CVE-2022-31061

creationtimestamp| type| source ---|---|--- 2022-06-28 22:42:25+00:00| seen| https://t.me/cibsecurity/45320 2022-08-07 18:20:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2877 2022-08-07 22:25:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2878 2022-08-10...

PT-2022-31845

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been...

PT-2022-32337

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.29 through 4.9.317 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.29 through 5.4.197 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a potential security problem in the Linux Kernel, specifically in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been proven...

PT-2022-31603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been...

PT-2022-31342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.29 through 5.17.13 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-30983

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. This function is used in the FCoE Fibre Channel over Ethernet protocol implementation. The actual impact...

PT-2022-32268

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. This function is used in the Linux Kernel's FCoE Fibre Channel over Ethernet implementation. The actual...

an-electrorecycling.de Cross Site Scripting vulnerability OBB-2688304

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-14230 · WordPress · Import Export All Wordpress Images

Name of the Vulnerable Software and Affected Versions: Import Export All WordPress Images, Users & Post Types WordPress plugin versions prior to 6.5.3 Description: The issue concerns the lack of full validation for files to be imported via URL, which could allow high-privilege users, such as...

Malicious code in wdl-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c409a88473b42caf34d71b72422cf60aab91588e465d40f54f2523b1136f4554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgn-sys/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708464365948547ec14829dc0bcd1dfc3a1cd7a36f5ffa928bb530a65bfcf5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in ergfregrdrdfg (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware e1da1eac8d31e4a7c453525627babe11ebfb8aaef605e8602e64aea049cacc12 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in plugin-proposal-export-default-from (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09e67c1f58311edfee436c15f6e587d6bfc574cf3ea5c5a69afaea70790652b3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2022-37041

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ crash occurred, involving the functions frame get vlmetalayers, frame to schunk, and blosc2 schunk from buffer. No information ...

PT-2022-37043

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-buffer-overflow READ 1 crash has been reported. The crash involves the functions fr size from str, fr value box from substr, and fr value box from...

PT-2025-26000

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A memory leak issue has been identified in the Linux kernel, specifically in the apparmor module. The issue occurs when the copy from user function fails, causing a memory leak due to th...

CVE-2022-31589: Incorrect Authorization

Due to improper authorization check, business users who are using Israeli File from SHAAM program /ATL/VQ23 transaction, are granted more than needed authorization to perform certain transaction, which may lead to users getting access to data that would otherwise be restricted...

CVE-2022-31055: Improper Access Control

kCTF is a Kubernetes-based infrastructure for capture the flag CTF competitions. Prior to version 1.6.0, the kctf cluster set-src-ip-ranges was broken and allowed traffic from any IP. The problem has been patched in v1.6.0. As a workaround, those who want to test challenges privately can mark the...