CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added...

CVE-2022-20240

creationtimestamp| type| source ---|---|--- 2022-12-13 18:28:07+00:00| seen| https://t.me/cibsecurity/54436 2025-04-22 20:04:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12957...

CVE-2022-44636

creationtimestamp| type| source ---|---|--- 2022-12-13 18:27:58+00:00| seen| https://t.me/cibsecurity/54428 2025-04-22 04:03:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12794...

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose a significant risk to the federal enterprise. Note: To view newly added...

ICONICS and Mitsubishi Electric Products

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Low attack complexity Vendor: ICONICS, Mitsubishi Electric Equipment: ICONICS Product Suite Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to write arbitrary files. 3. TECHNICAL...

CVE-2022-44031

creationtimestamp| type| source ---|---|--- 2022-12-12 07:20:37+00:00| seen| https://t.me/cibsecurity/54266 2025-04-22 21:04:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12981...

Fortinet Releases Security Updates for FortiOS

Fortinet has released security updates to address a heap-based buffer overflow vulnerability CVE-2022-42475 in FortiOS. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability has been exploited in the wild. CISA encourages users and administrators t...

CVE-2022-2602

creationtimestamp| type| source ---|---|--- 2022-12-10 15:19:45+00:00| seen| https://t.me/poxek/2619 2022-12-10 20:20:18+00:00| seen| https://t.me/netrunnerz/365 2022-12-21 14:45:16+00:00| published-proof-of-concept| https://t.me/crackcodes/1908 2022-12-21 14:45:16+00:00|...

CVE-2022-29839

creationtimestamp| type| source ---|---|--- 2022-12-09 20:18:48+00:00| seen| https://t.me/cibsecurity/54237 2025-04-22 20:05:05+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12963...

CVE-2022-2752

creationtimestamp| type| source ---|---|--- 2022-12-09 16:13:27+00:00| seen| https://t.me/cibsecurity/54213 2025-04-22 20:05:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12964...

CVE-2022-4123

creationtimestamp| type| source ---|---|--- 2022-12-08 18:17:57+00:00| seen| https://t.me/cibsecurity/54175 2025-04-22 21:04:23+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12982...

CVE-2022-39903

creationtimestamp| type| source ---|---|--- 2022-12-08 18:17:36+00:00| seen| https://t.me/cibsecurity/54162 2025-04-22 19:03:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12944...

CVE-2022-45910

creationtimestamp| type| source ---|---|--- 2022-12-07 12:22:21+00:00| seen| https://t.me/cibsecurity/54115 2025-04-22 22:04:03+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12995...

CVE-2022-43515

creationtimestamp| type| source ---|---|--- 2022-12-06 08:43:51+00:00| seen| https://t.me/cibsecurity/54017 2025-04-22 18:03:53+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12934...

CVE-2022-4293

creationtimestamp| type| source ---|---|--- 2022-12-05 22:40:07+00:00| seen| https://t.me/cibsecurity/54020...

Mitsubishi Electric FA Engineering Software (Update C)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: GX Works3, MX OPC UA Module Configurator-R Vulnerabilities: Cleartext Storage of Sensitive Information, Use of Hard-coded Password, Insufficiently Protected Credentials,...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...

CVE-2022-44955

creationtimestamp| type| source ---|---|--- 2022-12-02 22:37:25+00:00| seen| https://t.me/cibsecurity/53849...

CVE-2022-2969 ICSA-22-307-03 Delta Industrial Automation DIALink Path traversal

Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...

Lansweeper lansweeper KnowledgebasePageActions.aspx ImportArticles directory traversal vulnerability

Talos Vulnerability Report TALOS-2022-1530 Lansweeper lansweeper KnowledgebasePageActions.aspx ImportArticles directory traversal vulnerability December 1, 2022 CVE Number CVE-2022-29511 SUMMARY A directory traversal vulnerability exists in the KnowledgebasePageActions.aspx ImportArticles...