CVE-2022-46484

CVE-2022-46484 La divulgazione di informazioni nei sondaggi protetti da password in Data Illusion Survey Software Solutions NGSurvey v2.4.28 e versioni precedenti consente agli aggressori di visualizzare la password per accedere e inviare sondaggi in modo arbitrario...

Beyond the Zero-Day: See Your Network Like an Attacker | Webinar with HD Moore

Assume the breach. Zero-days keep shipping, AI is writing exploits faster than anyone patches, and "patch everything in time" stopped working years ago. Stop betting the org on winning that race. You don't control which bug lands. You control what it can reach once it does. That is a question abo...

CVE-2026-2919

Malicious scripts could display attacker-controlled web content under spoofed domains in Focus for iOS by stalling a self navigation to an invalid port and triggering an iframe redirect, causing the UI to display a trusted domain without user interaction. This vulnerability was fixed in Focus for...

Data Illusion Zumbrunn NGSurvey Enterprise Edition 安全漏洞

Data Illusion Zumbrunn NGSurvey Enterprise Edition is a questionnaire and data collection system from the Swiss company Data Illusion Zumbrunn. A security vulnerability exists in Data Illusion Zumbrunn NGSurvey Enterprise Edition version 3.6.4, which stems from improper coding of survey content a...

PT-2026-1656

Name of the Vulnerable Software and Affected Versions Data Illusion Zumbrunn NGSurvey Enterprise Edition version 3.6.4 Description The software contains a stored cross-site scripting issue. This affects the survey content and administration functionality, allowing authenticated remote users with...

Data Illusion Zumbrunn NGSurvey 安全漏洞

Data Illusion Zumbrunn NGSurvey is an online survey and data collection platform from Data Illusion Zumbrunn, Inc. A security vulnerability exists in Data Illusion Zumbrunn NGSurvey that stems from improper authorization and could allow an arbitrarily logged-in user to gain access to other users'...

EUVD-2022-49288

Malicious code in bioql PyPI...

Slient-URL-Exploit

URL Exploit Hidden Downloader URL contamination and muted Jav...

Malicious code in illusion_d6ark_5gyai_topaz (npm)

The package illusiond6ark5gyaitopaz was found to contain malicious code...

MAL-2025-40992 Malicious code in zinnia_ewxcy_whjjp_illusion (npm)

The package zinniaewxcywhjjpillusion was found to contain malicious code...

New Phishing Kit Leverages SMS, Voice Calls to Target Cryptocurrency Users

A novel phishing kit has been observed impersonating the login pages of well-known cryptocurrency services as part of an attack cluster codenamed CryptoChameleon that's designed to primarily target mobile devices. "This kit enables attackers to build carbon copies of single sign-on SSO pages, the...

CVE-2022-46484

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...

CVE-2022-46484

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...

CVE-2022-46485

Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Field", "Comment Field" or "Contact Details"...

CVE-2022-46485

Data Illusion Survey Software Solutions ngSurvey version 2.4.28 and below is vulnerable to Denial of Service if a survey contains a "Text Field", "Comment Field" or "Contact Details"...

Data Illusion Survey Software Solutions NGSurvey Information Disclosure Vulnerability

ngSurvey is a Data Illusion Survey Software Solutions by ngSurvey, Inc. An information disclosure vulnerability exists in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and prior versions, which stems from a vulnerability that allows an attacker to view access passwords and arbitrarily...

Data Illusion Survey Software Solutions NGSurvey Security Breach

ngSurvey is a Data Illusion Survey Software Solutions by ngSurvey, Inc. A security vulnerability exists in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and earlier versions, which stems from vulnerability to denial-of-service attacks if a survey is submitted that contains Text Field,...

CVE-2022-46484

The CVE-2022-46484 entry affects Data Illusion Survey Software Solutions NGSurvey (NGSurvey) v2.4.28 and earlier. The vulnerability enables information disclosure by allowing attackers to view the access password, which in turn could be used to access and arbitrarily submit surveys. The connected...

CVE-2022-46484

Information disclosure in password protected surveys in Data Illusion Survey Software Solutions NGSurvey v2.4.28 and below allows attackers to view the password to access and arbitrarily submit surveys...

PT-2023-14942 · Data Illusion Survey Software Solutions · Ngsurvey

Name of the Vulnerable Software and Affected Versions: Data Illusion Survey Software Solutions ngSurvey versions 2.4.28 and below Description: The issue allows for Denial of Service when a survey contains a "Text Field", "Comment Field", or "Contact Details". Recommendations: For versions 2.4.28...