InsightCloudSec 代码注入漏洞

InsightCloudSec is a fully integrated cloud-native security platform from InsightCloudSec. A security vulnerability exists in versions of InsightCloudSec prior to 23.3.21 that stems from an attacker being able to utilize the publicly available resource.db accessor method to invoke Python methods...

USN-5806-3 ruby2.7 vulnerability

USN-5806-1 fixed vulnerabilities in Ruby. This update fixes the problem for Ubuntu 20.04 LTS. Original advisory details: Hiroshi Tokumaru discovered that Ruby did not properly handle certain user input for applications which generate HTTP responses using cgi gem. An attacker could possibly use th...

Vulnerabilities fixed in Adobe ColdFusion

Adobe has fixed vulnerabilities in ColdFusion. A malicious party could exploit the vulnerabilities to execute arbitrary code execute application privileges to gain access to sensitive data. Of the vulnerability with reference CVE-2023-26360, Adobe indicates information that it has already been...

CVE-2022-46773

creationtimestamp| type| source ---|---|--- 2023-03-15 23:30:15+00:00| seen| https://t.me/cibsecurity/60094 2025-02-26 16:24:13+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5521...

CVE-2022-43494

creationtimestamp| type| source ---|---|--- 2023-03-15 11:02:01+00:00| seen| https://t.me/CyberSecurityTechnologies/7928 2023-03-15 13:15:26+00:00| published-proof-of-concept| Telegram/H5Dkkha3Th8jseqkeGc7uOUCt0lfInetyOoX5ljpqSECpk 2026-07-26 02:02:31+00:00| seen| https://t.me/EchelonEyes/1119...

CVE-2022-46732

creationtimestamp| type| source ---|---|--- 2023-03-15 11:02:01+00:00| seen| https://t.me/CyberSecurityTechnologies/7928 2023-03-15 13:15:26+00:00| published-proof-of-concept| Telegram/H5Dkkha3Th8jseqkeGc7uOUCt0lfInetyOoX5ljpqSECpk 2025-01-17 22:57:02+00:00| seen|...

USN-5953-1 ipython vulnerabilities

It was discovered that IPython incorrectly processed REST API POST requests. An attacker could possibly use this issue to launch a cross-site request forgery CSRF attack and leak user's sensitive information. This issue only affected Ubuntu 14.04 ESM. CVE-2015-5607 It was discovered that IPython...

Microsoft Windows Resilient File System (ReFS) 安全漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. The following products and versions are affected: Windows 11 Version 22H2 for ARM64-based Systems,Windows 11...

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90

...

CVE-2020-6817

creationtimestamp| type| source ---|---|--- 2023-03-11 22:20:48+00:00| seen| https://t.me/cibsecurity/58405...

CVE-2023-1205

creationtimestamp| type| source ---|---|--- 2023-03-10 20:21:16+00:00| seen| https://t.me/cibsecurity/59808 2025-02-28 16:26:52+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5910 2025-03-02 11:45:37+00:00| seen| Telegram/vxcN21UbBXgOXIEulgUW7uQiFebqZkbsUixB4PwN3bbmb2O-...

CVE-2022-4331

creationtimestamp| type| source ---|---|--- 2023-03-10 00:20:41+00:00| seen| https://t.me/cibsecurity/59760 2025-02-28 18:26:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5950 2025-03-02 11:45:38+00:00| seen| Telegram/j5jvAdPmVowONHQHmoASK9J1aFc3r8YXWa7dTJeupkTbFHo...

UBUNTU-CVE-2023-27985

emacsclient-mail.desktop in Emacs 28.1 through 28.2 is vulnerable to shell command injections through a crafted mailto: URI. This is related to lack of compliance with the Desktop Entry Specification. It is fixed in 29.0.90...

GNU Emacs 代码注入漏洞

GNU Emacs is a family of text editors in the American GNU community. A code injection vulnerability exists in GNU Emacs versions 28.1 through 28.2, which stems from the fact that emacsclient-mail.desktop is susceptible to Emacs Lisp code injection attacks...

GHSA-933G-V89R-X8PF Apache Dubbo vulnerable to Deserialization of Untrusted Data

A deserialization vulnerability existed when dubbo generic invoke, which could lead to malicious code execution. This issue affects Apache Dubbo 2.7.x version 2.7.21 and prior versions; Apache Dubbo 3.0.x version 3.0.13 and prior versions; Apache Dubbo 3.1.x version 3.1.5 and prior versions...

CVE-2022-26418

creationtimestamp| type| source ---|---|--- 2023-03-08 02:23:31+00:00| seen| https://t.me/cibsecurity/59655...

CVE-2023-0089

The webutils in Proofpoint Enterprise Protection PPS/POD contain a vulnerability that allows an authenticated user to execute remote code through 'eval injection'. This affects all versions 8.20.0 and below...

CVE-2022-45142

creationtimestamp| type| source ---|---|--- 2023-03-07 02:13:31+00:00| seen| https://t.me/cibsecurity/59539 2025-03-06 20:34:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/6743 2025-03-08 04:34:55+00:00| seen| Telegram/Sl-WKyZGV1MDcswPkINfQXSzv6-Mv5VFXzE0rZtaj1YcWT-...

CVE-2023-0064

creationtimestamp| type| source ---|---|--- 2023-03-06 16:12:42+00:00| seen| https://t.me/cibsecurity/59469 2025-03-08 04:34:10+00:00| seen| Telegram/9JCyhLIQp1Xl4AIutsh1mjNbGMkD82pOExrCAzkmYVH65YE...

CVE-2022-21127

creationtimestamp| type| source ---|---|--- 2023-03-03 12:46:27+00:00| seen| https://t.me/truesecator/4127 2026-07-17 05:00:04+00:00| seen| https://t.me/EchelonEyes/360 2026-07-18 00:00:40+00:00| seen| https://t.me/EchelonEyes/360...