13037 matches found
CVE-2022-20345
creationtimestamp| type| source ---|---|--- 2022-08-03 13:20:04+00:00| seen| https://t.me/truesecator/3248 2022-08-04 07:00:05+00:00| seen| https://t.me/TopCyberTechNews/83 2022-08-11 00:26:13+00:00| seen| https://t.me/cibsecurity/47890 2022-08-20 17:00:04+00:00| seen| https://t.me/poxek/2320...
golang: regexp: stack exhaustion via a deeply nested expression
A stack overflow flaw was found in Golang's regexp module, which can crash the runtime if the application using regexp accepts very long or arbitrarily long regexps from untrusted sources that have sufficient nesting depths. To exploit this vulnerability, an attacker would need to send large...
CVE-2022-34907
creationtimestamp| type| source ---|---|--- 2022-07-26 00:33:21+00:00| seen| https://t.me/cibsecurity/46963 2022-07-26 14:20:07+00:00| seen| https://t.me/truesecator/3217 2022-07-28 12:16:44+00:00| seen| https://t.me/CyberSecurityTechnologies/6480 2022-07-28 13:16:11+00:00| seen|...
CVE-2022-34961
creationtimestamp| type| source ---|---|--- 2022-07-25 18:39:15+00:00| seen| https://t.me/cibsecurity/46931 2022-07-26 14:26:03+00:00| published-proof-of-concept| https://t.me/intelexch/15828 2022-07-26 16:33:25+00:00| seen| Telegram/FFymLLIK1VykiTo0qiu5oiOuLgw0sFOxywUPTyY6TqRLAw 2022-07-30...
Vulnerabilities fixed in Foxit PDF Reader and Foxit PDF Editor
Vulnerabilities have been fixed in the PDF Reader and PDF Editor from Foxit. The vulnerabilities allow a malicious party to perform attacks that result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution User rights Access to system data This...
CVE-2022-34918
creationtimestamp| type| source ---|---|--- 2022-07-21 10:35:57+00:00| published-proof-of-concept| https://t.me/proxybar/926 2022-07-21 12:14:33+00:00| published-proof-of-concept| https://t.me/crackcodes/873 2022-07-21 12:17:08+00:00| published-proof-of-concept|...
CVE-2022-26911
creationtimestamp| type| source ---|---|--- 2022-07-20 15:37:26+00:00| published-proof-of-concept| https://t.me/ptswarm/138 2022-07-21 05:06:17+00:00| published-proof-of-concept| https://t.me/cKure/9988...
PT-2022-21765
Name of the Vulnerable Software and Affected Versions ICONICS GENESIS64 versions 10.97.1 and prior Mitsubishi Electric MC Works64 versions 4.04E 10.95.210.01 and prior Description The issue allows an unauthenticated attacker to execute arbitrary malicious code by leading a user to load a monitori...
CVE-2022-31150
undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to eliminate \r\n is a workaround for this...
CVE-2022-31150 CRLF injection in request headers
undici is an HTTP/1.1 client, written from scratch for Node.js. It is possible to inject CRLF sequences into request headers in undici in versions less than 5.7.1. A fix was released in version 5.8.0. Sanitizing all HTTP headers from untrusted sources to eliminate \r\n is a workaround for this...
CVE-2022-35405
creationtimestamp| type| source ---|---|--- 2022-07-19 18:40:49+00:00| seen| https://t.me/cibsecurity/46547 2022-08-02 11:49:26+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6516 2022-08-02 22:05:45+00:00| seen|...
CVE-2022-29593
creationtimestamp| type| source ---|---|--- 2022-07-14 18:32:37+00:00| seen| https://t.me/cibsecurity/46244 2022-07-15 08:17:26+00:00| seen| Telegram/tvagmoXGD-sjRG5teDO-DfPH2iB-IEEjYRnLqN5-gAxoA 2022-07-16 09:11:59+00:00| seen| https://t.me/crackcodes/838 2022-07-17 10:25:23+00:00|...
CVE-2022-1891
creationtimestamp| type| source ---|---|--- 2022-07-14 09:33:43+00:00| seen| https://t.me/itsecnews/1001 2022-07-14 11:27:02+00:00| published-proof-of-concept| https://t.me/truesecator/3171 2023-01-27 00:46:57+00:00| seen| https://t.me/cibsecurity/57005 2025-04-03 17:35:53+00:00| seen|...
CVE-2022-1890
creationtimestamp| type| source ---|---|--- 2022-07-14 09:33:43+00:00| seen| https://t.me/itsecnews/1001 2022-07-14 11:27:02+00:00| published-proof-of-concept| https://t.me/truesecator/3171 2025-04-01 20:33:42+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/10018 2026-07-26 02:02:51+00:00| see...
PT-2022-3672 · Adobe · Indesign
Name of the Vulnerable Software and Affected Versions: Adobe InDesign versions 17.2.1 and earlier Adobe InDesign versions 16.4.1 and earlier Description: The issue is related to a Heap-based Buffer Overflow that could result in arbitrary code execution in the context of the current user...
CVE-2022-35171
When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...
CVE-2022-35171
When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...
CVE-2022-35171
When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...
Format string
When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...
CVE-2022-35171
When a user opens manipulated JPEG 2000 .jp2, jp2k.x3d files received from untrusted sources in SAP 3D Visual Enterprise Viewer, the application crashes and becomes temporarily unavailable to the user until restart of the application. The file format details along with their CVE relevant...