CVE-2019-6260

creationtimestamp| type| source ---|---|--- 2022-05-26 15:37:56+00:00| seen| https://t.me/informationsecuritychannel/47562 2022-05-27 17:30:04+00:00| exploited| https://t.me/truesecator/2990...

Cisco IOS XR Software Health Check Open Port (cisco-sa-iosxr-redis-ABJyE5xK)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability in the health check RPM due to a port that is open by default. An unauthenticated, remote attacker can exploit this, by connecting to the Redis instance on the open port, in order to read and write information...

Home Clean Services Management System SQL Injection Vulnerability

Home Clean Services Management System is a home cleaning service system. version 1.0 of Home Clean Services Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2022-22675

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a repo...

CVE-2022-25237

creationtimestamp| type| source ---|---|--- 2022-05-25 09:37:36+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/17 2025-01-21 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-21 2025-03-15 00:00:00+00:00| seen| The Shadowserver...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system. SQL injection vulnerability exists in Automotive Shop Management System v1.0. The vulnerability can be exploited by attackers to conduct SQL injection attacks via /asms/classes/Master.php?f=deleteproduct...

ZKEACMS Cross-Site Scripting Vulnerability

ZKEACMS v3.5.2 is a cross-site scripting vulnerability that can be exploited by attackers to inject malicious JavaScript programs to steal other users' cookies, etc...

CISA Adds 34 Known Exploited Vulnerabilities to Catalog

CISA has added 34 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

Stored XSS vulnerability in Jenkins Sonargraph Integration Plugin

Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation. This results in a stored cross-site scripting XSS vulnerability that can be exploited by users with Job/Configure permission. Sonargraph Integration Plugin 3.0.1 escapes the...

Stored XSS vulnerability in Jenkins brakeman Plugin

brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability. This vulnerability can be exploited by users able to control the Brakeman post-build step input data.\n\nbrakeman Plugin 0.13 escap...

GHSA-HVCP-JVX5-4PMP Magento 2 Community Edition SSRF vulnerability

A server-side request forgery SSRF vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code...

GHSA-JXP3-MMW7-8285 Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with...

Magento 2 Community Edition CSRF Vulnerability

A cross-site request forgery CSRF vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration...

GHSA-WMRG-W9VG-7JQX Magento 2 Community Edition CSRF Vulnerability

A cross-site request forgery CSRF vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration...

Out-of-bounds read vulnerability in multiple Adobe products (CNVD-2022-43463)

Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Multiple Adobe products have an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR...

Multiple Adobe Products Out-of-Bounds Reading Vulnerabilities (CNVD-2022-43459)

Adobe Acrobat is a set of PDF file editing and conversion tools. Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. several Adobe products have an out-of-bounds read vulnerability, which can be exploited by attackers to bypass mitigation measures such as...

Avast Premium Security Arbitrary File Writing Vulnerability

Avast Premium Security is an application from the Czech company Avast. Avast Premium Security has an arbitrary file writing vulnerability that can be exploited to cause a denial of service DoS via a specially crafted DLL file...

ARCHISITE Thecus 4800Eco Command Injection Vulnerability

ARCHISITE Thecus 4800Eco is a server from ARCHISITE Japan. ARCHISITE Thecus 4800Eco is vulnerable to command injection, which can be exploited by attackers to inject commands...

Out-of-bounds read vulnerability in multiple Adobe products (CNVD-2022-43466)

Adobe Acrobat is a set of tools for editing and converting PDF files.Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Multiple Adobe products have an out-of-bounds read vulnerability that can be exploited by attackers to bypass mitigations such as ASLR...

RTX Cross-Site Scripting Vulnerability

RTX is RTXteam's prototype translation reasoning tool. versions prior to RTX checkpoint2022-05-18 have a cross-site scripting vulnerability that can be exploited by attackers to conduct cross-site scripting XSS attacks...