Helm Path Traversal

All versions of Helm between Helm =2.0.0 and 2.12.2 contains a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in The commands helm fetch --untar and helm lint some.tgz that can result when chart archive files are unpacked a file may be unpacked...

CVE-2022-29218

creationtimestamp| type| source ---|---|--- 2022-05-13 07:26:25+00:00| seen| https://t.me/cibsecurity/42573 2025-04-22 18:03:29+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12917...

CVE-2021-26366

creationtimestamp| type| source ---|---|--- 2022-05-12 22:36:29+00:00| seen| https://t.me/cibsecurity/42541...

CVE-2022-29975

An Authenticated Reflected Cross-site scripting at CC Parameter was discovered in MDaemon before 22.0.0...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

JVN#60801132: GENEREX RCCMD vulnerable to directory traversal

RCCMD provided by GENEREX SYSTEMS Computervertriebsgesellschaft mbH contains a directory traversal vulnerability CWE-22. Impact Arbitrary files on the server may be viewed or altered by an attacker. Solution Update the software Update the software to the latest version according to the informatio...

Siemens Industrial Devices using libcurl

1. EXECUTIVE SUMMARY CVSS v3 8.1 ATTENTION: Exploitable remotely Vendor: Siemens Equipment: Industrial devices using libcurl Vulnerabilities: Use After Free 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-22-132-13 Siemens Industrial Devices using...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

Adobe ColdFusion Cross-site Scripting (APSB22-22: CVE-2022-28818)

A cross-site scripting vulnerability exists in Adobe ColdFusion. Successful exploitation of this vulnerability would allow remote attackers to inject arbitrary web script into the affected system...

QNAP QTS Path Traversal Vulnerability (QSA-22-13)

QNAP QTS is prone to a path traversal vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts"; ifdescription...

CVE-2022-28273

creationtimestamp| type| source ---|---|--- 2022-05-06 22:23:18+00:00| seen| https://t.me/cibsecurity/42151...

CVE-2022-28278

creationtimestamp| type| source ---|---|--- 2022-05-06 22:23:06+00:00| seen| https://t.me/cibsecurity/42143...

CVE-2021-26253

creationtimestamp| type| source ---|---|--- 2022-05-06 20:22:54+00:00| seen| https://t.me/cibsecurity/42118...

CVE-2022-1584

creationtimestamp| type| source ---|---|--- 2022-05-04 22:35:14+00:00| seen| https://t.me/cibsecurity/41955...

CVE-2022-28082

creationtimestamp| type| source ---|---|--- 2022-05-04 18:35:22+00:00| seen| https://t.me/cibsecurity/41925...

CISA Adds Five Known Exploited Vulnerabilities to Catalog

CISA has added five new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly add...

FirmWire -b Full-System Baseband Firmware Emulation Platform For Fuzzing, Debugging, And Root-Cause Analysis Of Smartphone Baseband Firmwares

FirmWire is a full-system baseband firmware analysis platform that supports Samsung and MediaTek. It enables fuzzing, root-cause analysis, and debugging of baseband firmware images. See theFirmWire documentation to get started! Experiments & Missing Parts? Upon a vendor's request, the current...

Hardcoded credentials

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

CVE-2022-29856

A hardcoded cryptographic key in Automation360 22 allows an attacker to decrypt exported RPA packages...

CVE-2022-29856

Automation360 22 contains a hardcoded cryptographic key that enables decryption of exported RPA packages, exposing confidentiality risk for users. The vulnerability stems from a fixed key used in packaging/export workflows, allowing an attacker to decrypt previously exported artifacts. Documented...