How to Deploy a SIEM That Actually Works

I deployed my SIEM in days, not months – here’s how you can too As an IT administrator at a highly digitized manufacturing company, I spent many sleepless nights with no visibility into the activity and security of our environment before deploying a security information and event management SIEM...

CVE-2021-27877

creationtimestamp| type| source ---|---|--- 2022-09-23 16:55:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/veritas/beagentshaauthrce.rb 2023-04-11 08:50:00+00:00| exploited| https://t.me/KomunitiSiber/83 2023-06-14 21:10:04+00:00| seen|...

CVE-2021-27878

creationtimestamp| type| source ---|---|--- 2022-09-23 16:55:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/veritas/beagentshaauthrce.rb 2023-04-11 08:50:00+00:00| exploited| https://t.me/KomunitiSiber/83 2023-06-14 21:10:04+00:00| seen|...

PT-2022-12297 · Velneo · Velneo Vclient

Name of the Vulnerable Software and Affected Versions: Velneo vClient version 28.1.3 Description: The issue arises from the default behavior of Velneo vClient, which does not correctly check the certificate of authenticity. This could allow an attacker with network access to perform a...

CVE-2007-4559

creationtimestamp| type| source ---|---|--- 2022-09-22 11:21:31+00:00| published-proof-of-concept| https://t.me/truesecator/3454 2022-09-22 12:22:01+00:00| seen| https://t.me/ctinow/65010 2022-09-22 13:38:11+00:00| exploited| https://t.me/SEReborn/2797 2022-09-22 18:14:34+00:00| exploited|...

CVE-2022-39197

creationtimestamp| type| source ---|---|--- 2022-09-22 07:11:51+00:00| seen| https://t.me/cibsecurity/50256 2022-09-23 06:29:01+00:00| published-proof-of-concept| https://t.me/proxybar/1003 2022-09-23 07:06:47+00:00| published-proof-of-concept| https://t.me/CNArsenal/275 2022-09-24 13:33:46+00:00...

PT-2022-25737 · Md2Roff · Md2Roff

Name of the Vulnerable Software and Affected Versions: md2roff version 1.9 Description: The issue is a stack-based buffer overflow that can occur when processing a Markdown file. It's noted that the vendor considers the product not intended for untrusted input. Recommendations: For md2roff versio...

CVE-2022-38532

creationtimestamp| type| source ---|---|--- 2022-09-20 02:38:30+00:00| seen| https://t.me/cibsecurity/50109 2025-06-11 18:40:35+00:00| seen| https://gist.github.com/jeraldjunkmail/ee0ad43aba73dd2e8960007d9955b4c2 2025-06-11 18:42:10+00:00| seen|...

GHSA-JV3G-J58F-9MQ9 JOSE vulnerable to resource exhaustion via specifically crafted JWE

The PBKDF2-based JWE key management algorithms expect a JOSE Header Parameter named p2c PBES2 Count, which determines how many PBKDF2 iterations must be executed in order to derive a CEK wrapping key. The purpose of this parameter is to intentionally slow down the key derivation function in order...

Memory corruption

Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-22093

Memory corruption or temporary denial of service due to improper handling of concurrent hypervisor operations to attach or detach IRQs from virtual interrupt sources in Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile...

CVE-2022-36158

creationtimestamp| type| source ---|---|--- 2022-09-15 15:19:29+00:00| seen| https://t.me/truesecator/3425 2022-09-20 16:35:14+00:00| seen| https://t.me/icscert/607 2022-09-21 19:28:48+00:00| seen| https://t.me/icscert/608 2022-09-26 14:22:27+00:00| seen| https://t.me/cibsecurity/50461 2025-05-21...

CVE-2022-3180

creationtimestamp| type| source ---|---|--- 2022-09-14 19:31:02+00:00| exploited| https://t.me/truesecator/3416 2023-07-22 19:53:13+00:00| seen| https://t.me/breachdetector/304110 2025-02-11 21:39:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113987418774982603 2025-02-11...

CVE-2022-37706

creationtimestamp| type| source ---|---|--- 2022-09-14 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6796 2022-09-15 07:15:10+00:00| published-proof-of-concept| https://t.me/RalfHackerChannel/1263 2022-09-15 13:07:21+00:00| published-proof-of-concept|...

CVE-2022-40139

creationtimestamp| type| source ---|---|--- 2022-09-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=871 2022-09-14 14:27:02+00:00| seen| https://t.me/truesecator/3413 2022-09-19 22:38:09+00:00| seen| https://t.me/cibsecurity/50073 2023-06-14 21:10:04+00:00| seen|...

PT-2022-5207 · Adobe · Indesign

Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 16.4.2 and earlier Adobe InDesign versions 17.3 and earlier Description: The issue is related to a heap-based buffer overflow in the dynamic memory of Adobe InDesign, which could allow an attacker to execute arbitrary...

PT-2022-5040 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user. Exploitation...

PT-2022-5065 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Use After Free vulnerability, which can be exploited to execute arbitrary code in the context of the current user. This c...

PT-2022-5151 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to a Use After Free vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this...

PT-2022-5081 · Adobe · Bridge

Name of the Vulnerable Software and Affected Versions: Adobe Bridge versions 12.0.2 and earlier Adobe Bridge versions 11.1.3 and earlier Description: The issue is related to an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. This...