PHOENIX CONTACT PLCNext AXC F 2152 Channel Accessible By Non-Endpoint (CVE-2019-10997)

An issue was discovered on Phoenix Contact AXC F 2152 No.2404267 before 2019.0 LTS and AXC F 2152 STARTERKIT No.1046568 before 2019.0 LTS devices. Protocol Fuzzing on PC WORX Engineer by a man in the middle attacker stops the PLC service. The device must be rebooted, or the PLC service must be...

Phoenix Contact ILC PLCs Improper Authentication (CVE-2016-8371)

The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the authentication mechanism is enabled. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...

Phoenix Contact ILC PLCs Improper Authentication (CVE-2016-8380)

The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if...

AZL-13175 CVE-2023-22742 affecting package rust for versions less than 1.68.0-1

libgit2 is a cross-platform, linkable library implementation of Git. When using an SSH remote with the optional libssh2 backend, libgit2 does not perform certificate checking by default. Prior versions of libgit2 require the caller to set the certificatecheck field of libgit2's gitremotecallbacks...

Gamaredon Group Launches Cyberattacks Against Ukraine Using Telegram

The Russian state-sponsored cyber espionage group known as Gamaredon has continued its digital onslaught against Ukraine, with recent attacks leveraging the popular messaging app Telegram to strike military and law enforcement sectors in the country. "The Gamaredon group's network infrastructure...

Siemens Automation License Manager

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2022-25836

creationtimestamp| type| source ---|---|--- 2023-01-07 04:37:08+00:00| seen| https://t.me/cibsecurity/54271 2025-04-22 21:04:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12992 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-06-21...

Ukraine's DELTA Military System Users Under Attack from Info Stealing Malware

The Computer Emergency Response Team of Ukraine CERT-UA this week disclosed that users of the Delta situational awareness program received phishing emails from a compromised email account belonging to the Ministry of Defense. The attacks, which have been attributed to a threat cluster dubbed...

CVE-2022-23491

creationtimestamp| type| source ---|---|--- 2022-12-08 00:12:01+00:00| seen| https://t.me/cibsecurity/54146 2024-01-08 14:16:05+00:00| seen| https://t.me/arpsyndicate/2645 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

PT-2022-27567 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the downaction parameter at the "/goform/CertListInfo" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, conside...

ALPINE-CVE-2022-42705

A use-after-free in respjsippubsub.c in Sangoma Asterisk 16.28, 18.14, 19.6, and certified/18.9-cert2 may allow a remote authenticated attacker to crash Asterisk denial of service by performing activity on a subscription via a reliable transport at the same time that Asterisk is also performing...

CVE-2022-45888

creationtimestamp| type| source ---|---|--- 2022-11-25 07:15:05+00:00| seen| https://t.me/cibsecurity/53484 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-45885

creationtimestamp| type| source ---|---|--- 2022-11-25 07:15:04+00:00| seen| https://t.me/cibsecurity/53483 2025-04-29 14:11:34+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13809 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-26047

creationtimestamp| type| source ---|---|--- 2022-11-13 05:45:26+00:00| seen| https://t.me/cibsecurity/52896 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-31687

creationtimestamp| type| source ---|---|--- 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=914 2022-11-09 07:33:41+00:00| seen| https://t.me/thehackernews/2743 2022-11-09 10:09:43+00:00| seen|...

CVE-2022-31685

creationtimestamp| type| source ---|---|--- 2022-11-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=914 2022-11-09 07:33:41+00:00| seen| https://t.me/thehackernews/2743 2022-11-09 10:09:43+00:00| seen|...

CVE-2022-3872

creationtimestamp| type| source ---|---|--- 2022-11-08 00:34:31+00:00| seen| https://t.me/cibsecurity/52614 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-42919

creationtimestamp| type| source ---|---|--- 2022-11-07 02:33:45+00:00| seen| https://t.me/cibsecurity/52578 2023-12-10 12:33:17+00:00| seen| https://t.me/arpsyndicate/1618 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

CVE-2022-44034

creationtimestamp| type| source ---|---|--- 2022-10-30 06:30:47+00:00| seen| https://t.me/cibsecurity/52274 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2022-44033

creationtimestamp| type| source ---|---|--- 2022-10-30 06:30:45+00:00| seen| https://t.me/cibsecurity/52271 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...