CVE-2022-42903

Summary: CVE-2022-42903 affects Zoho ManageEngine SupportCenter Plus up to version 11.0 Build 11024. The issue allows low-privileged users to view the organization users list, indicating an access-control exposure. Affected product/versions (per provided documents): Zoho ManageEngine SupportCente...

CVE-2022-42982

CVE-2022-42982 affects BKG Professional NtripCaster 2.0.39. The issue allows querying the NTRIP sourcetable over UDP without authentication, enabling a potential UDP amplification vector because the sourcetable is long yet can be retrieved with a small packet. Normally, UDP-only data is authentic...

Vulnerabilities & Threats that Matter 07 – 13 November 2022

...

CVE-2022-40845

CVE-2022-40845 affects the Tenda AC1200 Router model W15Ev2 with firmware V15.11.0.10(1576). The vulnerability is a password exposure caused by improper authorization/improper session management, enabling an attacker with router access to view sensitive information not explicitly authorized. CVSS...

CVE-2022-40845

The Tenda AC1200 Router model W15Ev2 V15.11.0.101576 is affected by a password exposure vulnerability. When combined with the improper authorization/improper session management vulnerability, an attacker with access to the router may be able to expose sensitive information which they're not...

CVE-2022-34329

CVE-2022-34329 – IBM CICS TX 11.7 information disclosure . The available documents confirm a vulnerability in IBM CICS TX 11.7 where an attacker could obtain sensitive information from HTTP response headers. The CVSS baseline in the sources is 5.3 (MEDIUM) with network access, low confidentiality...

CVE-2022-39891

The CVE-2022-39891 entry affects Samsung Editor Lite’s Libsavsaudio.so (parse_pce function). A heap overflow vulnerability exists in Editor Lite prior to version 4.0.41.3, which can allow an attacker to obtain information. The issue is tied to the libsavsaudio.so component and its parse_pce routi...

CVE-2022-40797

CVE-2022-40797 affects Roxy Fileman 1.4.6. The vulnerability is a remote code execution via uploading a .phar file, because conf.json’s FORBIDDEN_UPLOADS setting only blocks .php, .php4, and .php5. In some web-server configurations visiting a .phar file can execute the PHP interpreter, enabling a...

Vulnerabilities & Threats that Matter 31 October- 06 November 2022

...

CVE-2022-41258

SAP Financial Consolidation 1010 is affected by an input-validation–driven cross-site scripting (XSS) vulnerability in the Web Administration Console. An authenticated attacker can inject malicious script when running a common query, potentially_VIEWing_ or modifying information with limited impa...

CVE-2022-34825

The CVE-2022-34825 issue affects CLUSTERPRO X (5.0 and earlier), EXPRESSCLUSTER X (5.0 and earlier), CLUSTERPRO X SingleServerSafe (5.0 and earlier), and EXPRESSCLUSTER X SingleServerSafe (5.0 and earlier). It stems from an uncontrolled search path element in these products. The vulnerability all...

Massive Phishing Campaigns Target India Banks’ Clients

We found five banking malware families targeting customers of seven banks in India to steal personal and credit card information via phishing campaigns...

Expedia Group Bug Bounty: Sensitive information for phpinfo.php at https://products.ean.com/

Vulnerability description not provided...

CVE-2022-39371

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package that provides ITIL Service Desk features, licenses tracking and software auditing. Script related HTML tags in assets inventory information are not properly neutralized. This issue has...

CVE-2022-39262

GLPI stands for Gestionnaire Libre de Parc Informatique. GLPI is a Free Asset and IT Management Software package, GLPI administrator can define rich-text content to be displayed on login page. The displayed content is can contains malicious code that can be used to steal credentials. This issue h...

Exploit for SQL Injection in Reputeinfosystems Bookingpress

CVE-2022-0739 Proof-of-Concept exploit SQLI BookingPress befo...

Vulnerabilities & Threats that Matter 24-30 October 2022

...

CVE-2022-32935

CVE-2022-32935 is an Apple lock-screen vulnerability addressed by updates across multiple Apple platforms. The issue allowed a user to view restricted content from the lock screen due to a state-management flaw. It affects iOS/iPadOS versions prior to the patches: iOS 15.7.1, iPadOS 15.7.1, iOS 1...

CVE-2022-42323

CVE-2022-42323 concerns Xenstore in the Xen hypervisor. The issue arises after the XSA-322 fix: any Xenstore node owned by a removed domain is reassigned to Dom0, enabling two cooperating guests to create an unbounded number of Xenstore nodes. This can exhaust Xenstore quota and lead to denial of...

Samsung Galaxy Store Bug Could've Let Hackers Secretly Install Apps on Targeted Devices

A now-patched security flaw has been disclosed in the Galaxy Store app for Samsung devices that could potentially trigger remote command execution on affected phones. The vulnerability, which affects Galaxy Store version 4.5.32.4, relates to a cross-site scripting XSS bug that occurs when handlin...