CVE-2022-2118

creationtimestamp| type| source ---|---|--- 2022-07-17 14:27:45+00:00| seen| https://t.me/cibsecurity/46388...

PT-2022-14036

Name of the Vulnerable Software and Affected Versions Insights from Google PageSpeed WordPress plugin versions prior to 4.0.7 Description The issue concerns a lack of CSRF verification in the plugin, allowing attackers to perform actions such as deleting Custom URLs on behalf of a logged-in admin...

CVE-2022-1672: Cross-Site Request Forgery (CSRF)

The Insights from Google PageSpeed WordPress plugin before 4.0.7 does not verify for CSRF before doing various actions such as deleting Custom URLs, which could allow attackers to make a logged in admin perform such actions via CSRF attacks...

nobull.com Cross Site Scripting vulnerability OBB-2749158

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Memory corruption

A memory corruption in Hex Rays Ida Pro v6.6 allows attackers to cause a Denial of Service DoS via a crafted file. Related to Data from Faulting Address controls subsequent Write Address starting at msvcrt!memcpy+0x0000000000000056...

Regular Expression Denial Of Service (ReDoS)

moment is vulnerable to Regular Expression Denial Of Service ReDoS. The vulnerability exists due to the inefficient regex pattern used in the preprocessRFC2822 function of from-string.js, allowing an attacker to crash the application by providing malicious inputs of more than 10k characters...

CVE-2022-2058

Divide By Zero error in tiffcrop in libtiff 4.4.0 allows attackers to cause a denial-of-service via a crafted tiff file. For users that compile libtiff from sources, the fix is available with commit f3a5e010...

CVE-2022-31061

creationtimestamp| type| source ---|---|--- 2022-06-28 22:42:25+00:00| seen| https://t.me/cibsecurity/45320 2022-08-07 18:20:59+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2877 2022-08-07 22:25:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2878 2022-08-10...

PT-2022-31845

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.121 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been...

PT-2022-32337

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.29 through 4.9.317 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32019

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.29 through 5.4.197 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kerne...

PT-2022-32153

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.247 Description The issue is related to a potential security problem in the Linux Kernel, specifically in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been proven...

PT-2022-31603

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.46 Description The issue is related to a potential security vulnerability in the Linux Kernel, specifically in the fcoe wwn from mac function. The actual impact and attack plausibility have not yet been...

PT-2022-31342

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 2.6.29 through 5.17.13 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. This could potentially lead to security vulnerabilities, although the actual impact and attack...

PT-2022-30983

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. This function is used in the FCoE Fibre Channel over Ethernet protocol implementation. The actual impact...

PT-2022-32268

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.283 Description The issue is related to a potential buffer overflow in the fcoe wwn from mac function. This function is used in the Linux Kernel's FCoE Fibre Channel over Ethernet implementation. The actual...

an-electrorecycling.de Cross Site Scripting vulnerability OBB-2688304

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-14230 · WordPress · Import Export All Wordpress Images

Name of the Vulnerable Software and Affected Versions: Import Export All WordPress Images, Users & Post Types WordPress plugin versions prior to 6.5.3 Description: The issue concerns the lack of full validation for files to be imported via URL, which could allow high-privilege users, such as...

Malicious code in wdl-workspace (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c409a88473b42caf34d71b72422cf60aab91588e465d40f54f2523b1136f4554 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @dsgn-sys/editor-elements (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 708464365948547ec14829dc0bcd1dfc3a1cd7a36f5ffa928bb530a65bfcf5b7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...