13 matches found
CVE-2025-22613
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the informacaoadicional.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...
CVE-2022-22613
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel...
CVE-2025-22613
creationtimestamp| type| source ---|---|--- 2025-01-13 21:15:44+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfnntbwcga2t 2025-01-13 22:56:03+00:00| seen| https://t.me/cvedetector/15183 2025-01-14 01:07:28+00:00| published-proof-of-concept|...
CVE-2025-22613 WeGIA Cross-Site Scripting (XSS) Stored endpoint 'informacao_adicional.php' parameter 'descricao'
WeGIA is an open source web manager with a focus on the Portuguese language and charitable institutions. A Stored Cross-Site Scripting XSS vulnerability was identified in the informacaoadicional.php endpoint of the WeGIA application. This vulnerability allows attackers to inject malicious scripts...
Siemens InsydeH2O Out-of-bounds Write (CVE-2023-22613)
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption. Insyde BIOS is typically...
CVE-2023-22613
creationtimestamp| type| source ---|---|--- 2023-04-12 02:37:43+00:00| seen| https://t.me/cibsecurity/61959 2025-02-14 10:04:00+00:00| seen| Telegram/fUAgowmz8itCRqsJe5p2DhWN5lHpaw7opcX2anRtqvjdWkQ...
CVE-2023-22613
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption...
CVE-2023-22613
An issue was discovered in IhisiSmm in Insyde InsydeH2O with kernel 5.0 through 5.5. It is possible to write to an attacker-controlled address. An attacker could invoke an SMI handler with a malformed pointer in RCX that overlaps SMRAM, resulting in SMM memory corruption...
CVE-2023-22613
CVE-2023-22613 concerns InsydeH2O’s IhisiSmm on kernel 5.0–5.5, where an attacker can cause SMM memory corruption by writing to an attacker-controlled address. The root cause is a malformed pointer in RCX that overlaps SMRAM when invoking an SMI handler, enabling a potential out-of-bounds write. ...
CVE-2022-22613
CVE-2022-22613 describes an out-of-bounds write that, if triggered, could allow an attacker to execute arbitrary code with kernel privileges. Affected platforms include tvOS 15.4, iOS 15.4, iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, and macOS Monterey 12.3....
CVE-2022-22613
An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, macOS Big Sur 11.6.5, Security Update 2022-003 Catalina, watchOS 8.5, macOS Monterey 12.3. An application may be able to execute arbitrary code with kernel...
Apple Mac OS X Security Update (HT213185)
Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
About the security content of watchOS 8.5
About the security content of watchOS 8.5 This document describes the security content of watchOS 8.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...