9652 matches found
novel-events.co.uk Cross Site Scripting vulnerability OBB-2866777
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-25647
creationtimestamp| type| source ---|---|--- 2022-08-25 11:55:31+00:00| seen| https://t.me/truesecator/3334 2023-09-22 12:07:23+00:00| seen| https://t.me/KomunitiSiber/831 2023-09-22 13:04:58+00:00| seen| Telegram/2IZN8BPcELSiNhB3yoxCrhOcfpa3u9fucjYYoYzOd3-XNg 2023-09-22 14:38:21+00:00| seen|...
Ukraine war spotlights agriculture sector's vulnerability to cyber attack
By Joe Marshall. The war in Ukraine has caused massive problems for global food supplies, underscoring the high impact of disruptive events to agriculture entities and related organizations. The challenges to the Ukrainian agriculture sector imposed by the war--and global ripple effects--have bee...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2022-2257)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mobile Events Manager < 1.4.8 - Admin+ CSV Injection
The plugin does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability. PoC Export events with malicious CSV: 1. Create and save a new Enquiry source and add the following in the name...
Mobile Events Manager < 1.4.8 - Admin+ CSV Injection
The plugin does not properly escape the Enquiry source field when exporting events, or the Paid for field when exporting transactions as CSV, leading to a CSV injection vulnerability. Export events with malicious CSV: 1. Create and save a new Enquiry source and add the following in the name field...
WordPress Mobile Events Manager Plugin <= 1.4.7 - Authenticated CSV Injection vulnerability
Authenticated CSV Injection vulnerability discovered by Varun thorat in Mobile Events Manager versions = 1.4.7 Solution Update the WordPress Mobile Events Manager plugin to the latest available version at least 1.4.8...
Return values not being checked
Lines of code Vulnerability details Return values not being checked Impact Return values not being checked may lead into unexpected behaviors with functions. Not events/Error are being emitted if that fails, so functions would be called even of not being working as expect as for example...
CVE-2022-2846
The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fields. This could allow unauthenticated attackers to create arbitrary events and...
CVE-2022-2846
The Calendar Event Multi View WordPress plugin before 1.4.07 does not have any authorisation and CSRF checks in place when creating an event, and is also lacking sanitisation as well as escaping in some of the event fields. This could allow unauthenticated attackers to create arbitrary events and...
Apple macOS Remote Events Memory Corruption Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Apple macOS. Authentication is not required to exploit this vulnerability. The specific flaw exists within Apple Remote Events. The issue results from the lack of proper validation of user-supplied...
CVE-2022-35815
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...
CVE-2022-35775
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...
CVE-2022-35810
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...
CVE-2022-35786
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...
CVE-2022-35799
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...
CVE-2022-35809
creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...
WEM 2203: Citrix WEM Service Citrix.Wem.Agent.Service.exe crash
After installing WEM Agent version 2203, the following system events are logged in the VDA: Event ID 1026: .NET Runtime Application: Citrix.Wem.Agent.Service.exe Framework Version: v4.0.30319 Description: The process was terminated due to an unhandled exception. and Event ID 1000: Faulting...
What We're Looking Forward to at Black Hat, DEF CON, and BSidesLV 2022
The week of Black Hat, DEF CON, and BSides is highly anticipated annual tradition for the cybersecurity community, a weeklong chance for security pros from all corners of the industry to meet in Las Vegas to talk shop and share what they've spent the last 12 months working on. But like many belov...
CVE-2022-31120
Summary: CVE-2022-31120 affects Nextcloud Server. The issue is that federated share events were not properly logged in the audit log, enabling potential brute-force attempts to go unnoticed and exacerbating the impact of CVE-2022-31118. What’s affected: Nextcloud Server (versions before upgrades ...