Vim Buffer Overflow Vulnerability (CNVD-2022-05070)

Vim is a UNIX-based editor. Vim is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute code...

Sonatype Nexus Repository Manager 3.x < 3.21.2 RCE

The Sonatype Nexus Repository Manager server application running on the remote host is version 3.x prior to 3.21.2. It is, therefore, affected by a remote code execution vulnerability, which allows for an attacker with any type of account on NXRM to execute arbitrary code by crafting a malicious...

Vim Buffer Overflow Vulnerability (CNVD-2022-05071)

Vim is a UNIX-based editor. Vim is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute code...

Sourcecodester Online Event Booking and Reservation System SQL Injection Vulnerability

Sourcecodester Online Event Booking and Reservation System is developed using PHP, MySQL database, HTML, CSS, Javascript, Bootstrap and AdminLTE. The system can be accessed by three types of users, namely system administrators, students, and instructors. sourcecodester Online Event Booking and...

CVE-2021-42237

creationtimestamp| type| source ---|---|--- 2021-11-05 13:25:41+00:00| seen| https://t.me/cibsecurity/31868 2021-11-08 17:26:22+00:00| exploited| https://t.me/BleepingComputer/10895 2021-11-09 17:50:00+00:00| exploited| https://t.me/truesecator/2299 2021-11-15 19:46:09+00:00| seen|...

U.S. Federal Agencies Ordered to Patch Hundreds of Actively Exploited Flaws

The U.S. Cybersecurity and Infrastructure Security Agency CISA has published a catalog of vulnerabilities, including from Apple, Cisco, Microsoft, and Google, that have known exploits and are being actively exploited by malicious cyber actors, in addition to requiring federal agencies to prioriti...

Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor (PRM) Model 3120 Encryption Error Vulnerability

The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is a portable cardiac rhythm management Crm programming system from Boston Scientific, Inc. The Boston Scientific ZOOM LATITUDE Programmer/Recorder/Monitor PRM Model 3120 is vulnerable to an encryption error that could...

Huawei Emui and Magic UI Remote DoS Vulnerability (CNVD-2021-84859)

Huawei Emui is a mobile operating system developed on Android. magic Ui is a mobile operating system developed on Android. Huawei Emui and Magic UI have a security vulnerability that could be exploited by attackers to cause the application to exit unexpectedly...

CISA sets two week window for patching serious vulnerabilities

The Cybersecurity and Infrastructure Security Agency CISA has issued binding directive 22-01 titled Reducing the Significant Risk of Known Exploited Vulnerabilities. This directive applies to all software and hardware found on federal information systems managed on agency premises or hosted by...

CVE-2021-26294

creationtimestamp| type| source ---|---|--- 2021-11-04 14:51:10+00:00| published-proof-of-concept| Telegram/E904-7tNY5SsCugfjArkkhd1hZWJs7UA85Xzgg7k4dhsQ 2022-01-11 11:05:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5174 2023-11-30 07:58:47+00:00| seen|...

Sourcecodester Simple Subscription Website SQL Injection Vulnerability

Simple Subscription Website is a web-based application. SourceCodester Simple Subscription Website 1.0 is vulnerable to SQL injection, which can be exploited by attackers to perform SQL injection via login...

ZOHO ManageEngine Log360 Access Control Error Vulnerability

ZOHO ManageEngine Log360 is an integrated log management and Active Directory auditing and alerting solution from ZOHO USA. The solution helps you mitigate security threats, detect persistent attack attempts, detect suspicious user activity, and comply with regulatory requirements.ZOHO ManageEngi...

SourceCodester Simple Subscription Website Cross-Site Scripting Vulnerability

SourceCodester Simple Subscription Website is a web-based application. sourceCodester Simple Subscription Website 1.0 is vulnerable to cross-site scripting, which can be exploited by attackers to execute cross-site scripting via the plan application's id parameter to execute cross-site scripting...

CVE-2021-38499

Mozilla developers reported memory safety bugs present in Firefox 92. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox 93...

CISA Issues BOD 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities

CISA has issued Binding Operational Directive BOD 22-01, Reducing the Significant Risk of Known Exploited Vulnerabilities, to establish specific timeframes for federal civilian agencies to remediate vulnerabilities that are being actively exploited by known adversaries. To support this Directive,...

Accellion FTA Server-Side Request Forgery (SSRF) Vulnerability

Accellion FTA contains a server-side request forgery SSRF vulnerability exploited via a crafted POST request to wmProgressstat.html...

Alert! Hackers Exploiting GitLab Unauthenticated RCE Flaw in the Wild

A now-patched critical remote code execution RCE vulnerability in GitLab's web interface has been detected as actively exploited in the wild, cybersecurity researchers warn, rendering a large number of internet-facing GitLab instances susceptible to attacks. Tracked as CVE-2021-22205, the issue...

Google Android System Information Disclosure Vulnerability (CNVD-2021-101430)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA for short.The System component of Google Android versions 9, 10, 11, and 12 is vulnerable to information disclosure, which could be exploited by attackers to cause local information...

Online Reviewer System Remote Code Execution Vulnerability

Online Reviewer System is an application. Online Reviewer System version 1.0 contains a remote code execution vulnerability that could be exploited by attackers to bypass image upload filters and upload maliciously crafted PHP files...

Google Android Kernel Component Elevation of Privilege Vulnerability (CNVD-2021-101428)

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Alliance OHA. an elevation of privilege vulnerability exists in the Google Android Kernel component Kernel, which could be exploited by an attacker to cause a local elevation of privilege that...