PT-2022-17318

Name of the Vulnerable Software and Affected Versions: ThinkPHP Framework version 5.0.24 Description: The ThinkPHP Framework was discovered to be configured without the PATHINFO parameter, allowing attackers to access all system environment parameters from index.php. It is noted that this issue i...

CVE-2022-25452

Tenda AC6 v15.03.05.09multi was discovered to contain a stack overflow via the URLs parameter in the saveParentControlInfo function...

DEBIAN-CVE-2022-24773

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code does not properly check DigestInfo for a proper ASN.1 structure. This can lead to successful verification with signatures that...

DEBIAN-CVE-2022-24772

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a DigestInfo ASN.1 structure. This can allow padding bytes to be removed an...

UBUNTU-CVE-2022-24772

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code does not check for tailing garbage bytes after decoding a DigestInfo ASN.1 structure. This can allow padding bytes to be removed an...

UBUNTU-CVE-2022-24773

Forge also called node-forge is a native implementation of Transport Layer Security in JavaScript. Prior to version 1.3.0, RSA PKCS1 v1.5 signature verification code does not properly check DigestInfo for a proper ASN.1 structure. This can lead to successful verification with signatures that...

PT-2022-29180

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.233 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-29119

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.104 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-29064

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.27 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-29155

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.183 Description A potential security issue exists in the mac80211 hwsim component, related to the initialization of ieee80211 tx info at hw scan work. The actual impact and attack plausibility have not yet...

PT-2022-29200

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.14.270 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Lin...

PT-2022-29219

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.305 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

PT-2022-16869

Name of the Vulnerable Software and Affected Versions node-forge versions prior to 1.3.0 Description The issue concerns the RSA PKCS1 v1.5 signature verification code in node-forge, which does not properly check DigestInfo for a proper ASN.1 structure. This can lead to successful verification wit...

PT-2022-28995

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.13 Description The issue is related to the initialization of ieee80211 tx info at hw scan work in mac80211 hwsim. The actual impact and attack plausibility have not yet been proven. Recommendations For Linu...

CVE-2021-39792

In usbgadgetgivebackrequest of core.c, there is a possible use after free out of bounds read due to a race condition. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android...

Nextcloud Information Disclosure Vulnerability (CNVD-2022-20155)

Nextcloud is a set of open source self-hosted file synchronization and sharing communication applications platform from Nextcloud Germany.A security vulnerability exists in Nextcloud Server, which is due to an issue with the Nextcloud Text application which is provided with Nextcloud Server by...

PT-2022-16732 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: The issue is a heap-based buffer overflow in the SFS AddString function at bifs/script dec.c. This is a general information about the problem, but details about the estimated number of potentially affected...

Nivistealer - Steal Victim Images Exact Location Device Info And Much More

Steal Victim Images Exact Location Device Info And Much More Features of Nivi-Stealer: Steal Ip Steal Device Info Uses Device Gps to steal exact location Steal pic from front camera Send logs to discord also save them locally in a txt file Works on android,windows,linux,mac os Uses iframe to load...

Microweber has a vulnerability regarding input validation.

Microweber is a drag-and-drop online store management system from the Microweber community in the United States. The system includes modules for adding products, images, etc. An integer overflow vulnerability exists in versions of Microweber prior to 1.3. The vulnerability stems from the fact tha...

CVE-2022-25557

Tenda AX1806 v1.0.0.1 was discovered to contain a heap overflow in the function saveParentControlInfo. This vulnerability allows attackers to cause a Denial of Service DoS via the urls parameter...