The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

The vulnerability in the web interface for managing device information on the Cisco Common Services Platform Collector allows a attacker to carry out cross-site scripting attacks.

The vulnerability in the web interface for collecting device information on the Cisco Common Services Platform Collector exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks using a...

VulnCheck KEV: CVE-2021-43226

Microsoft Windows Common Log File System Driver contains a privilege escalation vulnerability that could allow a local, privileged attacker to bypass certain security mechanisms...

VulnCheck KEV: CVE-2021-43207

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices

Summary Best Practices • Apply patches as soon as possible • Disable unnecessary ports and protocols • Replace end-of-life infrastructure • Implement a centralized patch management system This joint Cybersecurity Advisory describes the ways in which People’s Republic of China PRC state-sponsored...

CVE-2022-25804

creationtimestamp| type| source ---|---|--- 2022-06-09 07:32:53+00:00| seen| https://t.me/cibsecurity/44067...

CVE-2021-35530

creationtimestamp| type| source ---|---|--- 2022-06-08 00:31:25+00:00| seen| https://t.me/cibsecurity/43981...

CVE-2022-30735

creationtimestamp| type| source ---|---|--- 2022-06-07 22:37:27+00:00| seen| https://t.me/cibsecurity/43970...

CVE-2021-41932

creationtimestamp| type| source ---|---|--- 2022-06-06 18:29:59+00:00| seen| https://t.me/cibsecurity/43847...

DEBIAN-CVE-2022-32296

The Linux kernel before 5.17.9 allows TCP servers to identify clients by observing what source ports are used. This occurs because of use of Algorithm 4 "Double-Hash Port Selection Algorithm" of RFC 6056...

CVE-2020-25577

creationtimestamp| type| source ---|---|--- 2022-06-03 18:54:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2592 2026-09-01 17:01:04+00:00| seen| https://t.me/cissp/2237 2026-09-02 01:04:54+00:00| seen| https://t.me/cissp/2237 2026-09-11 20:00:06+00:00|...

CVE-2022-30514

creationtimestamp| type| source ---|---|--- 2022-06-02 18:38:56+00:00| seen| https://t.me/cibsecurity/43717...

CVE-2022-30797

creationtimestamp| type| source ---|---|--- 2022-06-02 18:31:48+00:00| seen| https://t.me/cibsecurity/43676...

CVE-2022-29780

Nginx NJS v0.7.2 was discovered to contain a segmentation violation in the function njsarrayprototypesort at src/njsarray.c...

Barco Control Room 跨站脚本漏洞

Barco Control Room is a visualization and collaboration solution from Barco Belgium. Used to build control rooms, a cross-site scripting vulnerability exists in the Barco Control Room Management Suite web application prior to version 3.14. The vulnerability stems from the URL parameter of the...

Security Bulletin: IBM Common Licensing is vulnerable by a remote code attack in Spring Framework (CVE-2021-22096,CVE-2021-22060,CVE-2022-22950,CVE-2022-22968)

Summary IBM Common Licensing is vulnerable to a remote code execution in Spring Framework CVE-2021-22096,CVE-2021-22060,CVE-2022-22950,CVE-2022-22968 as it does have Spring Framework versions 5.3.0 to 5.3.17, 5.2.0 to 5.2.19, and older versions. The fix includes Spring Framework version 5.3.19...

PT-2022-19825 · Onlyoffice · Onlyoffice Document Server +1

Name of the Vulnerable Software and Affected Versions: Onlyoffice Document Server versions 6.0.0 and below Onlyoffice Core versions 6.1.0.26 and below Description: A stack overflow issue was discovered in the DesktopEditor/common/File.cpp component. Recommendations: For Onlyoffice Document Server...

MAL-2022-293 Malicious code in @gpsu/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b82441bd6e09a70f9652399e745df409dbf2bbf07d483ecc2d1f343774ac43fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @gpsu/common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b82441bd6e09a70f9652399e745df409dbf2bbf07d483ecc2d1f343774ac43fb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Security Bulletin: The IBM® SDK Java Technology Edition, October 2021 CPU affect IBM Common Licensing (CVE-2021-35560, CVE-2021-35586, CVE-2021-35578, CVE-2021-35564, CVE-2021-35559, CVE-2021-35556, CVE-2021-35565, CVE-2021-35588, CVE-2021-41035)

Summary There are multiple security vulnerabilities that are addressed in the IBM® SDK Java Technology Edition, October 2021 CPU, found in the IBM® Runtime Environment Java™ used by IBM License Key Server Administration and Reporting Tool and its Agent. Vulnerability Details Refer to the security...