CVE-2022-36008 Message length overflow in frontier

Frontier is Substrate's Ethereum compatibility layer. A security issue was discovered affecting parsing of the RPC result of the exit reason in case of EVM reversion. In release build, this would cause the exit reason being incorrectly parsed and returned by RPC. In debug build, this would cause ...

CVE-2022-36896

creationtimestamp| type| source ---|---|--- 2022-07-27 18:49:54+00:00| seen| https://t.me/cibsecurity/47097 2025-10-20 00:24:59+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m3lkgwesphe2...

ZOHO ManageEngine Password Manager Pro 代码问题漏洞

ZOHO ManageEngine Password Manager Pro is a password manager from ZOHO, Inc. A security vulnerability exists in ZOHO ManageEngine Password Manager Pro versions prior to 12101 and PAM360 versions prior to 5510 that stems from vulnerability to unauthenticated remote code execution attacks. This als...

WordPress plugin Import any XML or CSV File 代码问题漏洞

WordPress is a blogging platform developed using the PHP language. WordPress Import any XML or CSV File plugin versions prior to 3.6.8 are vulnerable to arbitrary file uploads, which originate from accepting all zip files and automatically extracting the zip file without validating the extracted...

CVE-2022-29097

Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unauthorized read access to the files stored on the server filesystem, with the privileges of the running web application...

Bachmann Visutec GmbH Atvise 安全漏洞

Bachmann Visutec GmbH Atvise is a full-featured networked HMI and SCADA system using pure network technology from Bachmann Visutec GmbH of Austria. A security vulnerability exists in Bachmann Visutec GmbH Atvise versions 3.5.4, 3.6, and 3.7 that stems from an information disclosure issue in the...

CVE-2022-23671

creationtimestamp| type| source ---|---|--- 2022-05-17 22:27:42+00:00| seen| https://t.me/cibsecurity/42848...

CVE-2022-0836

creationtimestamp| type| source ---|---|--- 2022-05-09 20:36:29+00:00| seen| https://t.me/cibsecurity/42182...

NovelPlus 代码问题漏洞

NovelPlus is an application. An open source mobile social application and idea publishing platform. A security vulnerability exists in NovelPlus V3.6.1 that allows unrestricted file uploads. Unrestricted file extensions and content could lead to server attacks and arbitrary code execution...

CVE-2022-21467

Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain component: Attachments. The supported version that is affected is 9.3.6. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle Agile PLM. Successful attacks of this...

CVE-2022-1329

The Elementor Website Builder plugin for WordPress is vulnerable to unauthorized execution of several AJAX actions due to a missing capability check in the /core/app/modules/onboarding/module.php file that make it possible for attackers to modify site data in addition to uploading malicious files...

CVE-2022-28364

creationtimestamp| type| source ---|---|--- 2022-04-09 20:14:19+00:00| seen| https://t.me/cibsecurity/40430...

CVE-2022-0549

An issue has been discovered in GitLab CE/EE affecting all versions before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under certain conditions, GitLab REST API may allow unprivileged users to add other users to groups even if that is not...

CVE-2021-3602

creationtimestamp| type| source ---|---|--- 2022-03-03 22:26:16+00:00| seen| https://t.me/cibsecurity/38376 2023-11-15 16:53:03+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5977...

CVE-2021-38265

Cross-site scripting XSS vulnerability in the Asset module in Liferay Portal 7.3.4 through 7.3.6 allow remote attackers to inject arbitrary web script or HTML when creating a collection page via the comliferayassetlistwebportletAssetListPortlettitle parameter...

CVE-2022-0391

A flaw was found in Python, specifically within the urllib.parse module. This module helps break Uniform Resource Locator URL strings into components. The issue involves how the urlparse method does not sanitize input and allows characters like '\r' and '\n' in the URL path. This flaw allows an...

Infinite loop in the RTMPT dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

...

Crash in the Sysdig Event dissector in Wireshark 3.6.0 and 3.4.0 to 3.4.10 allows denial of service via packet injection or crafted capture file

...

Wireshark 缓冲区错误漏洞

Wireshark formerly Ethereal is a set of network packet analysis software from the Wireshark team. Wireshark versions 3.6.0 and 3.4.0 - 3.4.10 contain an injection vulnerability that stems from a crash in the Sysdig event parser. An attacker could exploit this vulnerability to cause a denial of...

UBUNTU-CVE-2021-39931

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.11 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2. Under specific condition an unauthorised project member was allowed to delete a protected branches du...