CVE-2022-16126

Technical details for CVE-2022-16126 are not publicly available in the provided documents. No affected products, impact, or remediation are specified. Monitor for updates from official sources.

Grafana -- Privilege escalation

Grafana Labs reports: Grafana admins can invite other members to the organization they are an admin for. When admins add members to the organization, non existing users get an email invite, existing members are added directly to the organization. When an invite link is sent, it allows users to si...

Brazilian Police Arrest Suspected Member of Lapsus$ Hacking Group

The Federal Police of Brazil on Wednesday announced it had arrested an individual for purported links to the notorious LAPSUS$ extortionist gang. The arrest was made as part of a new law enforcement effort, dubbed Operation Dark Cloud, that was launched in August 2022, the agency noted. Not much ...

CVE-2021-41624

CVE-2021-41624 is associated with a memory-leak DoS in F5 BIG-IP. The CNNVD entry describes F5 BIG-IP as an application delivery platform and notes a memory leak vulnerability that triggers denial of service. The provided documents do not specify affected versions, vulnerable components, exploit ...

delfosclinica.com.br Cross Site Scripting vulnerability OBB-2999517

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

curiousscience.com Cross Site Scripting vulnerability OBB-2997187

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Budworm Hackers Resurface with New Espionage Attacks Aimed at U.S. Organization

An advanced persistent threat APT actor known as Budworm targeted a U.S.-based entity for the first time in more than six years, according to latest research. The attack was aimed at an unnamed U.S. state legislature, the Symantec Threat Hunter team, part of Broadcom Software, said in a report...

CVE-2022-41647

WordPress Optinly plugin (versions

CVE-2022-41295

CVE-2022-41295 affects IBM Robotic Process Automation products. IBM Robotic Process Automation Client may be vulnerable to sensitive data being stored in temporary managed memory, enabling exposure of data in memory during operation. Affected products/versions: IBM Robotic Process Automation for ...

CVE-2020-35282

The connected IBM advisories confirm CVE-2020-35282 affects IBM WebSphere Application Server (WAS) when shipped with IBM Operations Analytics Predictive Insights. Affected: WAS 8.0, 8.5, 9.0 as part of Predictive Insights; vulnerability type: Server-Side Request Forgery (and related spoofing/remo...

serpas.org Cross Site Scripting vulnerability OBB-2990578

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

willsway.org Cross Site Scripting vulnerability OBB-2989287

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

sinerjist.org Cross Site Scripting vulnerability OBB-2988297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-42013

RESERVED This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this candidate will be provided. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

NK Hackers Lacing Legit Software with Malware

By Waqas The hacker group is called ZINC, and its primary targets are organizations in the aerospace, media, IT services, and defense sectors. This is a post from HackRead.com Read the original post: NK Hackers Lacing Legit Software with Malware...

Customer Guidance for Reported Zero-day Vulnerabilities in Microsoft Exchange Server

November 8, 2022 update - Microsoft released security updates for CVE-2022-41040 and CVE-2022-41082. We recommend that customers protect their organizations by applying the updates immediately to affected systems. The options described in the Mitigations section are no longer recommended. For mor...

CVE-2013-3013

Summary of CVE-2013-3013 context (IBM Smart Analytics System 5600): The related IBM security bulletin notes that the 5600 system’s management host runs Firefox configured to use the IBM Java SDK for Java Web Start, exposing the system to Java SDK vulnerabilities identified in CVEs such as CVE-201...

CVE-2019-4626

IBM InfoSphere Subscription Manager is affected by CVE-2019-4626, a Cross-Site Request Forgery in IBM InfoSphere Information Server components. Affected products and versions include IBM InfoSphere Information Server (11.3, 11.5, 11.7) and InfoSphere Information Server on Cloud (11.5, 11.7). The ...

CVE-2019-4628

Affected product: IBM InfoSphere Information Server and Information Server on Cloud (versions 11.3, 11.5, 11.7). Vulnerability: CVE-2019-4628 — Information Disclosure due to incomplete filtering of user input. Root cause / details: Remote attacker could obtain sensitive information through improp...

CVE-2019-4627

IBM InfoSphere Information Server is affected by CVE-2019-4627 (Input validation XSS). The vulnerability allows embedding arbitrary JavaScript in the Web UI, potentially leading to credentials disclosure within a trusted session. Affected products/versions: IBM InfoSphere Information Server (11.3...