CVE-2016-20017

D-Link DSL-2750B devices before 1.05 allow remote unauthenticated command injection via the login.cgi cli parameter, as exploited in the wild in 2016 through 2022...

CVE-2016-20016

MVPower CCTV DVR models, including TV-7104HE 1.8.4 115215B9 and TV7108HE, contain a web shell that is accessible via a /shell URI. A remote unauthenticated attacker can execute arbitrary operating system commands as root. This vulnerability has also been referred to as the “JAWS webserver RCE”...

CVE-2022-41544

creationtimestamp| type| source ---|---|--- 2022-10-18 18:14:14+00:00| seen| https://t.me/cibsecurity/51673 2023-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51475 2025-05-13 19:30:52+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16198 2026-07-29...

CVE-2022-3552

creationtimestamp| type| source ---|---|--- 2022-10-18 00:13:39+00:00| seen| https://t.me/cibsecurity/51644 2023-03-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51108 2025-04-28 05:00:06+00:00| published-proof-of-concept| Telegram/pAhL0Y0-25WuKbTjtFnfRXs2-BuvkpahhgLLseEPoVFP0...

OTFCC Buffer Overflow Vulnerability (CNVD-2023-11777)

OTFCC is a C library and utility open sourced by Caryll. It is used to parse and write OpenType font files.OTFCC 0.10.4 and earlier versions have a buffer overflow vulnerability that originates in /release-x64/otfccdump 0x6b0b2c with a boundary error when processing untrusted input, which can be...

CVE-2022-3331

An issue has been discovered in GitLab EE affecting all versions starting from 14.5 before 15.1.6, all versions starting from 15.2 before 15.2.4, all versions starting from 15.3 before 15.3.2. GitLab's Zentao integration has an insecure direct object reference vulnerability that may be exploited ...

Zimbra Releases Patch for Actively Exploited Vulnerability in its Collaboration Suite

Zimbra has released patches to contain an actively exploited security flaw in its enterprise collaboration suite that could be leveraged to upload arbitrary files to vulnerable instances. Tracked as CVE-2022-41352 CVSS score: 9.8, the issue affects a component of the Zimbra suite called Amavis, a...

CALDERA 跨站脚本漏洞

CALDERA is an open source cybersecurity platform from The MITRE Corporation. Designed to easily automate adversary emulation, assist with manual red teaming, and automate incident response. A security vulnerability exists in CALDERA versions prior to 4.1.0. An attacker exploited the vulnerability...

CALDERA 跨站脚本漏洞

CALDERA is an open source cybersecurity platform from The MITRE Corporation. Designed to easily automate adversary emulation, assist with manual red teaming, and automate incident response. A security vulnerability exists in CALDERA version 4.1.0. An attacker exploited the vulnerability to execut...

CVE-2017-20149

The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on t...

Researchers Reveal Detail for Windows Zero-Day Vulnerability Patched Last Month

Details have emerged about a now-patched security flaw in Windows Common Log File System CLFS that could be exploited by an attacker to gain elevated permissions on compromised machines. Tracked as CVE-2022-37969 CVSS score: 7.8, the issue was addressed by Microsoft as part of its Patch Tuesday...

Dell GeoDrive Information Disclosure Vulnerability

Dell GeoDrive is a free application from Dell, Inc. It provides access to Dell EMC ECS and Atmos storage from Microsoft Windows desktops and servers. An information disclosure vulnerability exists in Dell GeoDrive versions 2.1 and later, 2.2 and earlier. The vulnerability arises from insufficient...

Microsoft Windows Portable Device Enumerator Service Security Feature Bypass Vulnerability

Microsoft Windows is an operating system for personal devices from Microsoft Corporation USA.A security feature bypass vulnerability exists in Microsoft Windows Portable Device Enumerator Service, which could be exploited by an attacker to compromise the confidentiality, integrity, or The...

Microsoft Windows Web Account Manager Information Disclosure Vulnerability

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.Microsoft Windows Web Account Manager is vulnerable to an information disclosure vulnerability that stems from inadequate protection of sensitive information on network systems or products, which...

SAP 3D Visual Enterprise Author Buffer Overflow Vulnerability (CNVD-2022-69691)

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by an attacker to...

Microsoft Windows Server Remotely Accessible Registry Keys Information Disclosure Vulnerability

Microsoft Windows Server Remotely Accessible Registry Keys is vulnerable to information disclosure, which results from inadequate protection of sensitive information on network systems or products. The vulnerability is caused by inadequate protection of sensitive information in network systems or...

Microsoft Windows Storage Elevation of Privilege Vulnerability

Microsoft Windows Storage is an elevation of privilege vulnerability in Microsoft Windows Storage, which results from the improper assignment of privileges to applications and can be exploited by attackers to cause an elevation of privilege...

SAP 3D Visual Enterprise Author Buffer Overflow Vulnerability (CNVD-2022-69695)

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and can be exploited by an attacker to...

SAP 3D Visual Enterprise Author Buffer Overflow Vulnerability

SAP 3D Visual Enterprise Author is a desktop application from SAP Germany for managing 2D, 3D, animation, video and audio assets. SAP 3D Visual Enterprise Author suffers from a buffer overflow vulnerability that stems from a lack of proper memory management and could be exploited by an attacker t...

Critical Bug in Siemens SIMATIC PLCs Could Let Attackers Steal Cryptographic Keys

A vulnerability in Siemens Simatic programmable logic controller PLC can be exploited to retrieve the hard-coded, global private cryptographic keys and seize control of the devices. "An attacker can use these keys to perform multiple advanced attacks against Siemens SIMATIC devices and the relate...