info-rm.com Cross Site Scripting vulnerability OBB-2510203

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

VulnCheck KEV: CVE-2022-26809

Remote Procedure Call Runtime Remote Code Execution Vulnerability...

lentos.versija.info Cross Site Scripting vulnerability OBB-2506847

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

project10.info Cross Site Scripting vulnerability OBB-2504431

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

April 2022 Patch Tuesday: Microsoft Releases 145 Vulnerabilities with 10 Critical; Adobe Releases 4 Advisories, 78 Vulnerabilities with 51 Critical.

Microsoft Patch Tuesday Summary Microsoft has fixed 145 vulnerabilities, including 17 Microsoft Edge vulnerabilities, in the April 2022 update, with ten 10 classified as Critical as they allow Remote Code Execution RCE. This month’s Patch Tuesday release includes fixes for two 2 zero-day...

Information disclosure

A CSRF token visible in the URL may possibly lead to information disclosure vulnerability...

PT-2022-2743 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to incorrect code generation management in the Windows DNS Server. It allows remote attackers to execute arbitrary code, affecting the system. Recommendation...

PT-2022-2642 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to insufficient input validation in the Windows Graphics Component, which can be exploited by remote attackers to execute arbitrary code on the syste...

CVE-2022-27830

Improper validation vulnerability in SemBlurInfo prior to SMR Apr-2022 Release 1 allows attackers to launch certain activities...

CVE-2022-27571

Heap-based buffer overflow vulnerability in sheifdgetinfoimage function in libsimba library prior to SMR Apr-2022 Release 1 allows code execution by remote attacker...

Out-of-bounds

In ccci, there is a possible leak of kernel pointer due to an incorrect bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS06108617; Issue ID: ALPS06108617...

CVE-2021-38930

The CVE-2021-38930 issue affects IBM System Storage DS8000 Management Console (HMC) for R8.5 (88.5x.x.x), R9.1 (89.1x.0.0), and R9.2 (89.2x.0.0). A remote attacker could obtain sensitive information via unpublished URLs. IBM’s bulletin lists CVSS ~5.3 base (3.0) with a network attack vector, and ...

CVE-2022-0989

creationtimestamp| type| source ---|---|--- 2022-04-11 18:16:04+00:00| seen| https://t.me/cibsecurity/40467...

Malicious Packages

exchangeclients and rush-lib are malicious packages. The packages contains empty README files but the strings: "rukkaz package" or "azbit package" present in the metadata. The packages are created to abuse the dependency confusion vulnerability. The malicious code executes upon installation and...

PT-2022-18492

Name of the Vulnerable Software and Affected Versions libsimba library versions prior to SMR Apr-2022 Release 1 Description The issue is related to a heap-based buffer overflow vulnerability in the sheifd get info image function. This vulnerability allows code execution by a remote attacker...

PT-2022-18496 · Samsung · One Ui Home

Name of the Vulnerable Software and Affected Versions: One UI Home versions prior to SMR April-2022 Release 1 Description: The issue allows unauthorized access to information about the currently launched foreground app. Recommendations: For versions prior to SMR April-2022 Release 1, update to th...

Google Play Bitten by Sharkbot Info-stealer ‘AV Solution’

Researchers have found the info-stealing Android malware Sharkbot lurking unsuspected in the depths of the Google Play store under the cover of anti-virus AV solutions. While analyzing suspicious applications on the store, the Check Point Research CPR team found what purported to be genuine AV...

Octosuite - Advanced Github OSINT Framework

Simply gatherOSINT on Github users and organizations like a god  FEATURES Fetches organization info Fetches user info Fetches repository info Returns contents of a path from a repository Returns a list of repos owned by an organization Returns a list of repos owned by a user Returns a list of...

info-svet.ru Cross Site Scripting vulnerability OBB-2477237

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-27819

SWHKD 1.1.5 allows unsafe parsing via the -c option. An information leak might occur but there is a simple denial of service memory exhaustion upon an attempt to parse a large or infinite file such as a block or character device...