PT-2025-26013

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel's arm scpi firmware, where the scpi info is not properly handled when the scpi probe fails. This could result in a use-after-free scenario, as th...

PT-2024-1124

Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The vulnerability is related to insufficient input validation in the libarchive library, which may allow remote attackers to execute arbitrary code. A heap-based out-of-bounds write...

CVE-2022-34785

Jenkins build-metrics Plugin 1.3 and earlier does not perform permission checks in multiple HTTP endpoints, allowing attackers with Overall/Read permission to obtain information about jobs otherwise inaccessible to them...

barcelonacreativa.info Cross Site Scripting vulnerability OBB-2701159

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-22355 · Jenkins · Jenkins Opsgenie Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins OpsGenie Plugin versions 1.9 and earlier Description: The issue concerns the storage of API keys in an unencrypted manner within the global configuration file and job config.xml files on the Jenkins controller. These keys can be...

PT-2022-6755 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

PT-2022-19512 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.8.5 and earlier Description: The issue allows a user to change their e-mail address without password verification. Recommendations: For Nagios XI versions 5.8.5 and earlier, at the moment, there is no information about a...

Linux copy_info_records_to_user() Privilege Escalation

The vulnerability of the copyinforecordstouser function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service interruptions...

PT-2022-31285

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17.9 through v5.17.14 Description The issue is related to a use-after-free error due to early fb info cleanup in the Linux Kernel. This error was introduced in version v5.17.9 and fixed in version v5.17.14. The actual...

PT-2022-30946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A use-after-free issue due to early fb info cleanup was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

Google Android Information Disclosure Vulnerability (CNVD-2022-53372)

Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android has an information disclosure vulnerability, which can be exploited by attackers to obtain sensitive information...

PT-2022-31579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.41 through 5.15.45 Description A use-after-free issue due to early fb info cleanup was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.15.41...

Malicious Package

pygrata-utils is a malicious package. The library attempts to harvest and upload the AWS credentials, network interface information and environment variables to a remote endpoint: "hxxp://graph.pygrata.com:8000/upload."...

Information Disclosure

drwebengine is vulnerable to information disclosure. An attacker can inject and execute malicious code through the request package and gain access to sensitive user information and digital currency keys...

Google Android Information Disclosure Vulnerability (CNVD-2022-53381)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to access sensitive files...

CVE-2022-34174

creationtimestamp| type| source ---|---|--- 2022-06-23 20:45:50+00:00| seen| https://t.me/cibsecurity/45038 2025-11-01 11:41:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4k5dywykyc2...

CVE-2022-31787

IdeaTMS 2022 is vulnerable to SQL Injection via the PATHINFO...

CVE-2022-31787

IdeaTMS 2022 is vulnerable to SQL Injection via the PATHINFO...

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

June 23, 2022—KB5014665 OS Build 20348.803 Preview Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. No...

PT-2022-20931

Name of the Vulnerable Software and Affected Versions IdeaTMS version 2022 Description The issue allows for SQL Injection via the PATH INFO. Recommendations For IdeaTMS version 2022, update to a version that includes a fix for this issue, if available. At the moment, there is no information about...