Hirschmann BAT-C2 Command Injection Vulnerability

Hirschmann BAT-C2 is a wireless access point from Hirschmann Germany. A command injection vulnerability exists in versions prior to belden Hirschmann BAT-C2 09.13.01.00R04, which stems from a failure to adequately handle the dir parameter of the FsCreateDir Ajax function in the web server, and ca...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view the newly adde...

MOXA ARM-Based Computers Elevation of Privilege Vulnerability

MOXA ARM-Based Computers is a series of industrial computers from MOXA in China. An elevation of privilege vulnerability exists in Moxa ARM-Based Computers, which can be exploited by an attacker to gain root privileges...

Unspecified Vulnerability in AVEVA Edge

AVEVA Edge is a highly scalable and flexible HMI/SCADA software from AVEVA Software UK. A security vulnerability exists in AVEVA Edge 2020 R2 and prior versions that can be exploited by an attacker to potentially compromise the confidentiality, availability or integrity of the system. Details of...

Google Chrome < 107.0.5304.121 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 107.0.5304.121. It is, therefore, affected by a vulnerability as referenced in the 202211stable-channel-update-for-desktop24 advisory. - Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a...

Retired Software Exploited To Target Power Grids, Microsoft

By Habiba Rashid Boa was discontinued in 2005 but remained popular and is now becoming a crisis because of the complex nature of how it was built into the IoT device supply chain. This is a post from HackRead.com Read the original post: Retired Software Exploited To Target Power Grids, Microsoft...

Karmasis Infraskope Agent Authentication Error Vulnerability

Karmasis Infraskope Agent is an application logger from Karmasis. An authentication error vulnerability exists in Karmasis Infraskope Agent versions prior to 7.10.00 that stems from improper authentication and can be exploited by an attacker to obtain sensitive information...

Unspecified Vulnerability in WordPress Appointment Hour Booking plugin

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

XWiki Platform 资源管理错误漏洞

XWik Platform is a suite of Wiki platforms for creating Web collaboration applications from the French company XWiki. A security error vulnerability exists in XWiki Platform. An attacker exploited the vulnerability to cause a degradation in database performance...

Simmeth System Supplier Manager SQL Injection Vulnerability

Simmeth System Supplier Manager is a supply chain software from Simmeth System GmbH, Germany.A SQL injection vulnerability exists in versions prior to Simmeth System GmbH Supplier Manager 5.6. The vulnerability stems from the application's lack of validation of externally entered SQL statements,...

Simmeth System Supplier Manager Arbitrary File Download Vulnerability

Simmeth System Supplier Manager is a supply chain software from Simmeth System, a German company, and an arbitrary file download vulnerability exists in versions prior to Simmeth System Supplier Manager 5.6, which can be exploited by attackers to download arbitrary files from a web server by...

CVE-2022-41840

creationtimestamp| type| source ---|---|--- 2022-11-18 22:29:34+00:00| seen| https://t.me/cibsecurity/53162 2025-05-10 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-05-10 2025-05-18 00:00:00+00:00| exploited| The Shadowserver...

HIGH: Vault or pool funds can be stolen by any user who holds LP tokens.

Lines of code Vulnerability details Description The distributeETHRewardsToUserForToken is implemented in SyndicateRewardsProcessor and used in derived contracts: GiantMevAndFeePool and StakingFundsVault. It sends out rewards to the given user according to the current accumulatedETHPerLPShare and...

Intel Advanced Link Analyzer Elevation of Privilege Vulnerability

Intel Advanced Link Analyzer is an advanced link analyzer from Intel Corporation USA. Intel Advanced Link Analyzer Pro versions prior to 22.2 and Standard edition prior to 22.1.1 are vulnerable to elevation of privilege, which can be exploited by attackers to perform local elevation of privilege...

Huawei EMUI Denial of Service Vulnerability

Huawei EMUI is an Android-based mobile operating system developed by the Chinese company Huawei Huawei. A denial of service vulnerability exists in Huawei EMUI 12.0.0, which stems from a lack of parameter type validation in the DRM module, and can be exploited by an attacker to affect the...

CISA Releases SSVC Methodology to Prioritize Vulnerabilities

Today CISA published its guide on Stakeholder-Specific Vulnerability Categorization SSVC, a vulnerability management methodology that assesses vulnerabilities and prioritizes remediation efforts based on exploitation status, impacts to safety, and prevalence of the affected product in a singular...

Install Latest Windows Update ASAP! Patches Issued for 6 Actively Exploited Zero-Days

Microsoft's latest round of monthly security updates has been released with fixes for 68 vulnerabilities spanning its software portfolio, including patches for six actively exploited zero-days. 12 of the issues are rated Critical, two are rated High, and 55 are rated Important in severity. This...

Siemens Mendix SAML Module Certification Bypass Vulnerability

Siemens Mendix SAML Module is an application module from Siemens, Germany. It is used to grant access to Mendix applications based on the end-user's identity in your identity provider. An authentication bypass vulnerability exists in Siemens Mendix SAML Module, which could be exploited by an...

Siemens POWER METER SICAM Q100 Input Validation Error Vulnerability (CNVD-2022-75538)

The POWER METER SICAM Q100 is a multifunctional device used to detect, report and analyze measured values and events. Siemens POWER METER SICAM Q100 is vulnerable to an input validation error, which could be exploited by an attacker to crash the device followed by an automatic reboot or execute...

Siemens POWER METER SICAM Q100 Input Validation Error Vulnerability (CNVD-2022-75539)

The POWER METER SICAM Q100 is a multifunctional device used to detect, report and analyze measured values and events. Siemens POWER METER SICAM Q100 is vulnerable to an input validation error, which could be exploited by an attacker to crash the device followed by an automatic reboot or execute...