WordPress Awesome Filterable Portfolio Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

NetApp SnapCenter 路径遍历漏洞

NetApp SnapCenter is a suite of applications from Network Appliance NetApp that provides the ability to back up, verify, clone, and restore NetApp storage systems. A security vulnerability exists in NetApp SnapCenter. An attacker exploited the vulnerability to gain access to data in order to read...

Fedora: Security Advisory for mingw-poppler (FEDORA-2022-f7b375eae8)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-2941

creationtimestamp| type| source ---|---|--- 2022-09-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51020 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22...

CISA Has Added One Known Exploited Vulnerability to Catalog 

CISA has added one new vulnerability to it's Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...

Billing System Project has a remote code execution vulnerability

Billing System Project v1.0 is a billing system program. v1.0 of Billing System Project contains a remote code execution vulnerability that can be exploited by attackers to remotely execute code...

CVE-2022-32917

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively...

Default credentials

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively...

CVE-2022-32917

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively...

CVE-2022-32917

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively...

Google TensorFlow CollectiveGather Denial of Service Vulnerability

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A denial-of-service vulnerability exists in Google TensorFlow, which stems from the fact that when CollectiveGather receives a scalar input input, it gives an assertion of failure, which can be exploite...

CVE-2022-32917

The issue was addressed with improved bounds checks. This issue is fixed in macOS Monterey 12.6, iOS 15.7 and iPadOS 15.7, iOS 16, macOS Big Sur 11.7. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively...

CVE-2022-3142

creationtimestamp| type| source ---|---|--- 2022-09-19 18:38:07+00:00| seen| https://t.me/cibsecurity/50038 2023-03-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51042...

CVE-2022-3141

creationtimestamp| type| source ---|---|--- 2022-09-19 18:38:03+00:00| seen| https://t.me/cibsecurity/50035 2023-03-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51043...

CVE-2022-40769

profanity through 1.60 has only four billion possible RNG initializations. Thus, attackers can recover private keys from Ethereum vanity addresses and steal cryptocurrency, as exploited in the wild in June 2022...

Hackers Targeting WebLogic Servers and Docker APIs for Mining Cryptocurrencies

Malicious actors such as Kinsing are taking advantage of both recently disclosed and older security flaws in Oracle WebLogic Server to deliver cryptocurrency-mining malware. Cybersecurity company Trend Micro said it found the financially-motivated group leveraging the vulnerability to drop Python...

Adobe Experience Manager Cross-Site Scripting Vulnerability (CNVD-2022-87163)

Adobe Experience Manager AEM is a content management solution from Adobe that can be used to build websites, mobile applications and forms. Adobe Experience Manager has a cross-site scripting vulnerability that could be exploited by attackers to steal a victim's cookie-based authentication...

CVE-2022-40734

creationtimestamp| type| source ---|---|--- 2022-09-15 02:26:45+00:00| exploited| https://t.me/cibsecurity/49805 2026-06-19 12:47:04+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/341fa890-61c6-48ff-9ddd-13ef3124c184 2026-06-23 14:04:05+00:00| exploited|...

UniSharp Laravel Filemanager directory traversal vulnerability

UniSharp laravel-filemanager aka Laravel Filemanager with league/flysystem version = 2.0.0...

Enlightenment Elevation of Privilege Vulnerability (CNVD-2022-63641)

Enlightenment is a window manager program, and an elevation of privilege vulnerability exists in Enlightenment, which can be exploited to elevate to root privileges...