17635 matches found
CVE-2022-33746
CVE-2022-33746 is a Xen hypervisor issue where the P2M pool backing second-level address translation for guests can become very large, causing freeing to take longer than expected due to lack of preemption checks. The vulnerability is discussed in multiple connected advisories across distribution...
CVE-2022-42043
The CVE-2022-42043 entry concerns the Python d8s-xml package (PyPI) version 0.1.0, where a third-party backdoor named democritus-html has been inserted, enabling potential code execution. The connected documents confirm the affected component and root cause but do not provide a concrete patch ver...
CVE-2022-40181
CVE-2022-40181 affects Siemens Desigo PXM devices (PXM30-1, PXM30.E, PXM40-1, PXM40.E, PXM50-1, PXM50.E, PXG3.W100-1, PXG3.W100-2, PXG3.W200-1, PXG3.W200-2). The embedded browser fails to neutralize encoded URI schemes when redirected to resources by web app code, enabling a remote, low-privilege...
CVE-2022-39015
CVE-2022-39015 affects SAP BusinessObjects Business Intelligence Platform via BOE AdminTools/BOE SDK. Under certain conditions, an attacker can access information that should be restricted (validated by NVD entry and related Red Hat/CNVD entries). CVSSv3.1: AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N, ba...
GHSA-4MJX-2GH5-PH8H Exposure of sensitive Slack webhook URLs in debug logs and traces
Impact Debug logs expose sensitive URLs for Slack webhooks that contain private information. Patches The problem is fixed in v1.3.2 which redacts sensitive URLs for webhooks. Workarounds Disabling/filtering debug logs in case you use Slack webhooks using tracing log level and filters. References...
CVE-2022-42724
app/Controller/UsersController.php in MISP before 2.4.164 allows attackers to discover role names this is information that only the site admin should have...
Threat Roundup for September 30 to October 7
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Sept. 30 and Oct. 7. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...
NSA Alert: Topmost CVEs Actively Exploited By People’s Republic of China State-Sponsored Cyber Actors
On October 6, 2022, the United States National Security Agency NSA released a cybersecurity advisory on the Chinese government—officially known as the People’s Republic of China PRC states-sponsored cyber actors activity to seek national interests. These malicious cyber activities attributed to t...
CVE-2022-39876
Insertion of Sensitive Information into Log in PushRegIdUpdateClient of SReminder prior to 8.2.01.13 allows attacker to access device IMEI...
v8n vulnerable to Inefficient Regular Expression Complexity
Impact Inefficient regular expression complexity of lowercase and uppercase regex could lead to a denial of service attack. With a formed payload 'a' + 'a'.repeati + 'A', only 32 characters payload could take 29443 ms time execution when testing lowercase. The same issue happens with uppercase...
CVE-2022-39876
CVE-2022-39876 affects Samsung SReminder’s PushRegIdUpdateClient prior to version 8.2.01.13, where the logging facility can be written with sensitive information, enabling an attacker with local access to view the device IMEI. The root cause is improper handling of sensitive data in logs within P...
Sql injection
Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/viewstorage.php?id=...
Eternity Group Hackers Offering New LilithBot Malware-as-a-Service to Cybercriminals
The threat actor behind the malware-as-a-service MaaS known as Eternity Group has been linked to new piece of malware called LilithBot. "It has advanced capabilities to be used as a miner, stealer, and a clipper along with its persistence mechanisms," Zscaler ThreatLabz researchers Shatak Jain an...
Windows Gather MobaXterm Passwords
This module will determine if MobaXterm is installed on the target system and, if it is, it will try to dump all saved session information from the target. The passwords for these saved sessions will then be decrypted where possible, using the decryption information that HyperSine reverse...
Moodle No groups filtering in H5P activity attempts report
The H5P activity attempts report did not filter by groups, which in separate groups mode could reveal information to non-editing teachers about attempts/users in groups they should not have access to...
CVE-2022-20810
A vulnerability in the Simple Network Management Protocol SNMP of Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family could allow an authenticated, remote attacker to access sensitive information. This vulnerability is due to insufficient restrictions that allow a sensitive...
CVE-2022-20810
Cisco IOS XE Wireless Controller Software for the Catalyst 9000 Family is affected by CVE-2022-20810. The vulnerability arises from insufficient restrictions in SNMP, allowing an authenticated, remote attacker to read SNMP data and disclose SSID PSKs configured on the device via read-only communi...
CVE-2022-35155
Bus Pass Management System v1.0 was discovered to contain a reflected cross-site scripting XSS vulnerability via the searchdata parameter...
CVE-2022-23726
PingCentral contains an exposure where Spring Boot actuator endpoints are accessible with administrative authentication, leaking extensive environmental and application information. Affected: PingCentral versions prior to the listed versions. Root cause: actuator endpoints exposed due to access c...