CVE-2022-24260

creationtimestamp| type| source ---|---|--- 2022-02-04 20:31:01+00:00| seen| https://t.me/cibsecurity/36865 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-02-21 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

CVE-2021-37852

creationtimestamp| type| source ---|---|--- 2022-02-02 13:32:10+00:00| seen| https://t.me/informationsecuritychannel/46518 2022-02-03 16:00:44+00:00| exploited| https://t.me/truesecator/2588 2026-09-01 20:01:57+00:00| seen| https://t.me/hackingAttack/41284 2026-09-02 01:02:18+00:00| seen|...

Twelve-Year-Old Linux Vulnerability Discovered and Patched

Its a privilege escalation vulnerability: Linux users on Tuesday got a major dose of bad news -- a 12-year-old vulnerability in a system tool called Polkit gives attackers unfettered root privileges on machines running most major distributions of the open source operating system. Previously calle...

File Upload Vulnerability in Flash Flood Monitoring and Early Warning System of Siltronic Ltd (CNVD-2022-16624)

Siltronic Ltd. is a technology-based enterprise dedicated to the cause of disaster prevention and mitigation in China. A file upload vulnerability exists in the Flash Flood Monitoring and Early Warning System of Sicron Technology Co. Ltd, which can be exploited by attackers to gain control of the...

Code injection

HTML code injection vulnerability in Android Application, Bosch Video Security, version 3.2.3. or earlier, when successfully exploited allows an attacker to inject random HTML code into a component loaded by WebView, thus allowing the Application to display web resources controlled by the attacke...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09556)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09545)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09548)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09546)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09157)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09156)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09554)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09550)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

CISA Adds Eight Known Exploited Vulnerabilities to Catalog

CISA has added eight new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types...

Cesanta MJS Denial of Service Vulnerability (CNVD-2022-09555)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland. cesanta MJS denial of service vulnerability can be exploited by attackers to cause a denial of service...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09549)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09553)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Cesanta MJS Buffer Overflow Vulnerability (CNVD-2022-09551)

Cesanta MJS is an embedded JavaScript engine for C/C from Cesanta Ireland.Cesanta MJS buffer overflow vulnerability can be exploited by attackers to cause a buffer overflow...

Update now! Apple patches another actively used zero-day

Apple has released patches for iOS 15.3, iPadOS 15.3, and macOS Monterey 12.2 and is urging users to update. The most significant reasons are two actively exploited zero-day vulnerabilities, one of which has a publicly disclosed Proof-of-Concept PoC. Using this vulnerability, designated...