PT-2022-27299 · Knime · Knime Analytics Platform

Name of the Vulnerable Software and Affected Versions: KNIME Analytics Platform versions 3.2.0 and above Description: A directory traversal vulnerability in the ZIP archive extraction routines can result in arbitrary files being overwritten on the user's system, also known as 'Zip-Slip'. An...

pcs security update

0.11.3-4 - Fixed ruby socket permissions - Resolves: rhbz2116841 0.11.3-3 - Fixed booth ticket mode value case insensitive - Fixed booth sync check whether /etc/booth exists - Resolves: rhbz2026725 rhbz2058243 0.11.3-2 - Fixed 'pcs resource restart' traceback - Resolves: rhbz2102663 0.11.3-1 -...

CVE-2021-43258

creationtimestamp| type| source ---|---|--- 2022-11-19 01:52:50+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/churchinfouploadexec.rb 2023-02-01 02:24:05+00:00| published-proof-of-concept| https://t.me/BugCod3/80 2025-02-06 03:13:45+00:00| see...

CVE-2022-30170

creationtimestamp| type| source ---|---|--- 2022-11-15 10:58:08+00:00| seen| https://t.me/itsecnews/1733 2025-03-11 16:26:29+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114144732022473396 2025-03-11 16:37:20+00:00| seen| https://bsky.app/profile/cti-news.bsky.social/post/3lk4itx4jqk...

grafana: Forward OAuth Identity Token can allow users to access some data sources

An information-disclosure flaw was found in grafana. When a data source has the Forward OAuth Identity feature enabled, sending a query to that data source with an API token and no other user credentials will forward the OAuth Identity of the most recently logged-in user. This flaw allows API tok...

grafana: XSS vulnerability in data source handling

A Cross-site scripting XSS vulnerability was found in the way Grafana handles data sources. This flaw allows an attacker to serve HTML content through the Grafana data source or plugin proxy and trick a user to visit this HTML page using a specially crafted link and execute a Cross-site scripting...

python39:3.9 and python39-devel:3.9 security update

Cython 0.29.21-5 - Convert from Fedora to the python39 module in RHEL8 - Resolves: rhbz1877430 0.29.21-4 - Drop build dependency on coverage 0.29.21-3 - Rebuilt for https://fedoraproject.org/wiki/Fedora33MassRebuild 0.29.21-2 - Re-enable tests. 0.29.21-1 - 0.29.21 scipy 1.5.4-3 - Specify LDFLAGS...

CVE-2022-36380

creationtimestamp| type| source ---|---|--- 2022-11-13 05:39:04+00:00| seen| https://t.me/cibsecurity/52859 2025-02-06 02:41:39+00:00| seen| Telegram/QEIxpn7MfLHAyRjGQdTQ95ZWNkATluHvqV26l2r8HVVrcHYD 2025-02-06 02:42:29+00:00| seen| Telegram/HtdoBYHE4h5mROVqecIlwE-fZqAmmriefatCvCakfoSiaHl-...

CVE-2022-42055

creationtimestamp| type| source ---|---|--- 2022-11-11 05:01:23+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3296 2022-11-11 05:10:30+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3297 2022-11-16 00:09:22+00:00| published-proof-of-concept|...

CVE-2022-37967

creationtimestamp| type| source ---|---|--- 2022-11-09 12:21:37+00:00| seen| https://t.me/alexmakus/4848 2022-11-09 14:40:05+00:00| seen| https://t.me/truesecator/3680 2022-12-17 07:59:17+00:00| seen| https://t.me/thehackernews/2882 2022-12-17 16:43:00+00:00| seen| https://t.me/OpenHackChile/1676...

CVE-2020-11531

creationtimestamp| type| source ---|---|--- 2022-11-09 06:35:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6968 2024-10-23 16:38:27+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1094...

CVE-2022-41091

creationtimestamp| type| source ---|---|--- 2022-11-08 20:27:53+00:00| published-proof-of-concept| https://t.me/alexmakus/4847 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=913 2022-11-09 14:40:05+00:00| seen| https://t.me/truesecator/3680 2022-11-10...

grafana: Forward OAuth Identity Token can allow users to access some data sources

An information-disclosure flaw was found in grafana. When a data source has the Forward OAuth Identity feature enabled, sending a query to that data source with an API token and no other user credentials will forward the OAuth Identity of the most recently logged-in user. This flaw allows API tok...

CVE-2022-41211

Due to lack of proper memory management, when a victim opens manipulated file received from untrusted sources in SAP 3D Visual Enterprise Author and SAP 3D Visual Enterprise Viewer, Arbitrary Code Execution can be triggered when payload forces:Re-use of dangling pointer which refers to overwritte...

CVE-2013-2566

creationtimestamp| type| source ---|---|--- 2022-11-07 22:22:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/sslversion.rb 2024-02-15 00:48:21+00:00| seen| https://t.me/marianaalecu/3622 2024-02-15 00:49:09+00:00| seen|...

CVE-2021-25370

creationtimestamp| type| source ---|---|--- 2022-11-04 15:50:00+00:00| seen| https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html 2022-11-05 13:30:01+00:00| exploited| https://t.me/CyberSecurityTechnologies/7108 2022-11-10 13:21:36+00:00|...

CVE-2021-25369

creationtimestamp| type| source ---|---|--- 2022-11-04 15:50:00+00:00| seen| https://googleprojectzero.blogspot.com/2022/11/a-very-powerful-clipboard-samsung-in-the-wild-exploit-chain.html 2022-11-05 13:30:01+00:00| exploited| https://t.me/CyberSecurityTechnologies/7108 2022-11-10 13:21:36+00:00|...

CVE-2022-44638

creationtimestamp| type| source ---|---|--- 2022-11-03 11:25:21+00:00| seen| https://t.me/cibsecurity/52497 2022-12-08 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7321 2022-12-08 13:33:29+00:00| seen| https://t.me/crackcodes/1676 2023-12-10 17:07:25+00:00|...

PT-2022-26734 · Unknown · Online Tours & Travels Management System

Name of the Vulnerable Software and Affected Versions: Online Tours & Travels Management System version 1.0 Description: The issue is related to an arbitrary file upload vulnerability in the /operations/travellers.php component. This allows attackers to execute arbitrary code via a crafted PHP...

CVE-2022-32287

A relative path traversal vulnerability in a FileUtil class used by the PEAR management component of Apache UIMA allows an attacker to create files outside the designated target directory using carefully crafted ZIP entry names. This issue affects Apache UIMA Apache UIMA version 3.3.0 and prior...