CVE-2022-37183: Improper Neutralization of Input During Web Page Generation

Piwigo 12.3.0 is vulnerable to Cross Site Scripting XSS via /search/1940/created-monthly-list...

DEBIAN-CVE-2021-3701

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

PYSEC-2022-43067

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

USN-5571-1 postgresql-10, postgresql-12, postgresql-14 vulnerability

Sven Klemm discovered that PostgreSQL incorrectly handled extensions. An attacker could possibly use this issue to execute arbitrary code when extensions are created or updated...

The vulnerability of the Advantech DeviceOn/iService software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech DeviceOn/iService software is related to incorrect default access rights settings. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created file...

The vulnerability of the Advantech SQ Manager Server software lies in improper default access rights settings, which allow attackers to escalate their privileges.

The vulnerability of the Advantech SQ Manager Server software is related to incorrect default access permissions settings. Exploiting this vulnerability can allow attackers to increase their privileges by using a specially created file...

Brave Search wants to replace Google’s biased search results with yours

Brave Search, Brave Softwares privacy search engine, just turned one. To celebrate, the company says it is moving the search engine out of its beta phase to become the default search engine for all Brave browser users. Goodbye, Google? Not entirely. In May 2015, Mozilla alumni Brendan Eich and...

The vulnerability of Adobe InCopy, a program for creating and editing PDF files, allows a perpetrator to execute arbitrary code.

The vulnerability of Adobe InCopy, a program for creating and editing PDF files, is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability could allow an attacker to execute arbitrary code using specially created data in the PDF file...

The vulnerability of Adobe InCopy, a text creation and editing software, relates to memory usage after it is freed. This allows an attacker to execute arbitrary code.

The vulnerability of the Adobe InCopy text creation and editing software is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created file...

CVE-2022-20208

creationtimestamp| type| source ---|---|--- 2022-06-15 18:26:41+00:00| seen| https://t.me/cibsecurity/44534...

CVE-2022-30708

Webmin through 1.991, when the Authentic theme is used, allows remote code execution when a user has been manually created i.e., not created in Virtualmin or Cloudmin. This occurs because settings-editorwrite.cgi does not properly restrict the file parameter...

Avira Password Manager Browser Extensions 安全漏洞

Avira Password Manager Browser Extensions is a password management software by Little Red Umbrella, which is designed for chrome and can also be used on edge browsers to ensure that users can manage their passwords on the web. A security vulnerability exists in Avira Password Manager Browser...

CVE-2022-0687

creationtimestamp| type| source ---|---|--- 2022-03-21 21:26:26+00:00| seen| https://t.me/cibsecurity/39323...

Denial Of Service (DoS)

freetakserver is vulnerable to denial of service. The vulnerability exists due to a lack of sanitization of access control which allows an attacker to generate unusually large amount of created routes, or create unsafe or false routes for legitimate users which will crash the system...

PYSEC-2022-43054

An access control issue in the component /ManageRoute/postRoute of FreeTAKServer v1.9.8 allows unauthenticated attackers to cause a Denial of Service DoS via an unusually large amount of created routes, or create unsafe or false routes for legitimate users...

CVE-2021-45736

creationtimestamp| type| source ---|---|--- 2022-02-04 07:36:41+00:00| seen| https://t.me/cibsecurity/36829...

CVE-2021-46229

creationtimestamp| type| source ---|---|--- 2022-02-04 07:30:49+00:00| seen| https://t.me/cibsecurity/36816 2025-06-18 21:02:23+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lrvvsysbbi2i...

cal.org Cross Site Scripting vulnerability OBB-2347574

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

User created baskets are owned by defaultController

Handle 0x0x0x Vulnerability details User created baskets are owned by defaultController and help from the defaultController is needed to use any functionality or setup the basket. In test simply one account is used, but when a user wants to create a basket, they can’t control it properly...

The vulnerability of the Navigation component in Google Chrome allows a hacker to disclose protected information.

The vulnerability of the Navigation component in Google Chrome relates to improperly implemented security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose sensitive information through a specially created web page...