Samsung mobile DisplayToast Information Disclosure Vulnerability (CNVD-2022-67286)

Samsung mobile is a cell phone from Samsung South Korea. Samsung mobile DisplayToast is vulnerable to information disclosure. The vulnerability stems from an unprotected broadcast in sendIntentForToastDumpLog in DisplayToast, which could be exploited to allow untrusted applications to access toas...

CISA Adds One Known Exploited Vulnerability to Catalog 

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

IBM Spectrum Copy Data Management Information Disclosure Vulnerability (CNVD-2022-51662)

IBM Spectrum Copy Data Management, an IBM company that modernizes, simplifies and automates data center copy management processes, is vulnerable to an information disclosure vulnerability that stems from a lack of protection for sensitive information and could be exploited by attackers to The...

Idea LMS SQL Injection Vulnerability

Idea LMS is a CMS. A SQL injection vulnerability exists in Idea LMS version 2022, which can be exploited by an attacker to execute illegal SQL commands to steal sensitive database data...

Powertek PDU Certification Bypass Vulnerability

Powertek, a company that manufactures data center-grade intelligent PDUs power distribution units, or heavy-duty power cords for server racks, has an authentication bypass vulnerability that can be exploited by an attacker to bypass active session authorization checks. It can then be used to gain...

Prison Management System Cross-Site Scripting Vulnerability

Prison Management System is a prison management system from Carlo Montero's personal developer. version 1.0 of Prison Management System contains a cross-site scripting vulnerability that could be exploited to inject arbitrary html and script code into a website...

Prison Management System SQL Injection Vulnerability (CNVD-2022-48406)

Prison Management System is a prison management system from Carlo Montero's personal developer. version 1.0 of Prison Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

HumHub Cross-Site Scripting Vulnerability Security Vulnerability (CNVD-2022-82658)

HumHub is a set of open source social networking software written on the Yii PHP framework. HumHub suffers from a cross-site scripting vulnerability that stems from a component's lack of data filtering and escaping, which can be exploited by attackers to cause cross-site scripting...

CVE-2022-31214

creationtimestamp| type| source ---|---|--- 2022-06-09 20:33:49+00:00| seen| https://t.me/cibsecurity/44133 2024-07-17 10:52:06+00:00| exploited| https://t.me/SEReborn/4952 2025-11-15 12:40:09+00:00| published-proof-of-concept| https://t.me/SEReborn/6030 2026-07-20 17:37:05+00:00| seen|...

Update now! Patch against vulnerabilities in Meeting Owl Pro and Whiteboard Owl devices

After a decent amount of pressure, Owl Labs has finally released updates for vulnerabilities in Meeting Owl, and Whiteboard Owl cameras. The vulnerabilities were reported to Owl Labs in January, One of the vulnerabilities, CVE-2022-31460 has been added to the Known exploited vulnerabilities catal...

CVE-2022-31462

creationtimestamp| type| source ---|---|--- 2022-06-09 11:00:09+00:00| seen| https://t.me/truesecator/3043 2023-09-21 00:19:08+00:00| exploited| https://t.me/itsecnews/3246...

CVE-2022-31463

creationtimestamp| type| source ---|---|--- 2022-06-09 11:00:09+00:00| seen| https://t.me/truesecator/3043 2023-09-21 00:19:08+00:00| exploited| https://t.me/itsecnews/3246...

CVE-2022-31461

creationtimestamp| type| source ---|---|--- 2022-06-09 11:00:09+00:00| seen| https://t.me/truesecator/3043 2023-09-21 00:19:08+00:00| exploited| https://t.me/itsecnews/3246...

CVE-2022-31459

creationtimestamp| type| source ---|---|--- 2022-06-09 11:00:09+00:00| seen| https://t.me/truesecator/3043 2023-09-21 00:19:08+00:00| exploited| https://t.me/itsecnews/3246 2024-01-08 17:45:54+00:00| seen| https://t.me/arpsyndicate/2661...

CISA Adds Three Known Exploited Vulnerabilities to Catalog  

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly...

Online Fire Reporting System SQL注入漏洞

Online Fire Reporting System is an online fire reporting system from Carlo Montero's personal developer. version v1.0 of Online Fire Reporting System is vulnerable to SQL injection, which originates from /ofrs/classes/Master.php?f= deleteteam lacks validation of external input SQL statements, whi...

Badminton Center Management System SQL注入漏洞（CNVD-2022-44723）

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records.Badminton Center Management System version v1.0 is vulnerable to SQ...

Badminton Center Management System SQL注入漏洞（CNVD-2022-44735）

Badminton Center Management System is a badminton center management system from Carlo Montero's personal developer. It provides an online and automated platform for badminton centers to manage their daily transactions and records. version v1.0 of Badminton Center Management System is vulnerable t...

SialWeb CMS SQL Injection Vulnerability

SialWeb CMS is a content management system from SialWeb Pakistan. SQL injection vulnerability exists in SialWeb CMS, which can be exploited by attackers to manipulate the parameter Id to cause sql injection...

Online Ordering System SQL Injection Vulnerability (CNVD-2022-55722)

Online Ordering System is a multi-store ordering system that can be used by any small business.An SQL injection vulnerability exists in Online Ordering System version 2.3.2, which originates from /ordering/admin/products/index.php?view=edit&id = The page lacks validation for external input SQL...