1400 matches found
CVE-2022-34865
In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support EoTS are...
CVE-2022-34865 Traffic intelligence feeds vulnerability CVE-2022-34865
In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support EoTS are...
CVE-2022-34865
In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic Intelligence feeds, which use HTTPS, do not verify the remote endpoint identity, allowing for potential data poisoning. Note: Software versions which have reached End of Technical Support EoTS are...
F5 BIG-IP Traffic Intelligence Feeds Certificate Validation Error Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A certificate validation error vulnerability exists in F5 BIG-IP Traffic Intelligence Feeds, which can be exploited by...
F5 BIG-IP äæ”ä»»ē®”ēé®é¢ę¼ę“
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A certificate validation error vulnerability exists in F5 BIG-IP Traffic Intelligence Feeds, which can be exploited by...
F5 Networks BIG-IP : Traffic Intelligence feeds vulnerability (K25046752)
The version of F5 Networks BIG-IP installed on the remote host is prior to 14.1.5 / 15.1.6.1 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K25046752 advisory. - In BIG-IP Versions 15.1.x before 15.1.6.1, 14.1.x before 14.1.5, and all versions of 13.1.x, Traffic...
WordPress Social Slider Feed plugin <= 2.0.4 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
Authenticated Stored Cross-Site Scripting XSS vulnerability via Feeds discovered by WPScan in WordPress Social Slider Feed plugin versions = 2.0.4. Solution Update the WordPress Social Slider Feed plugin to the latest available version at least 2.0.5...
Social Slider Feed < 2.0.5 - Subscriber+ Stored XSS via Feeds
The plugin does not have authorisation and CSRF check in place when adding and editing a Feed, and does not sanitise as well as escape user input. As a result, users with a role as low as subscriber could add arbitrary feeds, with Stored Cross-Site Scripting payloads in them. As any authenticated...
Social Slider Feed < 2.0.5 - Subscriber+ Stored XSS via Feeds
The plugin does not have authorisation and CSRF check in place when adding and editing a Feed, and does not sanitise as well as escape user input. As a result, users with a role as low as subscriber could add arbitrary feeds, with Stored Cross-Site Scripting payloads in them. PoC As any...
[SECURITY] Fedora 36 Update: kiln-0.3.1-4.fc36
A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...
[SECURITY] Fedora 36 Update: golang-github-facebookincubator-nvdtools-0.1.4-6.fc36
A set of tools to work with the feeds vulnerabilities, CPE dictionary etc. distributed by National Vulnerability Database NVD...
CVE-2022-35405
creationtimestamp| type| source ---|---|--- 2022-07-19 18:40:49+00:00| seen| https://t.me/cibsecurity/46547 2022-08-02 11:49:26+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6516 2022-08-02 22:05:45+00:00| seen|...
[SECURITY] Fedora 35 Update: kiln-0.3.1-3.fc35
A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...
CVE-2022-22047
creationtimestamp| type| source ---|---|--- 2022-07-12 20:46:06+00:00| seen| https://t.me/truesecator/3164 2022-07-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=833 2022-07-14 06:07:21+00:00| published-proof-of-concept| https://t.me/cKure/9958 2022-07-17 08:53:31+00:0...
Oracle data feeds are insufficiently validated
Lines of code Vulnerability details Impact If the oracle price feeds are insufficiently validated, there will be pricing errors leading to the miss-pricing of assets Proof of Concept The JBSingleTokenPaymentTerminalStore and abstract JBPayoutRedemptionPaymentTerminal both rely on their respective...
[SECURITY] Fedora 36 Update: kiln-0.2.0-4.fc36
A simple static site generator. Features - Simple - Extensible - Gemini support - Atom feeds - Go templates...
CVE-2020-9907
creationtimestamp| type| source ---|---|--- 2022-06-24 19:34:31+00:00| seen| https://t.me/truesecator/3099 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 09:32:43+00:00| seen| https://t.me/arpsyndicate/1168 2024-12-24 20:32:32+00:00| seen|...
Tokens with decimals larger than 18 are not supported
Lines of code Vulnerability details For tokens with decimals larger than 18, many functions across the codebase will revert due to underflow. function getPriceFromDexaddress tokenAddress public view returns uint256 PriceInfo storage priceInfo = priceRecordstokenAddress; if priceInfo.active uint25...
CVE-2019-7193
creationtimestamp| type| source ---|---|--- 2022-06-13 13:29:05+00:00| seen| MISP/24c0c150-19f9-4301-87cf-6ab59dbb3c32 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-03-07 18:37:57+00:00| seen| https://t.me/ctinow/202651 2024-11-14 06:09:59+00:00| seen|...
CVE-2019-15271
creationtimestamp| type| source ---|---|--- 2022-06-08 19:35:04+00:00| published-proof-of-concept| https://t.me/truesecator/3042 2022-06-13 09:51:24+00:00| seen| MISP/24c0c150-19f9-4301-87cf-6ab59dbb3c32 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-02-28...