Deprecated CHAINLINK API usage

Lines of code Vulnerability details Impact Usage of deprecated chainlink function to get collateral price. Proof of Concept The Chainlink API latestAnswer used in the FungibleAssetVaultForDAO contract is deprecated: This method returns the last value but that value cannot be fully updated. New V3...

GHSA-WF98-VXV9-JQFV XSS Injection Vulnerability

Impact Under some circumstances, the Feeds widget on the dashboard could have an XSS vulnerability if a malformed feed was supplied. Patches This has been patched in Craft 3.7.29. References https://github.com/craftcms/cms/blob/develop/CHANGELOG.md3729---2022-01-18 For more information If you hav...

XSS Injection Vulnerability

Impact Under some circumstances, the Feeds widget on the dashboard could have an XSS vulnerability if a malformed feed was supplied. Patches This has been patched in Craft 3.7.29. References https://github.com/craftcms/cms/blob/develop/CHANGELOG.md3729---2022-01-18 For more information If you hav...

[SECURITY] Fedora 34 Update: gitit-0.13.0.0-5.1.fc34

Gitit is a wiki backed by a git, darcs, or mercurial filestore. Pages and uploaded files can be modified either directly via the VCS's command-line too ls or through the wiki's web interface. Pandoc is used for markup processing, so pages may be written in extended markdown, reStructuredText,...

Bugs in Wyze Cams Could Let Attackers Takeover Devices and Access Video Feeds

Three security vulnerabilities have been disclosed in the popular Wyze Cam devices that grant malicious actors to execute arbitrary code and access camera feeds as well as unauthorizedly read the SD cards, the latter of which remained unresolved for nearly three years after the initial discovery...

CVE-2022-26258

creationtimestamp| type| source ---|---|--- 2022-03-28 07:39:58+00:00| seen| https://t.me/cibsecurity/39629 2022-09-07 14:37:32+00:00| seen| MISP/65f9cb29-4429-4318-a02e-084a7f449e16 2022-09-07 15:31:02+00:00| exploited| https://t.me/truesecator/3387 2023-06-14 21:10:04+00:00| seen|...

CVE-2022-1040

creationtimestamp| type| source ---|---|--- 2022-03-25 15:30:39+00:00| seen| https://t.me/cibsecurity/39533 2022-03-27 14:33:12+00:00| seen| https://t.me/BleepingComputer/11671 2022-03-27 19:17:05+00:00| seen| https://t.me/cKure/9191 2022-03-28 10:46:00+00:00| exploited|...

[WP-H3] money-market-contracts/oracle#feed_prices() delayed transaction may disrupt price feeds

Lines of code Vulnerability details The implementation only takes two attributes: asset and price. And the lastupdatedtime of the record will always be set to the current block.time. This makes it possible for the price feeds to be disrupted when the network is congested, or the endpoint is down...

CVE-2022-24990

creationtimestamp| type| source ---|---|--- 2022-03-08 01:43:00+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1615 2022-03-08 13:08:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5560 2022-03-20 05:23:50+00:00| published-proof-of-concept|...

CVE-2022-26486

creationtimestamp| type| source ---|---|--- 2022-03-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=749 2022-03-07 05:42:50+00:00| exploited| https://t.me/thehackernews/1952 2022-03-07 06:12:15+00:00| seen| https://t.me/cKure/8957 2022-11-17 10:42:44+00:00| exploited|...

CVE-2022-26318

creationtimestamp| type| source ---|---|--- 2022-03-04 20:30:20+00:00| seen| https://t.me/cibsecurity/38451 2022-03-27 12:55:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1727 2022-04-15 00:32:33+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6169 2022-04-17...

WordPress Spotlight Social Media Feeds plugin < 0.10.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Spotlight Social Media Feeds plugin versions 0.10.2. Solution Update the WordPress Spotlight Social Media Feeds plugin to the latest available version at least 0.10.2...

WordPress Spotlight Social Media Feeds plugin < 0.10.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Spotlight Social Media Feeds plugin versions 0.10.2. Solution Update the WordPress Spotlight Social Media Feeds plugin to the latest available version at least 0.10.2...

WordPress SQL注入漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers.WordPress WP Review Slider plugin version 11.0 before the SQL injection vulnerability, the vulnerability stems fr...

Fedora: Security Advisory for cyrus-imapd (FEDORA-2022-c30b1a8aa3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-24086

creationtimestamp| type| source ---|---|--- 2022-02-14 04:28:01+00:00| exploited| https://t.me/thehackernews/1883 2022-02-14 11:56:15+00:00| exploited| https://t.me/ctinow/46881 2022-02-14 15:30:00+00:00| exploited| https://t.me/truesecator/2626 2022-02-15 10:38:24+00:00| seen|...

CVE-2022-21999

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736 2022-03-16 13:56:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve202221999spoolfoolprivesc.rb 2022-03-25...

CVE-2022-20703

creationtimestamp| type| source ---|---|--- 2022-02-04 11:26:32+00:00| published-proof-of-concept| https://t.me/truesecator/2591 2022-02-05 15:10:07+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1769 2022-02-10 20:17:17+00:00| seen| https://t.me/cibsecurity/37240 2023-06-14...

CVE-2022-21882

creationtimestamp| type| source ---|---|--- 2022-01-28 12:07:13+00:00| seen| https://t.me/CyberSecurityTechnologies/5293 2022-01-30 09:43:14+00:00| published-proof-of-concept| https://t.me/cyberbannewsir/4980 2022-01-30 09:45:57+00:00| published-proof-of-concept| https://t.me/habrcomnews/3088...

Use of deprecated Chainlink API

Handle 0x1f8b Vulnerability details Impact Deprecated API stops working. Prices cannot be obtained. Protocol stops and contracts have to be redeployed. Proof of Concept The contracts use Chainlink’s deprecated API latestAnswer. Such functions might suddenly stop working if Chainlink stopped...