PT-2022-19512 · Nagios · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions 5.8.5 and earlier Description: The issue allows a user to change their e-mail address without password verification. Recommendations: For Nagios XI versions 5.8.5 and earlier, at the moment, there is no information about a...

PT-2022-6755 · Tenda · Tenda Fh1202 +5

Name of the Vulnerable Software and Affected Versions: Tenda F1202 version V1.0BR V1.2.0.20408 Tenda FH1202 version V1.2.0.19 EN Tenda AC10 version V1.0 Tenda AC1206 version V1.0 Tenda AC7 version V1.0 Tenda AC5 version V1.0 Tenda AC9 version V3.0 Description: The issue is related to a stack...

Linux copy_info_records_to_user() Privilege Escalation

The vulnerability of the copyinforecordstouser function in Linux operating systems is related to the use of memory after it is freed. Exploiting this vulnerability can allow an attacker to enhance their privileges or cause service interruptions...

PT-2022-31285

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.17.9 through v5.17.14 Description The issue is related to a use-after-free error due to early fb info cleanup in the Linux Kernel. This error was introduced in version v5.17.9 and fixed in version v5.17.14. The actual...

Google Android Information Disclosure Vulnerability (CNVD-2022-53372)

Google Android is a Linux-based open source operating system from the U.S. company Google Google. Google Android has an information disclosure vulnerability, which can be exploited by attackers to obtain sensitive information...

PT-2022-30946

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.18.3 Description A use-after-free issue due to early fb info cleanup was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2022-31579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 5.15.41 through 5.15.45 Description A use-after-free issue due to early fb info cleanup was discovered. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 5.15.41...

Malicious Package

pygrata-utils is a malicious package. The library attempts to harvest and upload the AWS credentials, network interface information and environment variables to a remote endpoint: "hxxp://graph.pygrata.com:8000/upload."...

Information Disclosure

drwebengine is vulnerable to information disclosure. An attacker can inject and execute malicious code through the request package and gain access to sensitive user information and digital currency keys...

Google Android Information Disclosure Vulnerability (CNVD-2022-53381)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to access sensitive files...

CVE-2022-34174

creationtimestamp| type| source ---|---|--- 2022-06-23 20:45:50+00:00| seen| https://t.me/cibsecurity/45038 2025-11-01 11:41:12+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3m4k5dywykyc2...

CVE-2022-31787

IdeaTMS 2022 is vulnerable to SQL Injection via the PATHINFO...

CVE-2022-31787

IdeaTMS 2022 is vulnerable to SQL Injection via the PATHINFO...

June 23, 2022—KB5014665 (OS Build 20348.803) Preview

None None...

PT-2022-20931

Name of the Vulnerable Software and Affected Versions IdeaTMS version 2022 Description The issue allows for SQL Injection via the PATH INFO. Recommendations For IdeaTMS version 2022, update to a version that includes a fix for this issue, if available. At the moment, there is no information about...

CVE-2022-31786

IdeaLMS 2022 allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATHINFO...

PT-2022-20930

Name of the Vulnerable Software and Affected Versions IdeaLMS version 2022 Description The issue allows reflected Cross Site Scripting XSS via the IdeaLMS/Class/Assessment/ PATH INFO. This means an attacker can inject malicious scripts into the website, potentially stealing user data or taking...

PT-2025-8620

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A bug in the Linux kernel's virtio net driver causes a driver bug warning when using virtio net after a suspend/resume sequence. The issue arises because the virtnet freeze function free...

Oracle Cloud Infrastructure Information Disclosure Vulnerability (CNVD-2022-74098)

Oracle Corporation Oracle is the world's largest provider of information management software and services, founded in 1977, headquartered in Redwood shore, California, USA, open for global oracle certification. oracle Cloud Infrastructure is a cloud services platform from Oracle Corporation USA...

MAL-2022-4842 Malicious code in ng-browser-info (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85d08b5cae5a0b2e184e29594a9bd4622f1f9b7956c69649fe171bae5a7d9ad1 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...