5231 matches found
CVE-2022-28760 Zoom On-Premise Deployments: Improper Access Control
Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...
feed-directory.com Cross Site Scripting vulnerability OBB-2976490
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-41427
Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4AvcFrameParser::Feed function in mp4mux...
CVE-2022-41427
Bento4 v1.6.0-639 was discovered to contain a memory leak in the AP4AvcFrameParser::Feed function in mp4mux...
CVE-2022-41427
CVE-2022-41427 relates to Bento4 v1.6.0-639, where a memory leak is present in the AP4_AvcFrameParser::Feed function within the mp4mux component. The issue is documented across multiple sources (e.g., NVD, OSV, Red Hat, Ubuntu/Nessus references) and is identified as a memory leak vulnerability fo...
Bento4 安全漏洞
Bento4 is an open source C++ library for reading and writing MP4 files. A security vulnerability exists in Bento4 version v1.6.0-639, which stems from a memory leak in the AP4AvcFrameParser::Feed method of the mp4mux component...
PT-2022-25861 · Bento4 · Bento4
Name of the Vulnerable Software and Affected Versions: Bento4 version 1.6.0-639 Description: A memory leak was discovered in the AP4 AvcFrameParser::Feed function in mp4mux. Recommendations: For Bento4 version 1.6.0-639, consider updating to a newer version that contains a fix for this issue,...
SSRF in feeds
Description By looking at this URL : https://github.com/glpi-project/glpi/security/advisories/GHSA-rqgx-gqhp-x8vv, I understand that a SSRF was possible in the URL of the RSS feed, and in fact, this has been fix. Howerver, I found a bypass to CVE-2022-36112. Proof of Concept To trigger the bug,...
CVE-2022-41080
creationtimestamp| type| source ---|---|--- 2022-09-30 08:40:20+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus14/2022 2022-11-09 14:40:05+00:00| seen| https://t.me/truesecator/3680 2022-11-10 00:46:25+00:00| seen| https://t.me/cibsecurity/52770 2022-12-21 14:45:32+00:00|...
careers.hollywoodfeed.com Cross Site Scripting vulnerability OBB-2966020
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2021-27877
creationtimestamp| type| source ---|---|--- 2022-09-23 16:55:16+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/veritas/beagentshaauthrce.rb 2023-04-11 08:50:00+00:00| exploited| https://t.me/KomunitiSiber/83 2023-06-14 21:10:04+00:00| seen|...
The vulnerability of the WSGI server for Python Waitress, related to HTTP request processing flaws, allows attackers to compromise data integrity.
The vulnerability of the WSGI server for Python Waitress is related to the uncertainty in recognizing a single LF character as a line feed. Exploiting this vulnerability allows an attacker to compromise data integrity...
CVE-2022-28758
Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...
Fortinet Fortigate xss (FG-IR-21-222)
The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-222 advisory. - An improper neutralization of input during web page generation vulnerability CWE-79 in FortiOS version 7.2.0, version 6.4.0...
Malvertising on Microsoft Edge's News Feed pushes tech support scams
While Google Chrome still dominates as the top browser, Microsoft Edge, which is based on the Chromium source code, is gradually gaining more users. Perhaps more importantly, it is the default browser on the Microsoft Windows platform and as such some segments of its user base are of particular...
Vulnerabilities fixed in Zoom
Vulnerabilities have been fixed in Zoom. The vulnerabilities allow a malicious person to carry out attacks that result in the following categories of damage: Manipulation of data Circumvention of security measure Accessing sensitive data The vulnerabilities with characteristics CVE-2022-28758 and...
CVE-2022-37969
creationtimestamp| type| source ---|---|--- 2022-09-13 21:31:54+00:00| exploited| https://t.me/ctinow/63371 2022-09-13 22:25:40+00:00| seen| https://t.me/cibsecurity/49681 2022-09-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=870 2022-09-14 12:37:36+00:00| seen|...
nodejs: HTTP request smuggling due to improper delimiting of header fields
A vulnerability was found in NodeJS due to the llhttp parser in the http module not strictly using the CRLF sequence to delimit HTTP requests. This issue can lead to HTTP Request Smuggling HRS. This flaw allows an attacker to send a specially crafted HTTP request to the server and smuggle arbitra...
CVE-2022-32917
creationtimestamp| type| source ---|---|--- 2022-09-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=869 2022-09-13 05:38:46+00:00| exploited| https://t.me/thehackernews/2560 2022-09-13 11:30:09+00:00| exploited| https://t.me/truesecator/3407 2022-09-13 12:36:37+00:00|...
CVE-2022-28758
Zoom On-Premise Meeting Connector MMR before version 4.8.20220815.130 contains an improper access control vulnerability. As a result, a malicious actor could obtain the audio and video feed of a meeting they were not authorized to join and cause other meeting disruptions...