CVE-2022-31158

creationtimestamp| type| source ---|---|--- 2022-07-15 22:20:30+00:00| seen| https://t.me/cibsecurity/46367 2025-04-23 18:05:26+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/13091...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im speaking as part of a Geneva Centre for Security Policy course on Cyber Security in the Context of International Security, online, on September 22, 2022. Im speaking at IT-Security INSIDE 2022 in Zurich, Switzerland, on Septembe...

CVE-2022-34762

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 an...

Path traversal

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 an...

CVE-2022-34762

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause unauthorized firmware image loading when unsigned images are added to the firmware image path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 an...

CVE-2022-34762

The CVE-2022-34762 entry describes a path traversal (CWE-22) affecting Schneider Electric devices: the X80 advanced RTU Communication Module (BMENOR2200H) (V2.01 and later) and the OPC UA Modicon Communication Module (BMENUA0100) (V1.10 and prior). The vulnerability could allow loading of unautho...

CVE-2021-44222

A vulnerability has been identified in SIMATIC eaSie Core Package All versions V22.00. The underlying MQTT service of affected systems does not perform authentication in the default configuration. This could allow an unauthenticated remote attacker to send arbitrary messages to the service and...

Design/Logic Flaw

A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application contains a stack corruption vulnerability while parsing PCB files. An attacker could leverage this vulnerability to leak information in the context of the current process. FG-VD-22-057,...

CVE-2022-34289

CVE-2022-34289 affects Siemens PADS Standard/Plus Viewer (All versions). The vulnerability is an out-of-bounds write past the end of an allocated structure when parsing PCB files, potentially allowing code execution in the current process. No known public exploits target these vulnerabilities, an...

CVE-2022-34287

Siemens PADS Standard/Plus Viewer (All versions) is affected by a stack corruption vulnerability while parsing PCB files. The issue, associated with FG-VD-22-052/22-056, can cause information disclosure in the context of the current process. Affected product: PADS Standard/Plus Viewer. Root cause...

CVE-2022-34286

A vulnerability has been identified in PADS Standard/Plus Viewer All versions. The affected application contains an out of bounds write past the end of an allocated structure while parsing specially crafted PCB files. This could allow an attacker to execute code in the context of the current...

CVE-2022-34285

The CVE-2022-34285 entry concerns Siemens PADS Standard/Plus Viewer (All versions). The Connected documents confirm an out-of-bounds read vulnerability that occurs when parsing PCB files, allowing an attacker to leak information within the context of the current process. Affected product: PADS St...

CVE-2022-34284

CVE-2022-34284 affects Siemens PADS Standard/Plus Viewer (All versions). The vulnerability is an out-of-bounds write past the end of an allocated structure while parsing specially crafted PCB files, potentially allowing code execution in the current process. The issue is part of a broader set of ...

CVE-2022-34280

CVE-2022-34280 affects Siemens PADS Standard/Plus Viewer (All versions). The vulnerability is an out-of-bounds read past the end of an allocated buffer when parsing PCB files, enabling code execution in the current process. This is part of a broader family of PCB-parsing vulnerabilities reported ...

CVE-2022-34279

Siemens PADS Standard/Plus Viewer (All versions) is vulnerable to an out-of-bounds read when parsing PCB files, potentially allowing code execution in the current process. This CVE (CVE-2022-34279) is discussed across multiple sources (e.g., RH, nvd, CNVD, ics), with MITRE details consolidated in...

Siemens Datalogics File Parsing Vulnerability

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Siemens Equipment: Teamcenter Visualization and JT2Go Vulnerability: Heap-based buffer Overflow 2. UPDATE This updated advisory is a follow-up to the original advisory titled ICSA-22-195-07 Siemens Datalogics file Parsing...

CISA Adds One Known Exploited Vulnerability to Catalog 

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

CVE-2022-30757

Improper authorization in isemtelephony prior to SMR Jul-2022 Release 1 allows attacker to obtain CID without ACCESSFINELOCATION permission...

internshipsystem 路径遍历漏洞

internshipsystem is a student internship system for schools by wlwl individual developers. A security vulnerability exists in internshipsystem version 2018-05-22 and prior versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...

nursequest 路径遍历漏洞

nursequest is a management system for nurses' tasks by Romain Vincent, an individual developer in France. A security vulnerability exists in nursequest version 2018-02-22 and earlier versions, which stems from an incorrect call to Flask's sendfile function resulting in absolute path traversal...