CVE-2022-26486

creationtimestamp| type| source ---|---|--- 2022-03-07 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=749 2022-03-07 05:42:50+00:00| exploited| https://t.me/thehackernews/1952 2022-03-07 06:12:15+00:00| seen| https://t.me/cKure/8957 2022-11-17 10:42:44+00:00| exploited|...

CVE-2022-26318

creationtimestamp| type| source ---|---|--- 2022-03-04 20:30:20+00:00| seen| https://t.me/cibsecurity/38451 2022-03-27 12:55:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1727 2022-04-15 00:32:33+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6169 2022-04-17...

WordPress Spotlight Social Media Feeds plugin < 0.10.2 - Toggle The Debug Mode via Cross-Site Request Forgery (CSRF) vulnerability

Toggle The Debug Mode via Cross-Site Request Forgery CSRF vulnerability discovered in WordPress Spotlight Social Media Feeds plugin versions 0.10.2. Solution Update the WordPress Spotlight Social Media Feeds plugin to the latest available version at least 0.10.2...

WordPress SQL注入漏洞

WordPress is the Wordpress Foundation's suite of blogging platforms developed using the PHP language. The platform supports setting up personal blogging sites on PHP and MySQL servers.WordPress WP Review Slider plugin version 11.0 before the SQL injection vulnerability, the vulnerability stems fr...

WordPress Spotlight Social Media Feeds plugin < 0.10.2 - Sensitive Information Disclosure vulnerability

Sensitive Information Disclosure vulnerability discovered in WordPress Spotlight Social Media Feeds plugin versions 0.10.2. Solution Update the WordPress Spotlight Social Media Feeds plugin to the latest available version at least 0.10.2...

Fedora: Security Advisory for cyrus-imapd (FEDORA-2022-c30b1a8aa3)

The remote host is missing an update for the Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2022-24086

creationtimestamp| type| source ---|---|--- 2022-02-14 04:28:01+00:00| exploited| https://t.me/thehackernews/1883 2022-02-14 11:56:15+00:00| exploited| https://t.me/ctinow/46881 2022-02-14 15:30:00+00:00| exploited| https://t.me/truesecator/2626 2022-02-15 10:38:24+00:00| seen|...

CVE-2022-21999

creationtimestamp| type| source ---|---|--- 2022-02-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=736 2022-03-16 13:56:13+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/local/cve202221999spoolfoolprivesc.rb 2022-03-25...

CVE-2022-20703

creationtimestamp| type| source ---|---|--- 2022-02-04 11:26:32+00:00| published-proof-of-concept| https://t.me/truesecator/2591 2022-02-05 15:10:07+00:00| published-proof-of-concept| https://t.me/NeKaspersky/1769 2022-02-10 20:17:17+00:00| seen| https://t.me/cibsecurity/37240 2023-06-14...

CVE-2022-21882

creationtimestamp| type| source ---|---|--- 2022-01-28 12:07:13+00:00| seen| https://t.me/CyberSecurityTechnologies/5293 2022-01-30 09:43:14+00:00| published-proof-of-concept| https://t.me/cyberbannewsir/4980 2022-01-30 09:45:57+00:00| published-proof-of-concept| https://t.me/habrcomnews/3088...

Use of deprecated Chainlink API

Handle 0x1f8b Vulnerability details Impact Deprecated API stops working. Prices cannot be obtained. Protocol stops and contracts have to be redeployed. Proof of Concept The contracts use Chainlink’s deprecated API latestAnswer. Such functions might suddenly stop working if Chainlink stopped...

CVE-2022-0093

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds...

CVE-2022-0093

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds...

Design/Logic Flaw

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds...

CVE-2022-0093

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds...

CVE-2022-0093

Removed by vendor...

CVE-2022-0093

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds...

PT-2022-12974 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions prior to 14.4.5 GitLab versions 14.5.0 through 14.5.3 GitLab versions 14.6.0 through 14.6.1 Description: An issue has been discovered in GitLab that allows a user with an expired password to access sensitive information throug...

CVE-2022-0093: Undefined Security Weakness

An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab allows a user with an expired password to access sensitive information through RSS feeds...

CVE-2022-21919

creationtimestamp| type| source ---|---|--- 2022-01-12 00:17:29+00:00| seen| https://t.me/cibsecurity/35279 2022-01-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=715 2022-01-12 13:10:46+00:00| published-proof-of-concept| https://t.me/poxek/449 2022-01-12 14:49:26+00:0...