Never Mind the Ears, Here's Security Nation

It's another year down and another season down for Security Nation. With the close of our fifth season, I wanted to take a minute here to reflect on who we spoke with and what we talked about. The show titles focus as you would expect on the individual interview subjects, but there's a bunch of...

编号撤回

This CVE number has been withdrawn...

CVE-2022-45942

A Remote Code Execution RCE vulnerability was found in includes/baijiacms/common.inc.php in baijiacms v4...

baijiacms 操作系统命令注入漏洞

baijiacms is a content management system CMS for e-commerce. A security vulnerability exists in the baijiacms version, which stems from a Remote Code Execution RCE vulnerability in includes/baijiacms/common.inc.php. No details of the vulnerability are available at this time...

CVE-2022-4050

creationtimestamp| type| source ---|---|--- 2022-12-19 16:10:30+00:00| seen| https://t.me/cibsecurity/54856 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2022-4063

creationtimestamp| type| source ---|---|--- 2022-12-19 16:10:30+00:00| seen| https://t.me/cibsecurity/54857 2023-09-12 03:15:02+00:00| published-proof-of-concept| https://t.me/v3n0mhack/278 2024-11-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-04 2024-11-05...

PT-2022-26929 · Buffalo · Wsr-2533Dhp3 +4

Name of the Vulnerable Software and Affected Versions: Buffalo network devices WSR-3200AX4S versions 1.26 and earlier Buffalo network devices WSR-3200AX4B version 1.25 Buffalo network devices WSR-2533DHP2 versions 1.22 and earlier Buffalo network devices WSR-A2533DHP2 versions 1.22 and earlier...

CVE-2022-3157

A vulnerability exists in the Rockwell Automation controllers that allows a malformed CIP request to cause a major non-recoverable fault MNRF and a denial-of-service condition DOS...

CVE-2021-35252

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

Code injection

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

CVE-2021-35252 Common Key Vulnerability in Serv-U FTP Server

Common encryption key appears to be used across all deployed instances of Serv-U FTP Server. Because of this an encrypted value that is exposed to an attacker can be simply recovered to plaintext...

CVE-2021-35252

The CVE-2021-35252 case covers SolarWinds Serv-U FTP Server where a common encryption key is used across all deployed instances, enabling plaintext recovery of an encrypted value exposed to an attacker. Public documents indicate affected software versions include Serv-U prior to 15.3.0 (per Nessu...

CVE-2022-42859

creationtimestamp| type| source ---|---|--- 2022-12-15 22:29:55+00:00| seen| https://t.me/cibsecurity/54632...

Use cases for Delegated Administrator for AWS Organizations

Learn about how AWS's recently released Delegated Administrator for AWS Organization can be used to solve common problems at your company and the issues you might run into with it...

CVE-2022-47408

creationtimestamp| type| source ---|---|--- 2022-12-15 00:23:00+00:00| seen| https://t.me/cibsecurity/54566 2025-04-21 19:02:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12729...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET Core 3.1 bugfix update

An update is available for dotnet3.1. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

CVE-2022-31705

creationtimestamp| type| source ---|---|--- 2022-12-14 08:14:08+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2022 2022-12-14 17:30:06+00:00| published-proof-of-concept| https://t.me/truesecator/3827 2022-12-14 22:22:54+00:00| seen| https://t.me/cibsecurity/54552 2023-01-...

CVE-2022-37155

creationtimestamp| type| source ---|---|--- 2022-12-14 02:21:59+00:00| seen| https://t.me/cibsecurity/54490...

Security Bulletin: IBM Tivoli Netcool/OMNIbus Probe and Integrations Library are affected by vulnerabilities in FasterXML jackson-databind (CVE-2022-42004, CVE-2022-42003)

Summary FasterXML jackson-databind is used by IBM Tivoli Netcool/OMNIbus Transport Module Common Integration Library and Probe for Microsoft Exchange Web Services. The latest patches include FasterXML jackson-databind 2.13.4.2 that fixes the vulnerabilities. CVE-2022-42004, CVE-2022-42003...