Mozilla Firefox < 99.0

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 99.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-13 advisory. - Mozilla developers and community members Nika Layzell, Andrew McCreight, Gabriele Svelto, and the Mozilla...

GitLab 13.1.x < 14.7.7, 14.8.x < 14.8.5, 14.9.x < 14.9.2 DoS Vulnerability

GitLab is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

CVE-2022-28251

creationtimestamp| type| source ---|---|--- 2022-04-01 13:39:27+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1802...

Security Bulletin: IBM Security Access Manager for Enterprise Single Sign-On may be vulnerable to arbitrary code execution due to Apache Log4j (CVE-2021-4104)

Summary Vulnerability in Apache Log4j CVE-2021-4104 may affect IBM Security Access Manager for Enterprise Single Sign-On. Although no known vulnerability impact has been proven, it is strongly recommended to apply the fix that upgrades log4j from version 1.x to version 2.1.17. Vulnerability Detai...

McAfee ePolicy Orchestrator Multiple Vulnerabilities (SB10379)

The instance of McAfee ePolicy Orchestrator installed on the remote host is affected by multiple vulnerabilities, including the following: - McAfee Enterprise ePolicy Orchestrator ePO prior to 5.10 Update 13 allows a local attacker to point an ePO server to an arbitrary SQL server during the...

heap buffer overflow in get_one_sourceline

Description When fuzzing vim commit 471b3aed3 I discovered a heap buffer overflow. I'm using ubuntu 20.04 with clang 13 Proof of Concept Here is the minimized poc bash norm300gr0 so How to build bash LD=lld AS=llvm-as AR=llvm-ar RANLIB=llvm-ranlib CC=clang CXX=clang++ CFLAGS="-fsanitize=address"...

CVE-2021-44751

creationtimestamp| type| source ---|---|--- 2022-03-25 13:30:28+00:00| seen| https://t.me/cibsecurity/39529...

PT-2022-13466 · Mcafee · Mcafee Enterprise Epolicy Orchestrator

Name of the Vulnerable Software and Affected Versions: McAfee Enterprise ePolicy Orchestrator versions prior to 5.10 Update 13 Description: A blind SQL injection issue allows a remote authenticated attacker to potentially obtain information from the database, with the data obtained being dependen...

Security update for java-1_8_0-openjdk (important)

openSUSE Security Update: Security update for java-180-openjdk Announcement ID: openSUSE-SU-2022:0873-1 Rating: important References: 1193314 1193444 1193491 1194926 1194928 1194929 1194931 1194932 1194933 1194934 1194935 1194937 1194939 1194940 1194941 1195163 Cross-References: CVE-2022-21248...

CVE-2022-20001

creationtimestamp| type| source ---|---|--- 2022-03-14 21:18:25+00:00| seen| https://t.me/cibsecurity/38904 2022-10-13 07:27:25+00:00| seen| https://t.me/cibsecurity/51304 2025-05-15 16:35:21+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16527...

Exploit for Race Condition in Apple Ipados

descraceA15 CVE-2021-30955 iOS 15.1.1 POC for 6GB RAM device...

taraka.iq.pl Cross Site Scripting vulnerability OBB-2429930

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

menhir74.nl Improper Access Control vulnerability OBB-2429547

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fichesdelecture.com Cross Site Scripting vulnerability OBB-2427310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-26966

creationtimestamp| type| source ---|---|--- 2022-03-13 00:16:15+00:00| seen| https://t.me/cibsecurity/38840...

CVE-2022-26967

creationtimestamp| type| source ---|---|--- 2022-03-13 00:16:14+00:00| seen| https://t.me/cibsecurity/38839...

AlmaLinux 8 : postgresql:13 (ALSA-2021:5236)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:5236 advisory. postgresql: memory disclosure in certain queries CVE-2021-3677 postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 Tenabl...

CVE-2022-23648

creationtimestamp| type| source ---|---|--- 2022-03-03 16:26:05+00:00| seen| https://t.me/cibsecurity/38353 2022-03-24 09:55:10+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1829 2022-03-25 19:47:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1719 2024-12-19...

TikTok: HTML Injection via Email Share

A HTML injection was found on a TikTok endpoint via the "nameofowner" parameter. We thank @lu3ky-13 for reporting this to our team...

13.cl Cross Site Scripting vulnerability OBB-2382085

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...