Foxit PDF Reader Annotation Remote Code Execution Vulnerability (CNVD-2023-07880)

Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in Foxit PDF Reader Annotation, which can be exploited by attackers to execute code in the context of the current process...

Emlog Cross-Site Scripting Vulnerability (CNVD-2022-68881)

Emlog is a PHP and MySQL based CMS website building system. A security vulnerability exists in Emlog Pro version 1.2.2 and earlier, which can be exploited by a registered and logged-in attacker to launch cross-site scripting attacks...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly adde...

Simple Client Management System SQL注入漏洞（CNVD-2022-57771）

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to a SQL injection vulnerability that originates in /cms/admin/?page=user/ The vulnerability is caused by the lack of validati...

Totolink N200RE and N100RE Cross-Site Scripting Vulnerability

Totolink N200RE and Totolink N100RE are routers from Totolink.Totolink N200RE and N100RE are vulnerable to cross-site scripting, which can be exploited by attackers to execute arbitrary web scripts or HTML...

Insurance Management System SQL Injection Vulnerability (CNVD-2022-85119)

Insurance Management System is an insurance management system from the personal developer Angel Jude Reyes Suarez. Insurance Management System 1.0 is vulnerable to SQL injection, which could be exploited by attackers to obtain information about data in the target system...

HCL Technologies HCL Sametime File Upload Vulnerability

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6. The vulnerability stems from the fact that the user SID in the application can be modified, which can be exploited to modify the SID to enable arbitrary file...

HCL Technologies HCL Sametime Information Disclosure Vulnerability

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6 that stems from a lack of external URL absorption in FaviconService, which could be exploited by an attacker to specify the external URL where the online meeting...

MicroStrategy Web SDK Cross-Site Scripting Vulnerability (CNVD-2022-77860)

MicroStrategy Web SDK is a JavaScript library from MicroStrategy, Inc. It interacts with different CARTO APIs to build custom applications on top of deck.gl that utilize vector rendering. MicroStrategy Web SDK version 10.11 and earlier versions contain a cross-site scripting vulnerability that...

Foxit PDF Reader Doc Object Remote Code Execution Vulnerability (CNVD-2023-07905)

Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in the Foxit PDF Reader Doc object, which can be exploited by attackers to execute code in the context of the current process...

TokenType mismatch with true type can be exploited to steal funds

Lines of code Vulnerability details A vault can be created for different TokenTypes, namely ERC20 and ERC721. These tokens have different logic, so a user needs to pass the type of the underlying token when creating a vault. At the end of createVault the user's tokens are pulled into the contract...

CVE-2022-29383

creationtimestamp| type| source ---|---|--- 2022-05-13 16:27:50+00:00| seen| https://t.me/cibsecurity/42637 2022-05-15 19:21:39+00:00| published-proof-of-concept| https://t.me/cKure/9528 2022-07-04 20:35:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6007 2025-01-26...

CVE-2022-30525

creationtimestamp| type| source ---|---|--- 2022-05-13 11:25:05+00:00| exploited| https://t.me/truesecator/2938 2022-05-13 13:01:51+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2180 2022-05-13 18:18:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2182 2022-05-14...

CVE-2017-1000170

creationtimestamp| type| source ---|---|--- 2022-05-13 01:11:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-p739-9479-5wr2 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-11-14 00:00:00+00:00| seen| The Shadowserver...

Cambium Networks cnMaestro OS Command Injection Vulnerability (CNVD-2022-64235)

Cambium Networks cnMaestro is a cloud-based or native software platform from Cambium Networks for secure end-to-end network control. Cambium Networks cnMaestro suffers from an operating system command injection vulnerability that can be exploited by an attacker to gain root privileges...

CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog

CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog due to a risk of authentication failures when the May 10, 2022 Microsoft rollup update is applied to domain controllers. After installing May 10, 2022 rollup update on domain controllers, organizations migh...

CVE-2022-29303

creationtimestamp| type| source ---|---|--- 2022-05-12 20:42:12+00:00| seen| https://t.me/cibsecurity/42525 2022-05-31 22:59:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2336 2023-07-06 08:56:30+00:00| seen| https://t.me/ctinow/122117 2023-07-13 15:10:02+00:00| seen|...

CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability

.jpg The U.S. Cybersecurity and Infrastructure Security Agency CISA has added the recently disclosed F5 BIG-IP flaw to its Known Exploited Vulnerabilities Catalog following reports of active abuse in the wild. The flaw, assigned the identifier CVE-2022-1388 CVSS score: 9.8, concerns a critical bu...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50671)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418c24 function, which can be exploited by attackers ...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50672)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418f10 function, which can be exploited by attackers ...