Patch Tuesday: Microsoft Issues Fix for Actively Exploited 'Follina' Vulnerability

Microsoft finally released fixes to address an actively exploited Windows zero-day vulnerability known as Follina as part of its Patch Tuesday updates. Also addressed by the tech giant are 55 other flaws, three of which are rated Critical, 51 are rated Important, and one is rated Moderate in...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50934)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

Siemens SICAM GridEdge Source Authentication Error Vulnerability

SICAM GridEdge enables IoT functionality in your existing IEC61850 devices with just a few clicks.A source authentication error vulnerability in Siemens SICAM GridEdge is caused by the fact that the affected software does not apply cross-domain resource sharing CORS restrictions to critical...

Siemens SINEMA Remote Connect Server Access Control Error Vulnerability (CNVD-2022-45224)

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.An access control error vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from the...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50939)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2022-50941)

SAP 3D Visual Enterprise Viewer is a 3D view viewer from SAP Germany. The software supports publishing 2D and 3D scenes in all industry-standard desktop applications and supports separate installations as standalone executables and ActiveX spaces. The vulnerability can be exploited to crash the...

Siemens SINEMA Remote Connect Server Cross-Site Scripting Vulnerability (CNVD-2022-45230)

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.A cross-site scripting vulnerability exists in Siemens SINEMA Remote Connect Server, which could be...

CISA Adds One Known Exploited Vulnerability to Catalog 

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

Samsung mobile DisplayToast Information Disclosure Vulnerability (CNVD-2022-67286)

Samsung mobile is a cell phone from Samsung South Korea. Samsung mobile DisplayToast is vulnerable to information disclosure. The vulnerability stems from an unprotected broadcast in sendIntentForToastDumpLog in DisplayToast, which could be exploited to allow untrusted applications to access toas...

Idea LMS SQL Injection Vulnerability

Idea LMS is a CMS. A SQL injection vulnerability exists in Idea LMS version 2022, which can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data...

IBM Spectrum Copy Data Management Information Disclosure Vulnerability (CNVD-2022-51662)

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an information disclosure vulnerability that stems from a lack of protection for sensitive information and could be exploited by attackers to The...

Powertek PDU Certification Bypass Vulnerability

Powertek, a company that manufactures data center-grade intelligent PDUs power distribution units, or heavy-duty power cords for server racks, has an authentication bypass vulnerability that can be exploited by an attacker to bypass active session authorization checks. It can then be used to gain...

Prison Management System Cross-Site Scripting Vulnerability

Prison Management System is a prison management system from Carlo Montero's personal developer. version 1.0 of Prison Management System contains a cross-site scripting vulnerability that could be exploited to inject arbitrary html and script code into a website...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48406)

Prison Management System is a prison management system from Carlo Montero's personal developer. version 1.0 of Prison Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

HumHub Cross-Site Scripting Vulnerability Security Vulnerability (CNVD-2022-82658)

HumHub is a set of open source social networking software written on the Yii PHP framework. HumHub suffers from a cross-site scripting vulnerability that stems from a component's lack of data filtering and escaping, which can be exploited by attackers to cause cross-site scripting...

CVE-2022-31214

creationtimestamp| type| source ---|---|--- 2022-06-09 20:33:49+00:00| seen| https://t.me/cibsecurity/44133 2024-07-17 10:52:06+00:00| exploited| https://t.me/SEReborn/4952 2025-11-15 12:40:09+00:00| published-proof-of-concept| https://t.me/SEReborn/6030 2026-07-20 17:37:05+00:00| seen|...

Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices

After a decent amount of pressure, Owl Labs has finally released updates for vulnerabilities in Meeting Owl, and Whiteboard Owl cameras. The vulnerabilities were reported to Owl Labs in January, One of the vulnerabilities, CVE-2022-31460 has been added to the Known exploited vulnerabilities catal...

CVE-2022-31462

creationtimestamp| type| source ---|---|--- 2022-06-09 11:00:09+00:00| seen| https://t.me/truesecator/3043 2023-09-21 00:19:08+00:00| exploited| https://t.me/itsecnews/3246...

CVE-2022-31463

creationtimestamp| type| source ---|---|--- 2022-06-09 11:00:09+00:00| seen| https://t.me/truesecator/3043 2023-09-21 00:19:08+00:00| exploited| https://t.me/itsecnews/3246...

CVE-2022-31459

creationtimestamp| type| source ---|---|--- 2022-06-09 11:00:09+00:00| seen| https://t.me/truesecator/3043 2023-09-21 00:19:08+00:00| exploited| https://t.me/itsecnews/3246 2024-01-08 17:45:54+00:00| seen| https://t.me/arpsyndicate/2661...