Google Android elevation of privilege vulnerability (CNVD-2022-32842)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to escalate privileges...

CVE-2021-31297

creationtimestamp| type| source ---|---|--- 2022-04-21 08:34:18+00:00| exploited| https://t.me/itsecnews/520 2022-04-21 16:39:23+00:00| exploited| https://t.me/NeKaspersky/2147...

Weekly Threat Digest: 11 – 17 April 2022

For a detailed threat digest, download the pdf file here Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 765 14 1 2 6 25 The third week of April 2022 witnessed a huge spike on the discovery of 765 vulnerabilities out of...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32784)

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of C libraries, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to provide specially formatted malformed files to cause...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64094)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.158,...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32782)

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of C libraries, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to provide specially formatted malformed files to cause...

Hackers Exploiting Recently Reported Windows Print Spooler Vulnerability in the Wild

A security flaw in the Windows Print Spooler component that was patched by Microsoft in February is being actively exploited in the wild, the U.S. Cybersecurity and Infrastructure Security Agency CISA has warned. To that end, the agency has added the shortcoming to its Known Exploited...

Spring4Shell Vulnerability CVE-2022-22965 Exploited to Deploy Cryptocurrency Miners

Recently, we observed the Spring4Shell vulnerability — a remote code execution bug, assigned as CVE-2022-22965 — being actively exploited by malicious actors to deploy cryptocurrency miners...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-44611)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability that could be exploited by attackers to cause a local privilege escalation that requires system execution privileges...

CVE-2022-29153

creationtimestamp| type| source ---|---|--- 2022-04-19 20:24:31+00:00| seen| https://t.me/cibsecurity/41103 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-10...

CVE-2022-29464

creationtimestamp| type| source ---|---|--- 2022-04-19 02:23:44+00:00| seen| https://t.me/cibsecurity/41082 2022-04-20 23:48:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1993 2022-04-21 08:52:01+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1969 2022-04-21...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly...

Cisco SD-WAN vManage Software Cross-Site Request Forgery Vulnerability

Cisco SD-WAN vManage Software is a management software for SD-WAN Software Defined Wide Area Network solutions from Cisco, U.S. A cross-site request forgery vulnerability exists in Cisco SD-WAN vManage Software, which can be exploited by attackers to perform arbitrary actions at the affected user...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-42139)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability, which stems from incorrectly entered authentication and can be exploited by attackers to cause a local privilege escalation...

Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches拒绝服务漏洞

Cisco Catalyst Digital Building Series Switches is a series of digital building switches from Cisco, U.S. Cisco Catalyst Digital Building Series Switches and Cisco Catalyst Micro Switches have a denial of service vulnerability that can be exploited by an attacker to cause a permanent denial of...

Asterisk SQL Injection Vulnerability

Asterisk is a PBX system software that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols.Asterisk suffers from a SQL injection vulnerability that can be exploited by attackers to cause user-supplied data to create corrupt SQL queries or possibly SQL injections...

CScms SQL Injection Vulnerability (CNVD-2022-33152)

CScms is a content management system CMS developed based on the CI framework. cscms Music Portal System v4.2 is vulnerable to SQL injection, which can be exploited by attackers via the component danceLists.phpzhuan...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32796)

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to control the size of the memory set that appears when calling utilformat in srunix/utiloutput...

FIS GT.M Denial of Service Vulnerability (CNVD-2022-32798)

FIS GT.M is a database platform. A security vulnerability exists in versions of FIS GT.M prior to V7.0-000, which can be exploited by an attacker to cause a size variable stored as a signed integer to equal a very large value, which is interpreted as a negative value during a check. This value is...

QNAP QTS / QuTS hero Command Injection (QSA-21-05)

The version of QNAP QTS or QuTS hero on the remote host is affected by a command injection vulnerability. If exploited, this vulnerability allows attackers to execute arbitrary commands in a compromised application. Note that Nessus has not tested for this issue but has instead relied only on the...