CVE-2022-28882

A Denial-of-Service DoS vulnerability was discovered in F-Secure & WithSecure products whereby the aegen.dll will go into an infinite loop when unpacking PE files. This eventually leads to scanning engine crash. The exploit can be triggered remotely by an attacker...

PukiWiki 跨站脚本漏洞

PukiWiki is a suite of Wiki software from Lindsay's personal developer. A security vulnerability exists in PukiWiki versions 1.5.1 through 1.5.3 that could allow a remote attacker to inject arbitrary scripts via unspecified vectors...

CVE-2022-2841

A vulnerability was found in CrowdStrike Falcon 6.31.14505.0/6.42.15610/6.44.15806. It has been classified as problematic. Affected is an unknown function of the component Uninstallation Handler. The manipulation leads to missing authorization. It is possible to launch the attack remotely. The...

D-Link GO-RT-AC750 命令注入漏洞

The D-Link GO-RT-AC750 is a wireless dual-band simple router from China AUO D-Link. Command injection vulnerabilities exist in the D-Link GO-RT-AC750 GORTAC750revAv101b03 and GO-RT-AC750revBFWv200b02, which stem from easy command injection via /htdocs/upnpinc/gena.php...

Google Android 安全漏洞

Google Android is a Linux-based open-source operating system from Google, a U.S. company. Google Android has a denial-of-service vulnerability that can be exploited by remote attackers to cause a denial of service...

ForkCMS 跨站脚本漏洞

ForkCMS is a software application. An easy-to-use open source CMS using Symfony components. A security vulnerability exists in ForkCMS version 5.9.3. A remote attacker can exploit this vulnerability to inject JavaScript via the "publishondate" parameter...

ForkCMS 跨站脚本漏洞

ForkCMS is a software application. An easy-to-use open source CMS using Symfony components. A security vulnerability exists in ForkCMS version 5.9.3. A remote attacker can exploit this vulnerability to inject JavaScript via the "publishontime" parameter...

CVE-2022-2685

A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input alert1 leads to cross site scripting. The attack may be...

CVE-2022-28880 Denial-of-Service (DoS) Vulnerability

A Denial-of-Service vulnerability was discovered in the F-Secure Atlant and in certain WithSecure products while scanning fuzzed PE32-bit files it is possible that can crash the scanning engine. The exploit can be triggered remotely by an attacker...

Alphaware Simple E-Commerce System 代码问题漏洞

Alphaware Simple E-Commerce System is an e-commerce system by razormist individual developers. The Alphaware Simple E-Commerce System suffers from a code issue that arises from an unknown portion of the adminfeature.php code in its backend administration interface that allows an attacker to perfo...

Rigatur Online Booking and Hotel Management System SQL注入漏洞

Hotel Management System is a hotel management system based MIS project by Prem Chand Saini, an individual developer in India. Rigatur Online Booking and Hotel Management System aff6409 suffers from a SQL injection vulnerability that stems from an unknown function of the POST request handler of it...

PT-2022-17871 · Unknown · Sourcecodester Online Admission System

Name of the Vulnerable Software and Affected Versions: SourceCodester Online Admission System affected versions not specified Description: A problematic issue was found in the SourceCodester Online Admission System, affecting an unknown function of the file index.php. The manipulation of the eid...

PT-2022-20938 · Arris · Bgw320 +5

Name of the Vulnerable Software and Affected Versions: muhttpd versions prior to 1.1.7 Description: The issue allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first...

CVE-2022-1494

Insufficient data validation in Trusted Types in Google Chrome prior to 101.0.4951.41 allowed a remote attacker to bypass trusted types policy via a crafted HTML page...

USN-5526-1 pyjwt vulnerability

Aapo Oksman discovered that PyJWT incorrectly handled signatures constructed from SSH public keys. A remote attacker could use this to forge a JWT signature...

CVE-2022-26656

Pexip Infinity before 27.3 allows remote attackers to trigger a software abort, and possibly enumerate usernames, via One Touch Join...

The vulnerability of the syntactic analyzer in Firefox web browsers allows attackers to perform cross-site scripting attacks.

The vulnerability of the syntactic analyzer in Firefox browsers is related to improper handling of code generation during the processing of HTML comment tags. Exploiting this vulnerability allows a remote attacker to perform cross-site scripting attacks...

CVE-2022-28623

Security vulnerabilities in HPE IceWall SSO 10.0 certd could be exploited remotely to allow SQL injection or unauthorized data injection. HPE has provided the following updated modules to resolve these vulnerabilities. HPE IceWall SSO version 10.0 certd library Patch 9 for RHEL and HPE IceWall SS...

PT-2022-22029 · Ibm · Ibm Cics Tx Standard +1

Name of the Vulnerable Software and Affected Versions: IBM CICS TX Standard and Advanced version 11.1 Description: The issue allows a remote attacker to inject malicious HTML code, which when viewed, would be executed in the victim's Web browser within the security context of the hosting site. Th...

Hewlett Packard Enterprise IceWall SSO SQL注入漏洞

Hewlett Packard Enterprise IceWall SSO is a single sign-on program from Hewlett Packard Enterprise USA that provides authentication capabilities for users. A security vulnerability exists in Hewlett Packard Enterprise IceWall SSO certd version 10.0, which originated from a vulnerability that can ...