6932 matches found
Online Diagnostic Lab Management System Code Issue Vulnerability
Online Diagnostic Lab Management System is an online diagnostic lab management system. version v1.0 of Online Diagnostic Lab Management System contains a security vulnerability that can be exploited by attackers to execute arbitrary code via crafted PHP files...
Hackers Exploiting Unpatched RCE Flaw in Zimbra Collaboration Suite
A severe remote code execution vulnerability in Zimbra's enterprise collaboration software and email platform is being actively exploited, with no patch currently available to remediate the issue. The shortcoming, assigned CVE-2022-41352, carries a critical-severity rating of CVSS 9.8, providing ...
CVE-2022-39285
creationtimestamp| type| source ---|---|--- 2022-10-08 00:17:32+00:00| seen| https://t.me/cibsecurity/51026 2023-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51071...
CVE-2022-40684
creationtimestamp| type| source ---|---|--- 2022-10-07 18:59:08+00:00| seen| https://t.me/thehackernews/2649 2022-10-09 20:31:28+00:00| seen| Telegram/l-OuTtmFyR4QFpCSnD7VkipngfhaVtCiF77KFrEfeOSN1s 2022-10-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=888 2022-10-10...
Top CVEs Actively Exploited by People’s Republic of China State-Sponsored Cyber Actors
CISA, the Federal Bureau of Investigation FBI, and the National Security Agency NSA have released a joint Cybersecurity Advisory CSA providing the top Common Vulnerabilities and Exposures CVEs used since 2020 by People’s Republic of China PRC state-sponsored cyber actors. PRC state-sponsored cybe...
CVE-2022-2840
creationtimestamp| type| source ---|---|--- 2022-10-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51024...
Fedora: Security Advisory for chromium (FEDORA-2022-3ca063941b)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-35914
creationtimestamp| type| source ---|---|--- 2022-10-04 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6910 2022-10-10 16:30:23+00:00| published-proof-of-concept| https://t.me/MrVGunz/553 2022-10-11 16:30:21+00:00| published-proof-of-concept|...
Fedora: Security Advisory for chromium (FEDORA-2022-3f28aa88cf)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-35155
creationtimestamp| type| source ---|---|--- 2022-09-30 22:36:26+00:00| seen| https://t.me/cibsecurity/50798 2023-03-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51054 2025-11-13 21:02:36+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m5k2tmltm62a...
Microsoft Confirms Two 0-Days Being Exploited Against Exchange Servers
By Deeba Ahmed The latest attack against Exchange servers utilizes at least two new flaws CVE-2022-41040, CVE-2022-41082 that have been assigned CVSS scores of 6.3 and 8.8. This is a post from HackRead.com Read the original post: Microsoft Confirms Two 0-Days Being Exploited Against Exchange Serv...
CVE-2022-41082
creationtimestamp| type| source ---|---|--- 2022-09-30 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=883 2022-09-30 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/09/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/...
Cisco IOS XE SD-WAN Software and SD-WAN Software Path Traversal Vulnerability
Cisco IOS XE SD-WAN Software and Cisco SD-WAN are both products of Cisco U.S.A. Cisco IOS XE SD-WAN Software is a software for network management software-defined networking applied to the Cisco IOS XE network operating system. The Cisco IOS XE SD-WAN and Cisco SD-WAN are vulnerable to a path...
Aruba Networks ArubaOS and InstantOS Denial of Service Vulnerabilities
ArubaOS is the network operating system for Aruba Mobility Controllers, Mobility Masters, and controller-managed Access Points APs.InstantOS is an Arch Linux-based distribution. A denial of service vulnerability exists in Aruba Networks ArubaOS and InstantOS. The vulnerability stems from a progra...
WordPress Simple Bitcoin Faucets Cross-Site Request Forgery Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. Cross-site request forgery...
WordPress Awesome Filterable Portfolio Cross-Site Scripting Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
NetApp SnapCenter 路径遍历漏洞
NetApp SnapCenter is a suite of applications from Network Appliance NetApp that provides the ability to back up, verify, clone, and restore NetApp storage systems. A security vulnerability exists in NetApp SnapCenter. An attacker exploited the vulnerability to gain access to data in order to read...
Fedora: Security Advisory for mingw-poppler (FEDORA-2022-f7b375eae8)
The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2022-2941
creationtimestamp| type| source ---|---|--- 2022-09-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51020 2025-12-19 20:18:03+00:00| seen| https://t.me/Dooztoria/22...
CISA Has Added One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to it's Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: To view the newly added...