13574 matches found
The vulnerability of the modular interface between web servers and web applications in Rack, related to improper neutralization of special elements used in operating system commands, allows attackers to execute arbitrary shell commands on the target system.
The vulnerability of the modular interface between web servers and Rack web applications is related to improper input validation during data processing, as transmitted through the intermediate software Rack Lint and CommonLogger. Exploiting this vulnerability allows a remote attacker to send...
Malicious Package
Overview ably-asset-tracking-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...
Malicious Package
Overview ably-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
CVE-2021-4234
creationtimestamp| type| source ---|---|--- 2022-07-07 00:14:37+00:00| seen| https://t.me/cibsecurity/45706...
CVE-2022-31126
creationtimestamp| type| source ---|---|--- 2022-07-06 22:14:31+00:00| seen| https://t.me/cibsecurity/45692 2023-04-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51227 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-26...
The vulnerability of the Common Gateway Interface (CGI) interface of microprogramming software for network devices such as ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN allows attackers to circumvent security restrictions.
The vulnerability of the Common Gateway Interface CGI interface of ZyXEL USG, ZyWALL, USG FLEX, ATP, and VPN network devices is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to circumvent security restrictions by using IPSec VPN...
MariaDB Buffer Overflow Vulnerability (CNVD-2022-51592)
MariaDB is a free and open source database management system from the Mariadb Foundation and a branch version of MySQL that uses the Maria storage engine.MariaDB has a security vulnerability that stems from the discovery of a memory poisoning in the /libsanitizer/sanitizercommon/sanitizercommon A...
MariaDB 资源管理错误漏洞
MariaDB is a free and open source database management system from the Mariadb Foundation and a branch version of MySQL that uses the Maria storage engine.MariaDB has a security vulnerability that stems from the discovery of a memory poisoning in the /libsanitizer/sanitizercommon/sanitizercommon A...
CVE-2022-33312
creationtimestamp| type| source ---|---|--- 2022-06-30 23:17:43+00:00| seen| https://t.me/cibsecurity/45432 2022-10-13 15:05:03+00:00| seen| https://t.me/truesecator/3558...
firefox security update
An update is available for firefox. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Mozilla Firefox is an open-source web browser, designed for standards...
CVE-2022-1952
creationtimestamp| type| source ---|---|--- 2022-06-30 09:48:06+00:00| published-proof-of-concept| Telegram/NeKXnTM2sAZzsr0TQAi-bPyfhrvmFH-23PGtGnpZ0v7g30Y 2022-07-11 16:19:21+00:00| seen| https://t.me/cibsecurity/45914 2024-11-24 00:00:00+00:00| seen| The Shadowserver...
CVE-2022-33021
CVA6 commit 909d85a accesses invalid memory when reading the value of MHPMCOUNTER30...
CVE-2022-28168
creationtimestamp| type| source ---|---|--- 2022-06-27 22:35:09+00:00| seen| https://t.me/cibsecurity/45221 2022-07-01 13:21:03+00:00| seen| https://t.me/truesecator/3121...
Security Bulletin: A Remote Attack Vulnerability in Apache Log4j affects IBM Common Licensing's License Key Server (LKS) Administration And Reporting Tool (ART) and its Agent(CVE-2021-4104,CVE-2021-44832,CVE-2021-3100,CVE-2022-33915).
Summary There is a high risk Remote Attack Vulnerability in Apache Log4j CVE-2021-4104,CVE-2021-44832,CVE-2021-3100,CVE-2022-33915 which is used by IBM LKS Administration And Reporting Tool and its Agent. A fix is available to address the vulnerability. Vulnerability Details CVEID: CVE-2022-33915...
CVE-2022-32996
creationtimestamp| type| source ---|---|--- 2022-06-25 00:31:26+00:00| seen| https://t.me/cibsecurity/45132...
CVE-2022-1746
creationtimestamp| type| source ---|---|--- 2022-06-24 18:31:19+00:00| seen| https://t.me/cibsecurity/45099 2025-04-17 18:58:00+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12317...
CVE-2022-32397
creationtimestamp| type| source ---|---|--- 2022-06-24 07:30:46+00:00| seen| https://t.me/cibsecurity/45062...
Security Bulletin: A vulnerability in zlib affects IBM Common Inventory Technology (CIT).
Summary Zlib library before 1.2.12 used by IBM Common Inventory Technology is vulnerable to a denial of service, caused by a memory corruption in the deflate operation. Vulnerability Details CVEID:CVE-2018-25032 DESCRIPTION: Zlib is vulnerable to a denial of service, caused by a memory corruption...