PT-2022-36008 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v6.0.9 Description: The issue is related to the initialization of device zone info for seeding in btrfs. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel...

PT-2022-27567 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E version 1.0.1.25633 Description: A stack overflow issue was discovered via the downaction parameter at the "/goform/CertListInfo" API endpoint. Recommendations: For Tenda W30E version 1.0.1.25633, as a temporary workaround, conside...

PT-2022-27952 · Jenkins · Jenkins Sonar Gerrit Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Sonar Gerrit Plugin versions 377.v8f3808963dc5 and earlier Description: A cross-site request forgery CSRF issue allows attackers to have Jenkins connect to Gerrit servers using attacker-specified credentials IDs, potentially capturing...

DEV-0139 launches targeted attacks against the cryptocurrency industry

Over the past several years, the cryptocurrency market has considerably expanded, gaining the interest of investors and threat actors. Cryptocurrency itself has been used by cybercriminals for their operations, notably for ransom payment in ransomware attacks, but we have also observed threat...

PT-2022-26557 · Unknown · Wlan Driver

Name of the Vulnerable Software and Affected Versions: Wlan driver affected versions not specified Description: The issue is related to a possible missing permission check in the wlan driver. This could lead to local information disclosure. Recommendations: At the moment, there is no information...

PT-2022-27778

Name of the Vulnerable Software and Affected Versions pdfmake versions up to and including 0.2.5 Description pdfmake contains an unsafe evaluation of user-controlled input, which can lead to arbitrary code execution in the context of the process running the pdfmake code. Users are advised to...

CVE-2022-42782

In wlan driver, there is a possible missing permission check, This could lead to local information disclosure...

Medium: curl

Issue Overview: A vulnerability was found in curl. This security flaw allows reusing OAUTH2-authenticated connections without properly ensuring that the connection was authenticated with the same credentials set for this transfer. This issue leads to an authentication bypass, either by mistake or...

CVE-2022-44367

Tenda i21 V1.0.0.144656 is vulnerable to Buffer Overflow via /goform/setUplinkInfo...

CVE-2022-44366

Tenda i21 V1.0.0.144656 is vulnerable to Buffer Overflow via /goform/setDiagnoseInfo...

CVE-2022-2807

SQL Injection vulnerability in Algan Software Prens Student Information System allows SQL Injection. This issue affects Prens Student Information System: before 2.1.11...

PT-2022-27197 · Tenda · Tenda I21

Name of the Vulnerable Software and Affected Versions: Tenda i21 version 1.0.0.144656 Description: The issue is related to a Buffer Overflow that can be triggered via the "/goform/setDiagnoseInfo" API endpoint. Recommendations: For Tenda i21 version 1.0.0.144656, consider restricting access to th...

Tenda i21 buffer error vulnerability

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version V1.0.0.144656, which originates from vulnerability to /goform/setDiagnoseInfo buffer overflow...

Tenda i21 buffer error vulnerability

Tenda i21 is a wireless access point from Tenda China. A security vulnerability exists in Tenda i21 version V1.0.0.144656, which originates from vulnerability to /goform/setUplinkInfo buffer overflow...

CVE-2022-4139

creationtimestamp| type| source ---|---|--- 2022-12-01 22:55:36+00:00| seen| https://t.me/ctinow/78856...

D4TA-HUNTER - GUI Osint Framework With Kali Linux

D4TA-HUNTER is a tool created in order to automate the collection of information about the employees of a company that is going to be audited for ethical hacking. In addition, in this tool we can find in the "search company" section by inserting the domain of a company, emails of employees,...

Information disclosure

Error in parser function in M-Files Server versions before 22.6.11534.1 and before 22.6.11505.0 allowed unauthenticated access to some information of the underlying operating system...

PT-2022-6574 · NetGear · Netgear Rax30

Name of the Vulnerable Software and Affected Versions: NETGEAR RAX30 affected versions not specified Description: This issue allows network-adjacent attackers to execute arbitrary code on affected installations. The flaw exists within the configuration of the lighttpd HTTP server, resulting from...

tel886.info Cross Site Scripting vulnerability OBB-3077726

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-27461 · Chocolatey · Chocolatey Ruby Package

Name of the Vulnerable Software and Affected Versions: Chocolatey Ruby package versions 3.1.2.1 and below Description: The issue is related to insecure permissions in the Chocolatey Ruby package, which grants all users in the Authenticated Users group write privileges for the path C:toolsruby31 a...