5860 matches found
CVE-2022-31158
creationtimestamp| type| source ---|---|--- 2022-07-15 22:20:30+00:00| seen| https://t.me/cibsecurity/46367 2025-04-23 18:05:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13091...
CVE-2022-34244
creationtimestamp| type| source ---|---|--- 2022-07-15 20:35:29+00:00| seen| https://t.me/cibsecurity/46343...
CVE-2022-35283
creationtimestamp| type| source ---|---|--- 2022-07-14 20:32:53+00:00| seen| https://t.me/cibsecurity/46264...
CVE-2022-22473
creationtimestamp| type| source ---|---|--- 2022-07-14 20:32:46+00:00| seen| https://t.me/cibsecurity/46260...
Assets can be transferred to zero address on operational mistake
Lines of code Vulnerability details It is possible to withdraw all the assets after Buyout before settleVault was run and newVault created as asset transfer functions do not check the address. Proof of Concept /// @notice Migrates an ERC-20 token to the new vault after a successful migration ///...
CVE-2022-34758
CVE-2022-34758 affects Schneider Electric Easergy P5 (firmware prior to v01.401.102). It is an Improper Input Validation vulnerability (CWE-20) that could disable the device watchdog if an attacker has privileged credentials. The published advisories confirm vulnerable P5 firmware and provide a p...
CVE-2022-34758
A CWE-20: Improper Input Validation vulnerability exists that could cause the device watchdog function to be disabled if the attacker had access to privileged user credentials. Affected Products: Easergy P5 V01.401.102 and prior...
iconsiglidilisa.it Cross Site Scripting vulnerability OBB-2768857
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
flask-file-server path traversal vulnerability
flask-file-server is a file server with a front-end for browsing, uploading, and streaming files from Wildog Personal Developer. flask-file-server 2020-02-20 and earlier versions are vulnerable to a path traversal vulnerability that stems from a failure of Flask's sendfile function to properly...
MSM 路径遍历漏洞
MSM is a sample management tool from the personal developer Holger Graef in France. enables researchers to track their samples from any PC in the lab. A security vulnerability exists in MSM version 2021-04-20 and earlier, which stems from an incorrect call to Flask's sendfile function that result...
JVN#23766146: Passage Drive vulnerable to insufficient data verification
Passage Drive provided by Yokogawa Rental & Lease Corporation contains an insufficient data verification vulnerability for interprocess communication CWE-20. Impact By running a malicious program, an arbitrary OS command may be executed with LocalSystem privilege of the Windows system where the...
CVE-2022-26348
creationtimestamp| type| source ---|---|--- 2022-07-06 20:14:30+00:00| seen| https://t.me/cibsecurity/45681...
CVE-2022-32386
creationtimestamp| type| source ---|---|--- 2022-07-06 16:20:47+00:00| seen| https://t.me/cibsecurity/45641 2026-07-06 03:30:43+00:00| seen| https://bsky.app/profile/kriptabiz.bsky.social/post/3mpx5n4qhro2j...
CVE-2022-34797
creationtimestamp| type| source ---|---|--- 2022-06-30 22:44:02+00:00| seen| https://t.me/cibsecurity/45454 2023-12-20 13:48:44+00:00| seen| https://t.me/ctinow/156967...
Robustel R1510 web_server /action/remove/ API data removal vulnerability
Summary A data removal vulnerability exists in the webserver /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead to arbitrary file deletion. An attacker can send a sequence of requests to trigger this vulnerability. Tested Versions Robustel R151...
This Week in Spring - June 28th, 2022
Hi, Spring fans! Welcome to another installment of This Week in Spring! Im writing this from the Big Apple, New York City! Im here for the SpringOne Tour 2022 NYC event. This is my first time back in New York City since before the pandemic and it has been so much fun. Ive been catching up with...
CVE-2022-2088
creationtimestamp| type| source ---|---|--- 2022-06-27 20:34:54+00:00| seen| https://t.me/cibsecurity/45199...
CVE-2022-34495
creationtimestamp| type| source ---|---|--- 2022-06-26 20:33:40+00:00| seen| https://t.me/cibsecurity/45159...