CVE-2022-36429

creationtimestamp| type| source ---|---|--- 2023-03-21 21:35:03+00:00| seen| https://t.me/cibsecurity/60403 2023-03-22 12:30:06+00:00| seen| https://t.me/truesecator/4198 2023-03-23 11:05:11+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7977...

CVE-2023-27981

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data ServerIGSSdataServer.exeV16.0.0.23040 and prior, IGSS...

Design/Logic Flaw

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data ServerIGSSdataServer.exeV16.0.0.23040 and prior, IGSS...

Delta DOPSoft All Versions Out-of-bounds Read Vulnerability

Delta DOPSoft is installed on the remote host. It is, therefore, affected by vulnerabilities as referenced in the CISA ICSA-22-244-01 advisory. - Two out-of-bounds read conditions may occur due to the affected product not properly sanitizing input while processing specific project files, which ma...

CVE-2023-27981

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data ServerIGSSdataServer.exeV16.0.0.23040 and prior, IGSS...

CVE-2023-27981

CVE-2023-27981 targets Schneider Electric IGSS components: IGSS Data Server (IGSSdataServer.exe) v16.0.0.23040 and prior, IGSS Dashboard (DashBoard.exe) v16.0.0.23040 and prior, and Custom Reports (RMS16.dll) v16.0.0.23040 and prior. It is a CWE-22 path traversal vulnerability in the Custom Repor...

CVE-2023-24282

creationtimestamp| type| source ---|---|--- 2023-03-09 00:23:23+00:00| seen| https://t.me/cibsecurity/59708 2025-03-06 02:17:22+00:00| seen| Telegram/e-Thzq9EgM16PWg62aLT8Zhm2wySFafsQRpx3WPKObGkJu...

Solaris 10 (sparc) : 153091-01

SunOS 5.10: a2ps patch. Date this patch was last updated by Sun : Jul/18/22 %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid172378; scriptversion"1.0";...

Solaris 10 (x86) : 151913-21

SunOS 5.10x86: OpenSSL 1.0.2 patch. Date this patch was last updated by Sun : Oct/17/22 %NASLMINLEVEL 80900 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid172386; scriptversion"1.0...

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

CVE-2022-41328

CVE-2022-41328 (Fortinet FortiOS path traversal) : A path traversal vulnerability in Fortinet FortiOS 7.2.0–7.2.3, 7.0.0–7.0.9, and pre-6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands (CWE-22). The issue is documented across mult...

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

CVE-2022-41328

A improper limitation of a pathname to a restricted directory vulnerability ‘path traversal’ CWE-22 in Fortinet FortiOS version 7.2.0 through 7.2.3, 7.0.0 through 7.0.9 and before 6.4.11 allows a privileged attacker to read and write files on the underlying Linux system via crafted CLI commands...

Protect

A improper limitation of a pathname to a restricted directory vulnerability 'path traversal' CWE-22 in FortiOS may allow a privileged attacker to read and write arbitrary files via crafted CLI commands...

CVE-2023-23002

creationtimestamp| type| source ---|---|--- 2023-03-01 22:34:00+00:00| seen| https://t.me/cibsecurity/59279...

CVE-2023-22999

creationtimestamp| type| source ---|---|--- 2023-03-01 00:29:22+00:00| seen| https://t.me/cibsecurity/59183 2025-03-20 20:19:46+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8287...

CVE-2023-27371

creationtimestamp| type| source ---|---|--- 2023-02-28 22:33:01+00:00| seen| https://t.me/cibsecurity/59167...

New EX-22 Tool Empowers Hackers with Stealthy Ransomware Attacks on Enterprises

A new post-exploitation framework called EXFILTRATOR-22 aka EX-22 has emerged in the wild with the goal of deploying ransomware within enterprise networks while flying under the radar. "It comes with a wide range of capabilities, making post-exploitation a cakewalk for anyone purchasing the tool,...

New Post-Exploitation Exfiltrator-22 Ransomware Framework Designed to Evade Detection

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A new post-exploitation framework called EXFILTRATOR-22 a.k.a. EX-22 appears to have been created by a group operating in North, East, or South-East Asia. The group is skilled in defense evasion and...