-of-concept| https://t.me/cKure/9432 2022-04-28 11:00:01+00:00| published-proof-of-concept|...

CVE-2022-29536

creationtimestamp| type| source ---|---|--- 2022-04-21 02:26:13+00:00| seen| https://t.me/cibsecurity/41214...

PT-2022-2393 · Apache · Log4J

Name of the Vulnerable Software and Affected Versions: Apache Log4j versions prior to log4j-cve-2021-44228-hotpatch-1.1-13 Description: The issue is related to insecure privilege management in the Log4j Java logging program. It allows an attacker to escalate their privileges. Recommendations: For...

Solaris 10 (x86) : 152644-13

SunOS 5.10x86: Apache 2.4 Patch. Date this patch was last updated by Sun : Apr/19/22 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

Solaris 10 (sparc) : 152643-13

SunOS 5.10: Apache 2.4 Patch. Date this patch was last updated by Sun : Apr/19/22 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include"compat.inc"; if description...

keslerzeist.nl Cross Site Scripting vulnerability OBB-2507590

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

bodaantik.hu Cross Site Scripting vulnerability OBB-2507584

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

member.jeonjufest.kr Cross Site Scripting vulnerability OBB-2507129

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

essentiallyelease.essenty.com Cross Site Scripting vulnerability OBB-2506809

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

orderonline.queencaterinapizza.com.au Cross Site Scripting vulnerability OBB-2506545

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-22797

creationtimestamp| type| source ---|---|--- 2022-04-13 20:18:18+00:00| seen| https://t.me/cibsecurity/40736...

CVE-2022-0221

creationtimestamp| type| source ---|---|--- 2022-04-13 20:18:13+00:00| seen| https://t.me/cibsecurity/40733...

architecturefirm.in Cross Site Scripting vulnerability OBB-2506195

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fam.findnativeamericans.com Cross Site Scripting vulnerability OBB-2506149

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...