Jenkins Doktor Plugin Proxy Controller Security Bypass Vulnerability

Jenkins plug-ins are plug-ins that provide appropriate functionality for Jenkins. The Jenkins Doktor Plugin Agent Controller security bypass vulnerability can be exploited to allow an attacker to take control of the agent process to determine if a file with a given name exists...

Jenkins SWAMP Plugin Access Control Error Vulnerability

Jenkins plug-ins are plug-ins that provide functionality for Jenkins. The Jenkins SWAMP Plugin Access Control Error vulnerability can be exploited by an attacker to connect to the attacker's specified web server using the attacker's specified credentials...

Wireshark Denial of Service Vulnerability (CNVD-2022-11189)

Wireshark is a set of network packet analysis software from the Wireshark team. A denial of service vulnerability exists in Wireshark. The vulnerability is caused by the CMS dissector component, which can be exploited by an attacker to cause a denial of service by injecting malformed packets or...

Tenda Router AX12 Buffer Overflow Vulnerability

Tenda Ax12 is a dual-band Gigabit Wifi 6 wireless router from Tenda, China.A security vulnerability exists in the Tenda Router AX12, which stems from a buffer overflow vulnerability in the sub 422CE4 function of the page goform setIPv6Status, which can be exploited by an attacker to cause a denia...

First zero-day vulnerability of Google Chrome this year actively exploited in wild

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here Google released a stable channel update for their Chrome browser that contains a zero-day vulnerability and is actively being exploited-in-wild. This is the first zero-day bug reported in Chrome browser this year. A...

CVE-2022-0603

creationtimestamp| type| source ---|---|--- 2022-02-15 09:14:28+00:00| exploited| https://t.me/NeKaspersky/1810 2022-02-16 22:21:45+00:00| seen| https://t.me/LearnExploit/3319...

CVE-2022-23337

creationtimestamp| type| source ---|---|--- 2022-02-15 00:33:21+00:00| seen| https://t.me/cibsecurity/37467 2022-06-23 14:10:35+00:00| exploited| https://t.me/GithubRedTeam/2565 2022-07-12 13:38:11+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2688 2022-07-12 13:50:56+00:00|...

CISA Adds Nine Known Exploited Vulnerabilities to Catalog

CISA has added nine new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types a...

Samsung Bixby Vision Information Disclosure Vulnerability

Samsung Bixby Vision is a vision feature from Samsung, a South Korean company. An information disclosure vulnerability exists in versions of Bixby Vision prior to 3.7.50.6, which could be exploited by an attacker to access internal Bixby Vision data with unprotected intent...

Adobe Illustrator null pointer dereference vulnerability (CNVD-2022-15929)

Adobe Illustrator is a vector-based image creation software from Adobe. Adobe Illustrator has a security vulnerability that could be exploited by attackers to launch an application denial of service in the context of the current user...

CVE-2021-45420

creationtimestamp| type| source ---|---|--- 2022-02-14 16:33:26+00:00| seen| https://t.me/cibsecurity/37423 2025-01-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-27 2025-01-27 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

Critical Magento 0-Day Vulnerability Under Active Exploitation — Patch Released

Adobe on Sunday rolled out patches to contain a critical security vulnerability impacting its Commerce and Magento Open Source products that it said is being actively exploited in the wild. Tracked as CVE-2022-24086, the shortcoming has a CVSS score of 9.8 out of 10 on the vulnerability scoring...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2022-22737)

Foxit PDF Reader is a PDF reader from Foxit China. Foxit PDF Reader has a security vulnerability that can be exploited by attackers to execute code in the context of the current process...

Hackers Rigged Hundreds of Ecommerce Sites to Steal Payment Info

The attackers exploited a known vulnerability and installed credit card skimmers on more than 500 websites...

CVE-2022-24112

creationtimestamp| type| source ---|---|--- 2022-02-11 16:29:40+00:00| seen| https://t.me/cibsecurity/37298 2022-02-21 11:58:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1516 2022-02-21 16:34:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1518 2022-02-21...

Sealevel Systems SeaConnect 370w Denial of Service Vulnerability

Sealevel Systems SeaConnect 370W is an Industrial Internet of Things Iiot edge device from Sealevel Systems, Inc. Sealevel Systems SeaConnect 370w is a denial of service vulnerability that can be exploited by attackers to send malicious packets resulting in a denial of service...

Radareorg Radare2 Buffer Overflow Vulnerability (CNVD-2022-13394)

radare2 is a set of libraries and tools for working with binary files. radareorg Radare2 suffers from a buffer overflow vulnerability that stems from the product's failure to effectively determine memory boundaries, which could be exploited by an attacker to cause a buffer overflow...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerability listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and po...

Detect and prioritize CISA Known Exploited Vulnerabilities in the cloud with Wiz

For each CVE, the Wiz Research team maintains data from multiple threat intelligence sources and our own independent research. Now that we’ve added support for the new CISA KEV catalog, learn how you can use it in your cloud environment...

Sante DICOM Viewer Pro J2K Remote Code Execution Vulnerability (CNVD-2022-14985)

Sante DICOM Viewer Pro is a medical DICOM image viewer. sante DICOM Viewer Pro J2K remote code execution vulnerability can be exploited by attackers to execute code in the context of the current process...