SUSE CVE-2022-1586

An out-of-bounds read vulnerability was discovered in the PCRE2 library in the compilexclassmatchingpath function of the pcre2jitcompile.c file. This involves a unicode property matching issue in JIT-compiled regular expressions. The issue occurs because the character was not fully read in...

SUSE CVE-2022-22968

In Spring Framework versions 5.3.0 - 5.3.18, 5.2.0 - 5.2.20, and older unsupported versions, the patterns for disallowedFields on a DataBinder are case sensitive which means a field is not effectively protected unless it is listed with both upper and lower case for the first character of the fiel...

CVE-2023-25761

Jenkins JUnit Plugin 1166.va436e268e972 and earlier does not escape test case class names in JavaScript expressions, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control test case class names in the JUnit resources processed by the plugin...

Jenkins Plugin JUnit 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying and automating any project.Jenkins Plugin is a software application. A cross-site scripting...

CVE-2023-22932

creationtimestamp| type| source ---|---|--- 2023-02-14 20:35:55+00:00| seen| https://t.me/cibsecurity/58132 2023-02-16 11:40:08+00:00| seen| https://t.me/truesecator/4074 2025-02-28 11:26:15+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/5877...

amountAvailableForStaking() not fully utilized with compoundedAvaxNodeOpAmt easily forfeited

Lines of code Vulnerability details Impact The mitigated step is implemented at the expense of economic loss to both the node operators and the liquid stakers if compoundedAvaxNodeOpAmt ggAVAX.amountAvailableForStaking after all due to situations like liquid stakers have been actively calling...

CVE-2023-24350

creationtimestamp| type| source ---|---|--- 2023-02-10 18:40:47+00:00| seen| https://t.me/cibsecurity/57917...

Case Administrator Creation Fails with: "It is not allowed to add a Case Administrator role to License Administrators, only to additional users"

Challenge When attempting to finalize the creation of a Case Administrator within the Veeam My Account Portal, the following error occurs: It is not allowed to add a Case Administrator role to License Administrators, only to additional users Cause This error occurs when the email you are attempti...

CidNFT: Broken tokenURI function

Lines of code Vulnerability details CidNFTtokenURI does not convert the uint256 id argument to a string before interpolating it in the token URI: /// @notice Get the token URI for the provided ID /// @param id ID to retrieve the URI for /// @return tokenURI The URI of the queried token path to a...

CVE-2023-0651

creationtimestamp| type| source ---|---|--- 2023-02-02 18:45:00+00:00| seen| https://t.me/cibsecurity/57407...

SubprotocolRegistry is vulnerable to malicious names

Lines of code Vulnerability details Impact A malicious subprotocol can register a name that looks the same as any other protocol. Users may use the malicious subprotocol because they can't distinguish the names, and be cheated out of subprotocolFee. Proof of Concept Any subprotocol can be...

Precision loss in the invariant function can lead to loss of funds

Lines of code Vulnerability details Impact An attacker can steal the funds without affecting the invariant. Proof of Concept We can say the function Pair.invariant is the heart of the protocol. All the malicious trades should be prevented by this function. Pair.sol 52: /// @inheritdoc IPair 53:...

CVE-2022-32527

creationtimestamp| type| source ---|---|--- 2023-01-31 02:50:40+00:00| seen| Telegram/8jHqDApyzkiakTukkubm0eFCsaL-neMh1d7evrx2hVA...

CVE-2022-42401

creationtimestamp| type| source ---|---|--- 2023-01-26 20:39:43+00:00| seen| https://t.me/cibsecurity/56917 2025-03-31 19:31:12+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/9750...

Introducing Microservices Patterns with Spring Integration

Hey Spring Community! I hope you are enjoying Spring One Essentials these days. The most exciting feature for me is an Observability which is spread throughout the Spring portfolio from now on. Nevertheless, today I’d like to share with a project I’m working on since holidays, where the mentioned...

Chrome JSNativeContextSpecialization::BuildElementAccess Bypass

Chrome: Copy-on-write check bypass in JSNativeContextSpecialization::BuildElementAccess VULNERABILITY DETAILS Copy-on-write is one of V8's internal optimization features that allows multiple JavaScript objects to share the same element store. This feature is primarily used to optimize creation of...

CVE-2023-0244

creationtimestamp| type| source ---|---|--- 2023-01-12 18:30:22+00:00| seen| https://t.me/cibsecurity/56422...

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.18 before 5.18.18. fs/ksmbd/smb2pdu.c lacks length validation in the non-padding case in smb2_write.

...

CVE-2022-46603

creationtimestamp| type| source ---|---|--- 2023-01-10 02:28:13+00:00| seen| https://t.me/cibsecurity/56199...

CVE-2014-125059 sternenseemann sternenblog main.c blog_index file inclusion

A vulnerability, which was classified as problematic, has been found in sternenseemann sternenblog. This issue affects the function blogindex of the file main.c. The manipulation of the argument postpath leads to file inclusion. The attack may be initiated remotely. The complexity of an attack is...