CVE-2022-31747

Mozilla developers Andrew McCreight, Nicolas B. Pierron, and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 100 and Firefox ESR 91.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to...

WordPress Poll Maker plugin跨站脚本漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. The WordPress plugin is an application plugin. Cross-site scripting vulnerabilities exist in versions of the WordPress Poll Maker plugin prior t...

Command Execution Vulnerability in WoSmart Top Shop Mall System

Zhejiang WoSmith Information Technology Co., Ltd. is a technology company specializing in mobile Internet technology development. There is a command execution vulnerability in WoSmith's list store mall system, which can be exploited by an attacker to gain control of the server...

QNAP QuTS hero Privilege Escalation Vulnerability (QSA-22-05)

QNAP QuTS hero is prone to a local privilege escalation vulnerability, also known as dirty pipe. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

Horner Automation Cscape Csfont Out-of-Bounds Reading Vulnerability

Horner Automation Cscape is a programming software for industrial control system development from Horner Automation, Inc. An out-of-bounds read vulnerability exists in Horner Automation Cscape Csfont, which can be exploited by attackers to execute arbitrary code...

F-secure Atlant Denial of Service Vulnerability

F-secure Atlant is a platform from the Finnish company F-secure for building applications that can scan and detect malicious files. a denial-of-service vulnerability exists in F-Secure Atlant, which can be exploited by attackers to crash the scanning engine by scanning the aemobile component...

CVE-2019-6260

creationtimestamp| type| source ---|---|--- 2022-05-26 15:37:56+00:00| seen| https://t.me/informationsecuritychannel/47562 2022-05-27 17:30:04+00:00| exploited| https://t.me/truesecator/2990...

Cisco IOS XR Software Health Check Open Port (cisco-sa-iosxr-redis-ABJyE5xK)

According to its self-reported version, Cisco IOS XR is affected by a vulnerability in the health check RPM due to a port that is open by default. An unauthenticated, remote attacker can exploit this, by connecting to the Redis instance on the open port, in order to read and write information...

Home Clean Services Management System SQL Injection Vulnerability

Home Clean Services Management System is a home cleaning service system. version 1.0 of Home Clean Services Management System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

CVE-2022-22675

An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in tvOS 15.5, watchOS 8.6, macOS Big Sur 11.6.6, macOS Monterey 12.3.1, iOS 15.4.1 and iPadOS 15.4.1. An application may be able to execute arbitrary code with kernel privileges. Apple is aware of a repo...

CVE-2022-25237

creationtimestamp| type| source ---|---|--- 2022-05-25 09:37:36+00:00| published-proof-of-concept| https://t.me/TopCyberTechNews/17 2025-01-21 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-21 2025-03-15 00:00:00+00:00| seen| The Shadowserver...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system. SQL injection vulnerability exists in Automotive Shop Management System v1.0. The vulnerability can be exploited by attackers to conduct SQL injection attacks via /asms/classes/Master.php?f=deleteproduct...

ZKEACMS Cross-Site Scripting Vulnerability

ZKEACMS v3.5.2 is a cross-site scripting vulnerability that can be exploited by attackers to inject malicious JavaScript programs to steal other users' cookies, etc...

CISA Adds 34 Known Exploited Vulnerabilities to Catalog

CISA has added 34 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

Stored XSS vulnerability in Jenkins Sonargraph Integration Plugin

Sonargraph Integration Plugin 3.0.0 and earlier does not escape the file path for the Log file field form validation. This results in a stored cross-site scripting XSS vulnerability that can be exploited by users with Job/Configure permission. Sonargraph Integration Plugin 3.0.1 escapes the...

Stored XSS vulnerability in Jenkins brakeman Plugin

brakeman Plugin 0.12 and earlier did not escape values received from parsed JSON files when rendering them, resulting in a stored cross-site scripting vulnerability. This vulnerability can be exploited by users able to control the Brakeman post-build step input data.\n\nbrakeman Plugin 0.13 escap...

GHSA-HVCP-JVX5-4PMP Magento 2 Community Edition SSRF vulnerability

A server-side request forgery SSRF vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by authenticated user with admin privileges to manipulate shipment settings to execute arbitrary code...

GHSA-JXP3-MMW7-8285 Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with...

Magento 2 Community Edition CSRF Vulnerability

A cross-site request forgery CSRF vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration...

GHSA-WMRG-W9VG-7JQX Magento 2 Community Edition CSRF Vulnerability

A cross-site request forgery CSRF vulnerability exists in the checkout cart item of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited at the time of editing or configuration...