CVE-2022-22620

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Monterey 12.2.1, iOS 15.3.1 and iPadOS 15.3.1, Safari 15.3 v. 16612.4.9.1.8 and 15612.4.9.1.8. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a...

CVE-2022-0971

creationtimestamp| type| source ---|---|--- 2022-03-17 12:50:00+00:00| exploited| https://t.me/truesecator/2742 2022-03-17 18:36:58+00:00| exploited| https://t.me/piratesofyemen/613 2022-03-17 18:37:01+00:00| exploited| https://t.me/piratesofyemen1213/446 2022-03-17 18:37:11+00:00| exploited|...

Multiple TotoLink Product Command Injection Vulnerabilities (CNVD-2022-47974)

Totolink A830R/A3100R/A950RG/A800R/A3000RU/A810R products are one of the routers from Totolink China. A command injection vulnerability exists in several TotoLink products. The vulnerability stems from the failure of the hosttime parameter in the NTPSyncWithHost function to properly filter the...

CVE-2022-0811

creationtimestamp| type| source ---|---|--- 2022-03-16 17:20:37+00:00| seen| https://t.me/cibsecurity/39034 2022-03-17 08:46:54+00:00| published-proof-of-concept| https://t.me/cKure/9049 2022-03-17 14:30:04+00:00| published-proof-of-concept| https://t.me/truesecator/2743 2022-03-17 17:37:10+00:00...

Apple iOS, iPadOS, and macOS Monterey Permissions Licensing and Access Control Issues Vulnerability

Apple iOS and Apple iPadOS are products of Apple, Inc. Apple iOS is an operating system developed for mobile devices. The vulnerability stems from the fact that FaceTime does not properly restrict access to resources from unauthorized roles, and can be exploited by an attacker with physical acces...

CVE-2022-25485

creationtimestamp| type| source ---|---|--- 2022-03-15 21:19:38+00:00| seen| https://t.me/cibsecurity/38964 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2022-25486

creationtimestamp| type| source ---|---|--- 2022-03-15 21:19:38+00:00| seen| https://t.me/cibsecurity/38965 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-03-16 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CISA Adds 15 Known Exploited Vulnerability to Catalog

CISA has added 15 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

Microsoft Windows AppX Deployment Service (AppXSVC) Privilege Escalation Vulnerability

A privilege escalation vulnerability exists when Windows AppXSVC improperly handles hard links. An attacker who successfully exploited this vulnerability could run processes in an elevated context...

CISA list of 95 new known exploited vulnerabilities raises questions

On Friday March 3, the Cybersecurity and Infrastructure Security Agency CISA added a whopping number of 95 new known exploited vulnerabilities to its Known Exploited Vulnerabilities Catalog. This catalog provides Federal Civilian Executive Branch FCEB agencies with a list of vulnerabilities that...

Adobe After Effects Out-of-Bounds Writing Vulnerability (CNVD-2022-22094)

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe, Inc. An out-of-bounds write vulnerability exists in Adobe After Effects processing files, which could be exploited by attackers to execute arbitrary code in the context of the current user...

Adobe After Effects Buffer Overflow Vulnerability (CNVD-2022-22096)

Adobe After Effects is a suite of visual effects and motion graphics software from Adobe, which is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

TP-Link TL-WR886N Stack Overflow Vulnerability (CNVD-2022-21168)

The TP-Link TL-WR886N is a wireless router from China P&L. A stack overflow vulnerability exists in the TP-Link TL-WR886N /cloudconfig/routerpost/checkregverifycode, which can be exploited by a remote attacker to submit a special request that can crash the application or can be used to execute...

CVE-2020-17456

creationtimestamp| type| source ---|---|--- 2022-03-12 17:21:36+00:00| published-proof-of-concept| https://t.me/intelexch/10571 2022-04-14 15:17:01+00:00| exploited| https://t.me/NeKaspersky/2117 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2024-12-29 00:00:00+00:00|...

RHEL 8 : kernel-rt (RHSA-2022:0822)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2022:0822 advisory. The kernel-rt packages provide the Real Time Linux Kernel, which enables fine-tuning for systems with extremely high determinism requirements. Securi...

Microsoft Windows ALPC Elevation of Privilege Vulnerability (CNVD-2022-78027)

Microsoft Windows ALPC is a C/S model technology developed by Microsoft to replace LPC for native RPC. Microsoft Windows ALPC has an elevation of privilege vulnerability that can be exploited to gain elevated privileges on the system...

Microsoft Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability

Microsoft Windows Cloud Files Mini Filter Driver is a cloud file filter driver from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows Cloud Files Mini Filter Driver, which could be exploited by attackers to execute arbitrary code with elevated privilege...

Microsoft Paint 3D Remote Code Execution Vulnerability

Microsoft Paint 3D is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on the system...

CVE-2022-26143

The TP-240 aka tp240dvr component in Mitel MiCollab before 9.4 SP1 FP1 and MiVoice Business Express through 8.1 allows remote attackers to obtain sensitive information and cause a denial of service performance degradation and excessive outbound traffic. This was exploited in the wild in February...

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2022-59680)

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...