CVE-2022-22651

creationtimestamp| type| source ---|---|--- 2022-03-18 21:28:48+00:00| seen| https://t.me/cibsecurity/39240...

CVE-2022-22596

creationtimestamp| type| source ---|---|--- 2022-03-18 21:23:00+00:00| seen| https://t.me/cibsecurity/39230...

CVE-2022-27243

creationtimestamp| type| source ---|---|--- 2022-03-18 21:22:55+00:00| seen| https://t.me/cibsecurity/39225...

CVE-2021-39046

creationtimestamp| type| source ---|---|--- 2022-03-18 19:22:39+00:00| seen| https://t.me/cibsecurity/39209...

CVE-2022-24595

creationtimestamp| type| source ---|---|--- 2022-03-18 15:22:27+00:00| seen| https://t.me/cibsecurity/39198...

CVE-2021-22571

creationtimestamp| type| source ---|---|--- 2022-03-18 14:06:24+00:00| seen| https://t.me/cibsecurity/39193 2025-04-21 14:02:13+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/12654...

CVE-2021-43970

creationtimestamp| type| source ---|---|--- 2022-03-18 06:56:35+00:00| seen| https://t.me/cibsecurity/38652...

CVE-2022-0237

creationtimestamp| type| source ---|---|--- 2022-03-18 01:21:57+00:00| seen| https://t.me/cibsecurity/39183...

CVE-2021-44088

creationtimestamp| type| source ---|---|--- 2022-03-18 01:21:55+00:00| seen| https://t.me/cibsecurity/39181...

Security fix for the ALT Linux 10 package openssl1.1 version 1.1.1n-alt1

1.1.1n-alt1 built March 18, 2022 Gleb Fotengauer-Malinovskiy in task 296705 March 15, 2022 Gleb Fotengauer-Malinovskiy - Updated to 1.1.1n fixes CVE-2022-0778...

[SECURITY] Fedora 34 Update: pesign-113-18.fc34

This package contains the pesign utility for signing UEFI binaries as well as other associated tools...

CVE-2022-23812

creationtimestamp| type| source ---|---|--- 2022-03-16 19:20:34+00:00| published-proof-of-concept| https://t.me/cibsecurity/39102 2022-03-18 09:40:00+00:00| seen| https://t.me/truesecator/2746 2022-03-19 14:31:30+00:00| published-proof-of-concept| https://t.me/cKure/9084 2022-03-24 21:46:24+00:00...

AZL-35158 CVE-2022-26354 affecting package qemu for versions less than 6.2.0-18

A flaw was found in the vhost-vsock device of QEMU. In case of error, an invalid element was not detached from the virtqueue before freeing its memory, leading to memory leakage and other unexpected results. Affected QEMU versions = 6.2.0...

Webmin 1.984 - Remote Code Execution (Authenticated) Exploit

Exploit Title: Webmin 1.984 - Remote Code Execution Authenticated Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.webmin.com/ Software Link: https://github.com/webmin/webmin/archive/refs/tags/1.984.zip Version: = 1.984 Tested on: Ubuntu 18 Reference:...

Webmin 1.984 Remote Code Execution

Exploit Title: Webmin 1.984 - Remote Code Execution Authenticated Date: 2022-03-06 Exploit Author: faisalfs10x https://github.com/faisalfs10x Vendor Homepage: https://www.webmin.com/ Software Link: https://github.com/webmin/webmin/archive/refs/tags/1.984.zip Version: = 1.984 Tested on: Ubuntu 18...

Asterisk SQLi Vulnerability (AST-2022-003)

Asterisk is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:digium:asterisk"; if...

Azul Zulu Java Multiple Vulnerabilities (2022-01-18)

The version of Azul Zulu installed on the remote host is prior to 6 6.45 / 7 7.51.0.12 / 8 8.59.0.12 / 11 11.53.14 / 13 13.45.12 / 15 15.37.14 / 17 17.32.14. It is, therefore, affected by multiple vulnerabilities as referenced in the 2022-01-18 advisory. - Vulnerability in the Oracle Java SE,...

CVE-2021-46382

creationtimestamp| type| source ---|---|--- 2022-03-04 18:26:58+00:00| seen| https://t.me/cibsecurity/38426...

CVE-2021-44339

creationtimestamp| type| source ---|---|--- 2022-02-28 18:23:24+00:00| seen| https://t.me/cibsecurity/38179...

Threat Roundup for February 18 to February 25

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Feb. 18 and Feb. 25. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral...