CVE-2022-20963

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to conduct a cross-site scripting XSS attack against a user of the web-based management interface of an affected device. This vulnerability is due to...

CVE-2022-20965

A vulnerability in the web-based management interface of Cisco Identity Services Engine could allow an authenticated, remote attacker to take privileges actions within the web-based management interface. This vulnerability is due to improper access control on a feature within the web-based...

CVE-2022-31680

The vCenter Server contains an unsafe deserialisation vulnerability in the PSC Platform services controller. A malicious actor with admin access on vCenter server may exploit this issue to execute arbitrary code on the underlying operating system that hosts the vCenter Server...

CVE-2022-22847

Formpipe Lasernet before 9.13.3 allows file inclusion in Client Web Services either by an authenticated attacker, or in a configuration that does not require authentication...

CVE-2022-47454

In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services...

CVE-2022-47331

In wlan driver, there is a race condition. This could lead to local denial of service in wlan services...

CVE-2022-47342

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

CVE-2022-47452

In gnss driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service in wlan services...

CVE-2022-47343

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

CVE-2022-47346

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

CVE-2022-47341

In engineermode services, there is a missing permission check. This could lead to local escalation of privilege with system execution privileges needed...

CVE-2022-47344

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

CVE-2022-47345

In engineermode services, there is a missing permission check. This could lead to local denial of service in engineermode services...

CVE-2025-45755

A Stored Cross-Site Scripting XSS vulnerability exists in Vtiger CRM Open Source Edition v8.3.0, exploitable via the Services Import feature. An attacker can craft a malicious CSV file containing an XSS payload, mapped to the Service Name field. When the file is uploaded, the application improper...

CVE-2022-44432

In wlan driver, there is a possible missing bounds check. This could lead to local denial of service in wlan services...

CVE-2022-25722

Information exposure in DSP services due to improper handling of freeing memory...

CVE-2022-24976

Atheme IRC Services before 7.2.12, when used in conjunction with InspIRCd, allows authentication bypass by ending an IRC handshake at a certain point during a challenge-response login sequence...

Invisible Tokens, Visible Bills: the Urgent Need to Audit Hidden Operations in Opaque LLM Services

Whitepaper called Invisible Tokens, Visible Bills: The Urgent Need To Audit Hidden Operations In Opaque LLM Services...

ACSE-Eval: Can LLMs Threat Model Real-World Cloud Infrastructure?

While Large Language Models have shown promise in cybersecurity applications, their effectiveness in identifying security threats within cloud deployments remains unexplored. This paper introduces AWS Cloud Security Engineering Eval, a novel dataset for evaluating LLMs cloud security threat...

CVE-2022-2390

Apps developed with Google Play Services SDK incorrectly had the mutability flag set to PendingIntents that were passed to the Notification service. As Google Play services SDK is so widely used, this bug affects many applications. For an application affected, this bug will let the attacker, gain...