HCL Technologies HCL Sametime File Upload Vulnerability

HCL Sametime, a conferencing solution from HCL Technologies, has a security vulnerability in HCL Technologies HCL Sametime version 11.6. The vulnerability stems from the fact that the user SID in the application can be modified, which can be exploited to modify the SID to enable arbitrary file...

Foxit PDF Reader Annotation Remote Code Execution Vulnerability (CNVD-2023-07880)

Foxit PDF Reader is a PDF reader from Foxit China.A remote code execution vulnerability exists in Foxit PDF Reader Annotation, which can be exploited by attackers to execute code in the context of the current process...

TokenType mismatch with true type can be exploited to steal funds

Lines of code Vulnerability details A vault can be created for different TokenTypes, namely ERC20 and ERC721. These tokens have different logic, so a user needs to pass the type of the underlying token when creating a vault. At the end of createVault the user's tokens are pulled into the contract...

CVE-2022-29383

creationtimestamp| type| source ---|---|--- 2022-05-13 16:27:50+00:00| seen| https://t.me/cibsecurity/42637 2022-05-15 19:21:39+00:00| published-proof-of-concept| https://t.me/cKure/9528 2022-07-04 20:35:52+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6007 2025-01-26...

CVE-2022-30525

creationtimestamp| type| source ---|---|--- 2022-05-13 11:25:05+00:00| exploited| https://t.me/truesecator/2938 2022-05-13 13:01:51+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2180 2022-05-13 18:18:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2182 2022-05-14...

CVE-2017-1000170

creationtimestamp| type| source ---|---|--- 2022-05-13 01:11:22+00:00| published-proof-of-concept| https://github.com/advisories/GHSA-p739-9479-5wr2 2024-11-10 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-10 2024-11-14 00:00:00+00:00| seen| The Shadowserver...

Cambium Networks cnMaestro OS Command Injection Vulnerability (CNVD-2022-64235)

Cambium Networks cnMaestro is a cloud-based or native software platform from Cambium Networks for secure end-to-end network control. Cambium Networks cnMaestro suffers from an operating system command injection vulnerability that can be exploited by an attacker to gain root privileges...

CISA Temporarily Removes CVE-2022-26925 from Known Exploited Vulnerability Catalog

CISA is temporarily removing CVE-2022-26925 from its Known Exploited Vulnerability Catalog due to a risk of authentication failures when the May 10, 2022 Microsoft rollup update is applied to domain controllers. After installing May 10, 2022 rollup update on domain controllers, organizations migh...

CVE-2022-29303

creationtimestamp| type| source ---|---|--- 2022-05-12 20:42:12+00:00| seen| https://t.me/cibsecurity/42525 2022-05-31 22:59:16+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2336 2023-07-06 08:56:30+00:00| seen| https://t.me/ctinow/122117 2023-07-13 15:10:02+00:00| seen|...

CISA Urges Organizations to Patch Actively Exploited F5 BIG-IP Vulnerability

.jpg The U.S. Cybersecurity and Infrastructure Security Agency CISA has added the recently disclosed F5 BIG-IP flaw to its Known Exploited Vulnerabilities Catalog following reports of active abuse in the wild. The flaw, assigned the identifier CVE-2022-1388 CVSS score: 9.8, concerns a critical bu...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50672)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418f10 function, which can be exploited by attackers ...

TOTOLINK N600R Buffer Overflow Vulnerability (CNVD-2022-50671)

TOTOLINK N600R is a wireless router from Taiwan-based TOTOLINK Electronics, Inc. A buffer overflow vulnerability exists in TOTOLINK N600R V4.3.0cu.7647B20210106, which stems from a lack of length validation of the comment parameter in the FUN00418c24 function, which can be exploited by attackers ...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2022-59592)

Microsoft SharePoint is a suite of enterprise business collaboration platforms from Microsoft Corporation. Microsoft SharePoint Server is vulnerable to a remote code execution vulnerability that can be exploited to cause arbitrary code execution...

Microsoft Releases Fix for New Zero-Day with May 2022 Patch Tuesday Updates

Microsoft on Tuesday rolled out fixes for as many as 74 security vulnerabilities, including one for a zero-day bug that's being actively exploited in the wild. Of the 74 issues, seven are rated Critical, 66 are rated Important, and one is rated low in severity. Two of the flaws are listed as...

Microsoft Patch Tuesday, May 2022 Edition

Microsoft today released updates to fix at least 74 separate security problems in its Windows operating systems and related software. This months patch batch includes fixes for seven "critical" flaws, as well as a zero-day vulnerability that affects all supported versions of Windows. By all...

Siemens JT2Go and Teamcenter Visualization Null Pointer Dereference Vulnerability (CNVD-2022-36384)

Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2Go and Teamcenter Visualization contain a security vulnerability that can be exploited by attackers to The vulnerability can b...

Microsoft Windows Multiple Vulnerabilities (KB5014012)

This host is missing an important security update according to Microsoft KB5014012 SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Siemens JT2Go and Teamcenter Visualization Dual Release Vulnerability (CNVD-2022-36381)

Siemens Jt2go is a JT file viewer. Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens JT2Go and Teamcenter Visualization are vulnerable and can be exploited by attackers to The vulnerability can be exploited to...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risk to the federal enterprise. Note: to view the newly added...

Siemens Desigo PXC and DXR Devices Remote Code Execution Vulnerability

The Desigo PXC4 building automation controller is designed for HVAC system control. It is a compact device with built-in IOs that can be expanded to meet your needs with additional TX-IO modules.The Desigo PXC5 is a freely programmable controller for BACnet system-level functions such as alarm...