Accusoft ImageGear heap buffer overflow vulnerability (CNVD-2022-35414)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. A security vulnerability exists in Accusoft ImageGear, which can be exploited by an attacker to pass crafted data to an application, trigger a heap buffer overflow, and execute arbitrary code on the targ...

Simple Real Estate Portal System SQL注入漏洞（CNVD-2022-43405）

Simple Real Estate Portal System is a real estate portal system from Carlo Montero's personal developer. version v1.0 of Simple Real Estate Portal System is vulnerable to SQL injection, which can be exploited by attackers to execute illegal SQL commands to steal sensitive database data...

Attendance and Payroll System SQL注入漏洞（CNVD-2022-33148）

Attendance and Payroll System is a PHP/MySQLi source code attendance and payroll system by oretnom23 individual developers. version v1.0 of Attendance and Payroll System is vulnerable to SQL injection, which originates from the component admincashadvancedelete.php lacks validation for external...

CVE-2022-1427 Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby

Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...

CVE-2022-1427

Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...

CVE-2022-1427 Out-of-bounds Read in mrb_obj_is_kind_of in in mruby/mruby

Out-of-bounds Read in mrbobjiskindof in in GitHub repository mruby/mruby prior to 3.2. Impact: Possible arbitrary code execution if being exploited...

CVE-2022-1439

creationtimestamp| type| source ---|---|--- 2022-04-22 20:28:04+00:00| seen| https://t.me/cibsecurity/41333 2024-11-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-24 2025-02-05 00:00:00+00:00| exploited| The Shadowserver...

Skeletons in the Closet: Security 101 Takes a Backseat to 0-days

Rarely a month goes by without the infosec industry being plagued by a new zero-day apocalypse. Most recently in December 2021, the world was swept by a series of vulnerabilities in Log4J – a popular logging system used by thousands of systems around the world. While writing this article, the...

Google Android elevation of privilege vulnerability (CNVD-2022-32842)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to escalate privileges...

Google Android Information Disclosure Vulnerability (CNVD-2022-32847)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android Security Bypass Vulnerability (CNVD-2022-32845)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to arbitrarily modify and set system properties...

Kyocera d-COLOR MF3555 Cross-Site Scripting Vulnerability

Kyocera d-COLOR MF3555 is a color multifunction printer from Kyocera Japan.A cross-site scripting vulnerability exists in the Kyocera d-COLOR MF3555 2XDS000.002.271 device, which stems from a web application not properly checking parameters before saving them to the server, and can be exploited b...

Google Android elevation of privilege vulnerability (CNVD-2022-32841)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to escalate privileges...

CVE-2021-31297

creationtimestamp| type| source ---|---|--- 2022-04-21 08:34:18+00:00| exploited| https://t.me/itsecnews/520 2022-04-21 16:39:23+00:00| exploited| https://t.me/NeKaspersky/2147...

Weekly Threat Digest: 11 – 17 April 2022

For a detailed threat digest, download the pdf file here Published Vulnerabilities Interesting Vulnerabilities Active Threat Groups Targeted Countries Targeted Industries ATT&CK TTPs 765 14 1 2 6 25 The third week of April 2022 witnessed a huge spike on the discovery of 765 vulnerabilities out of...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32782)

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of C libraries, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to provide specially formatted malformed files to cause...

MISP Cross-Site Scripting Vulnerability (CNVD-2022-64094)

MISP is an open source software solution. The product is used to collect, store, distribute, and share network security metrics, and has features such as threat network security event analysis and malware analysis. cross-site scripting vulnerabilities exist in versions of MISP prior to 2.4.158,...

Laurent Rineau CGAL Code Execution Vulnerability (CNVD-2022-32784)

Laurent Rineau CGAL is an open source application from Laurent Rineau. Providing access to geometric algorithms in the form of C libraries, Laurent Rineau CGAL suffers from a security vulnerability that could be exploited by an attacker to provide specially formatted malformed files to cause...

Hackers Exploiting Recently Reported Windows Print Spooler Vulnerability in the Wild

A security flaw in the Windows Print Spooler component that was patched by Microsoft in February is being actively exploited in the wild, the U.S. Cybersecurity and Infrastructure Security Agency CISA has warned. To that end, the agency has added the shortcoming to its Known Exploited...

Google Android Elevation of Privilege Vulnerability (CNVD-2022-44611)

Google Android is a Linux-based open-source operating system from the U.S. company Google. Google Android has an elevation of privilege vulnerability that could be exploited by attackers to cause a local privilege escalation that requires system execution privileges...