Google Android Code Execution Vulnerability (CNVD-2022-89774)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to run arbitrary code on the system...

Information Leakage Vulnerability in Huatian Power Collaboration Office System

Dalian Huatian Software Co., Ltd. is a high-tech enterprise organized in accordance with the international advanced management mode and system, and is a collaborative management software company known for its leading technology. An information leakage vulnerability exists in Huatian Power...

Fortinet Releases Security Updates for FortiOS

Fortinet has released security updates to address a heap-based buffer overflow vulnerability CVE-2022-42475 in FortiOS. An attacker could exploit this vulnerability to take control of an affected system. This vulnerability has been exploited in the wild. CISA encourages users and administrators t...

Tenda W30E Stack Overflow Vulnerability

Tenda W30E is a router from Tenda, a Chinese company. Tenda W30E is vulnerable to a stack overflow vulnerability that can be exploited by attackers to cause a denial of service...

phpMyFAQ 跨站脚本漏洞

phpMyFAQ is a multi-language, fully database-driven FAQ system from the individual developer Thorsten Rinne. A security vulnerability exists in phpMyFAQ versions prior to 3.1.9. An attacker exploited the vulnerability to perform cross-site scripting attacks...

Log4j’s Log4Shell Vulnerability: One Year Later, It’s Still Lurking

Despite mitigation, one of the worst bugs in internet history is still prevalent—and being exploited...

CVE-2022-38754

A potential vulnerability has been identified in Micro Focus Operations Bridge - Containerized. The vulnerability could be exploited by a malicious authenticated OBM Operations Bridge Manager user to run Java Scripts in the browser context of another OBM user. Please note: The vulnerability is on...

Apache Solr 7.4.0 <= 7.7.3 / 8.0.0 <= 8.11.0 RCE

The version of Apache Solr running on the remote host is at least 7.4.0 through 7.7.3 or 8.0.0 through 8.11.0. It is, therefore, affected by a remote code execution vulnerability due to using a bundled version of the Apache Log4J library vulnerable to RCE. For full impact and additional detail...

CVE-2022-45359

creationtimestamp| type| source ---|---|--- 2022-12-07 00:41:00+00:00| seen| https://t.me/cibsecurity/54101 2022-12-26 17:22:22+00:00| exploited| https://t.me/truesecator/3878 2022-12-27 09:24:08+00:00| exploited| https://t.me/SecLabNews/13177 2023-02-01 02:23:19+00:00| published-proof-of-concept...

CVE-2022-46169

creationtimestamp| type| source ---|---|--- 2022-12-06 00:40:20+00:00| seen| https://t.me/cibsecurity/54031 2022-12-07 07:17:18+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3568 2022-12-07 11:01:06+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7314...

WordPress plugin Contest Gallery 跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

Oracle Linux 7 : libvirt (ELSA-2022-10062)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2022-10062 advisory. - security: fix SELinux label generation logic Daniel P. Berrange Orabug: 34773029 CVE-2021-3631 Tenable has extracted the preceding description block directly...

App Flaw Allowed Honda and Nissan Cars Hack by Knowing VIN number

By Habiba Rashid According to white hat hacker Sam Curry, once exploited, attackers could use the flaw to unlock the door, honk the horn, flash the lights, or even start the vehicle. This is a post from HackRead.com Read the original post: App Flaw Allowed Honda and Nissan Cars Hack by Knowing VI...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...

CVE-2022-25765

creationtimestamp| type| source ---|---|--- 2022-12-04 21:05:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3527 2022-12-06 04:04:20+00:00| published-proof-of-concept| https://t.me/crackcodes/1638 2022-12-06 06:38:55+00:00| published-proof-of-concept| https://t.me/simosaper/748...

Google Rolls Out New Chrome Browser Update to Patch Yet Another Zero-Day Vulnerability

Search giant Google on Friday released an out-of-band security update to fix a new actively exploited zero-day flaw in its Chrome web browser. The high-severity flaw, tracked as CVE-2022-4262, concerns a type confusion bug in the V8 JavaScript engine. Clement Lecigne of Google's Threat Analysis...

Google Chrome < 108.0.5359.94 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 108.0.5359.94. It is, therefore, affected by a vulnerability as referenced in the 202212stable-channel-update-for-desktop advisory. - Type Confusion in V8. CVE-2022-4262 Note that Nessus has not tested for this issue bu...

Google Chrome < 108.0.5359.94 Vulnerability

The version of Google Chrome installed on the remote macOS host is prior to 108.0.5359.94. It is, therefore, affected by a vulnerability as referenced in the 202212stable-channel-update-for-desktop advisory. - Type Confusion in V8. CVE-2022-4262 Note that Nessus has not tested for this issue but...

CVE-2022-3696

creationtimestamp| type| source ---|---|--- 2022-12-01 20:36:49+00:00| seen| https://t.me/cibsecurity/53771 2022-12-07 10:30:06+00:00| exploited| https://t.me/truesecator/3794...

CVE-2022-45045

creationtimestamp| type| source ---|---|--- 2022-12-01 07:30:40+00:00| exploited| https://t.me/cibsecurity/53750 2026-06-19 12:47:01+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c126a7e1-74dc-4b78-8c8c-0d6d64e7919b...