TCL LinkHub Mesh Wi-Fi ucloud_set_node_location Function Stack Buffer Overflow Vulnerability

TCL LinkHub Mesh Wi-Fi is a router from TCL. The TCL LinkHub Mesh Wi-Fi ucloudsetnodelocation feature is vulnerable to a stack buffer overflow vulnerability that can be exploited by attackers to cause a buffer overflow...

F5 NGINX Ingress Controller Input Validation Error Vulnerability

NGINX Ingress Controller is an application from F5 that works with NGINX and NGINX Plus and supports the standard ingress features - content-based routing and TLS / SSL offload. Ingress objects can be exploited by an attacker to obtain all available secret objects in the NGINX Ingress Controller...

F5 BIG-IP Message Routing MQTT Denial of Service Vulnerability

F5 BIG-IP APM Edge Client for Windows is a client access control authentication access client application from F5. A denial of service vulnerability exists in F5 BIG-IP Message Routing MQTT, which stems from an undisclosed Message Routing MR Message Queue Telemetry Transport MQTT profile when...

F5 NGINX Instance Manager Denial of Service Vulnerability

NGINX Instance Manager NIM is part of F5's NGINX Management Suite NMS.The NIM module provides a REST API that uses standard authentication methods and HTTP response code, among other things.A denial of service vulnerability exists in F5 NGINX Instance Manager, which stems from a When using NGINX...

IBM PowerVM VIOS Denial of Service Vulnerability

IBM PowerVM VIOS is an American Universal Business Machines IBM software located in a logical partition. The software helps to share physical I/O resources between client logical partitions within a server. A denial of service vulnerability exists in IBM PowerVM VIOS version 3.1, which arises fro...

CVE-2022-2552

creationtimestamp| type| source ---|---|--- 2022-08-01 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/50993 2024-12-14 08:45:24+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2022/CVE-2022-2552.yaml 2026-09-01 20:01:32+00:00| seen|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...

VMware Spring Cloud Gateway 3.0 < 3.0.7 / 3.1 < 3.1.1 Code Injection

The version of Spring Cloud Gateway running on the remote host is affected by a code injection vulnerability. Applications are vulnerable to a code injection attack when the Gateway Actuator endpoint is enabled, exposed and unsecured. A remote attacker could make a maliciously crafted request tha...

Double free

SimpleNetwork TCP Server commit 29bc615f0d9910eb2f59aa8dff1f54f0e3af4496 was discovered to contain a double free vulnerability which is exploited via crafted TCP packets...

IBM Security Verify Information Queue Information Disclosure Vulnerability (CNVD-2022-55635)

IBM Security Verify Information Queue is an integration product from IBM of America, Inc. Leverages Kafka technology and a publish/subscribe model to integrate data between IBM Security products. IBM Security Verify Information Queue version 10.0.2 is vulnerable to an information disclosure...

WordPress Sygnoos Popup Builder Cross-Site Request Forgery Vulnerability

WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site request forgery vulnerability exists in WordPress Sygnoos Popup Builder 4.1.11 and prior versions, which arises from a web applicatio...

CVE-2022-35653

creationtimestamp| type| source ---|---|--- 2022-07-25 20:33:13+00:00| seen| https://t.me/cibsecurity/46937 2023-11-17 04:55:23+00:00| seen| https://t.me/arpsyndicate/203 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-04 00:00:00+00:00|...

CVE-2021-40335 Cross Site Request Forgery (CSRF) in Hitachi Energy’s MSM Product

A vulnerability exists in the HTTP web interface where the web interface does not sufficiently verify if a well-formed, valid, consistent request was intentionally provided by the user who submitted the request. This cause a Cross Site Request Forgery CSRF, which if exploited could lead an attack...

Critical Vulnerabilities in Multiple Atlassian Products being exploited-in-wild

Threat Level Vulnerability Report For a detailed advisory, download the pdf file here Summary Atlassian has released patches to address a critical security flaw, being tracked as CVE-2022-26138 involving the usage of hard-coded credentials in the Questions For Confluence app for Confluence Server...

Duplicate Advisory GHSA-hrgx-p36p-89q4

Duplicate Advisory This advisory is a duplicate of GHSA-hrgx-p36p-89q4. This link is maintained to preserve external references. Original Description PrestaShop 1.6.0.10 through 1.7.x before 1.7.8.2 allows remote attackers to execute arbitrary code, aka a "previously unknown vulnerability chain"...

SAP NetWeaver Enterprise Portal Cross-Site Scripting Vulnerability (CNVD-2022-56941)

SAP NetWeaver Enterprise Portal is a web front-end component of SAP NetWeaver. A cross-site scripting vulnerability exists in SAP NetWeaver Enterprise Portal, which can be exploited by attackers to view or modify information...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2022-54318)

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server 8.0.28 and earlier versions have a denial-of-service vulnerability in the Server: Optimizer component, which can be exploited by attackers to cause MySQL Server to hang or crash...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2022-54319)

Oracle MySQL Server is a relational database from Oracle Corporation. Oracle MySQL Server 8.0.28 and earlier versions have a denial-of-service vulnerability in the Server: Optimizer component, which can be exploited by attackers to cause MySQL Server to hang or crash...

Microsoft Office Most Exploited Software in Malware Attacks – Report

By Deeba Ahmed Research reveals that around 80% of all malware attacks used MS Office flaws. Atlas VPN has shared its… This is a post from HackRead.com Read the original post: Microsoft Office Most Exploited Software in Malware Attacks - Report...

Atlassian Rolls Out Security Patch for Critical Confluence Vulnerability

Atlassian has rolled out fixes to remediate a critical security vulnerability pertaining to the use of hard-coded credentials affecting the Questions For Confluence app for Confluence Server and Confluence Data Center. The flaw, tracked as CVE-2022-26138, arises when the app in question is enable...