13543 matches found
CVE-2022-35264
A denial of service vulnerability exists in the webserver hashFirst functionality of Robustel R1510 3.1.16 and 3.3.0. A specially-crafted network request can lead to denial of service. An attacker can send a sequence of requests to trigger this vulnerability.This denial of service is in the...
Wordfence Intelligence Launches New Malware Hash Feed!
Today, the Wordfence team is launching a Malware Hash Feed as part of our Wordfence Intelligence API. This gives our Enterprise users another way to rapidly and definitively identify malware targeting web applications. As the world’s foremost WordPress security provider, Wordfence has an expertly...
deployHolographableContract() uniqueness
Lines of code Vulnerability details Impact The holographable smart contract deployment can not guarantee the uniqueness. A malicious user could deploy multiple duplicate contracts, then the brigeIn could not make sure the uniqueness of the minted or burned NFT. Proof of Concept The salt and...
untyped data signing
Lines of code Vulnerability details in function deployHolographableContract the bytes32 hash is directly encoded without adding any domain separator . this will cause several issues an attacker can front run the signature and use them on same contract on another chain . eg a user wants to call...
The vulnerability of the SHA-3 cryptographic hash function in the XKCP software package allows a hacker to execute arbitrary code.
The vulnerability of the SHA-3 cryptographic hash function in the eXtended Keccak Code Package XKCP software package is related to errors in block processing of input data and type conversion. Exploiting this vulnerability can allow a malicious actor to execute arbitrary code during the computati...
GO-2022-1045 Improper validation of signature hash algorithms in github.com/sylabs/sif/v2
The Singularity Image Format SIF reference implementation does not verify that the hash algorithms used are cryptographically secure when verifying digital signatures...
OESA-2022-2005 mailman security update
This is GNU Mailman, a mailing list management system distributed under the terms of the GNU General Public License GPL version 3 or later. The name of this software is spelled 'Mailman' with a leading capital 'M' but with a lower case second m'. Any other spelling is incorrect. Security Fixes:...
kernel: information leak in the IPv4 implementation
An information leak flaw was found in the Linux kernel’s IPv4 implementation in the iprtinit in net/ipv4/route.c function. The use of a small hash table in IP ID generation allows a remote attacker to reveal sensitive information...
CVE-2022-42719
creationtimestamp| type| source ---|---|--- 2022-10-14 02:28:07+00:00| seen| https://t.me/cibsecurity/51365 2025-05-15 21:33:32+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/16577 2026-07-26 02:02:37+00:00| seen| https://t.me/EchelonEyes/781 2026-07-27 00:01:14+00:00|...
CVE-2022-42899
creationtimestamp| type| source ---|---|--- 2022-10-13 07:27:27+00:00| seen| https://t.me/cibsecurity/51306 2022-10-19 20:15:40+00:00| seen| https://t.me/cibsecurity/51814 2026-07-29 12:00:57+00:00| seen| https://t.me/CVEhub/3696 2026-07-30 00:01:36+00:00| seen| https://t.me/CVEhub/3696 2026-08-0...
GHSA-GMWP-3PWC-3J3G mockery is vulnerable to prototype pollution
Prototype pollution vulnerability in function enable in mockery.js in mfncooper mockery commit 822f0566fd6d72af8c943ae5ca2aa92e516aa2cf via the key variable in mockery.js...
CVE-2022-42044
creationtimestamp| type| source ---|---|--- 2022-10-12 02:26:26+00:00| seen| https://t.me/cibsecurity/51233...
Description of the security update for SharePoint Foundation 2013: October 11, 2022 (KB5002284)
Description of the security update for SharePoint Foundation 2013: October 11, 2022 KB5002284 Summary This security update resolves a Microsoft SharePoint Server remote code execution vulnerability. To learn more about the vulnerability, see the following security advisories: Microsoft Common...
Description of the security update for Office 2013: October 11, 2022 (KB5002279)
Description of the security update for Office 2013: October 11, 2022 KB5002279 Summary This security update resolves a Microsoft Office remote code execution vulnerability. To learn more about the vulnerability, see Microsoft Common Vulnerabilities and Exposures CVE-2022-38048. Note: To apply thi...
CVE-2022-3433
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...
CVE-2022-3433
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...
DEBIAN-CVE-2022-3433
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...
Design/Logic Flaw
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...
CVE-2022-3433
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...
UBUNTU-CVE-2022-3433
The aeson library is not safe to use to consume untrusted JSON input. A remote user could abuse this flaw to produce a hash collision in the underlying unordered-containers library by sending specially crafted JSON data, resulting in a denial of service...