17635 matches found
Vulnerabilities
Vulnerabil...
CVE-2022-36877
Samsung Members before 4.3.00.11 (Global) and before 14.0.02.4 (China) expose sensitive information in FaqSymptomCardViewModel via logs, enabling local attackers to access device identification. The issue is confirmed across multiple sources (including PT-2022-23681) with a local attack vector an...
Powershell Exec, Windows shellcode stage, Windows x64 Bind Named Pipe Stager
Execute an x64 payload from a command via PowerShell. Custom shellcode stage. Listen for a pipe connection Windows x64 Module Options msf use payload/cmd/windows/powershell/x64/custom/bindnamedpipe msf payloadbindnamedpipe show actions ...actions... msf payloadbindnamedpipe set ACTION msf...
Powershell Exec, Windows shellcode stage, Reverse TCP Stager (RC4 Stage Encryption DNS, Metasm)
Execute an x86 payload from a command via PowerShell. Custom shellcode stage. Connect back to the attacker Module Options msf use payload/cmd/windows/powershell/custom/reversetcprc4dns msf payloadreversetcprc4dns show actions ...actions... msf payloadreversetcprc4dns set ACTION msf...
CVE-2022-33941
creationtimestamp| type| source ---|---|--- 2022-09-08 12:15:06+00:00| seen| https://t.me/cibsecurity/49447...
Should add check for Insufficient allowance
Lines of code Vulnerability details Impact There is not check for Insufficient allowance inside transferFrom method. Proof of Concept Tools Used Code analytics Recommended Mitigation Steps requirecurrentAllowance = amount, "ERC20: insufficient allowance"; --- The text was updated successfully, bu...
setPeriodSize need check for value range
Lines of code Vulnerability details Impact If periodSize is mistakenly set too small, 0 or a small value, the price oracle might be easier to manipulate. As a consequence, multiple functionality depending on oracle price feed may lose accuracy, and even incur large fund loss. Proof of Concept The...
CIEM vs CWPP vs CSPM
This article will explore three solutions, CIEM, CWPP, and CSPM, detail a sample case for each, and help you to determine when and how to use them—whether individually or in conjunction with one another...
WordPress Twenty Seventeen 3.0 Cross-origin resource sharing information Vulnerability
Title: WordPress 6.0.2 - THEME - Twenty Seventeen: 3.0- CORS-Vulnerability Author: nu11secur1ty Vendor: https://wordpress.org/ Software: Twenty SeventeenVersion: 3.0 Reference: https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/WordPress/2022/Twenty-Seventeen-3.0 Description: The...
Curious, Innovative, Creative, Community Driven: Meet Cyb3rWard0g, Roberto Rodriquez
When I grow up I want to be? Dancer or a veterinarian Happiest memories: Tearing up the dance floor at weddings and playing soccer in the streets of Lima, Peru Previous Job roles : Mopped floors for McDonalds, packed boxes at an Avon warehouse, Manager at Olive Garden, Beer taster/server and then...
CVE-2022-3026
The WP Users Exporter plugin for WordPress (versions up to and including 1.4.2) is vulnerable to CSV Injection via the Export Users feature. An authenticated attacker (e.g., a subscriber) can inject untrusted data into profile fields (e.g., First Names) that are embedded in the CSV exported by an...
Vulnerabilities & Threats that Matter 29 August – 04 September
...
CVE-2022-3099
creationtimestamp| type| source ---|---|--- 2022-09-03 20:40:22+00:00| seen| https://t.me/cibsecurity/49275 2024-01-29 09:15:37+00:00| seen| https://t.me/cultofwire/1186...
CVE-2022-34369
Dell PowerScale OneFS is affected across multiple releases (9.0.0–9.1.0.20, 9.2.1.13, 9.3.0.6, 9.4.0.3). The issue involves insertion of sensitive information into log files, which could enable a remote, unprivileged attacker to access exposed data. Affected components are the logging paths withi...
Prynt Stealer Contains a Backdoor to Steal Victims' Data Stolen by Other Cybercriminals
Researchers discovered a private Telegram channel-based backdoor in the information stealing malware, dubbed Prynt Stealer, which its developer added with the intention of secretly stealing a copy of victims' exfiltrated data when used by other cybercriminals. "While this untrustworthy behavior i...
CVE-2022-39176
CVE-2022-39176 affects BlueZ before 5.59. The underlying flaw is that profiles/audio/avrcp.c does not validate params_len, enabling physically proximate attackers to obtain sensitive information. Documented across multiple sources (Astra Linux advisory, Debian DLA-3879, Red Hat/Nessus plugs) conf...
25 Years of Nmap: Happy Scan-iversary!
I didn't know it then, but on September 1, 1997, my life changed. That was the day that Fyodor's Nmap was first released to the world, courtesy of the venerable Phrack magazine. By the way, check out our recent podcast with Fyodor himself if you haven’t yet. At the time, I had just started my...
CVE-2022-32743
CVE-2022-32743 affects Samba; the dNSHostName attribute is not validated, potentially allowing unprivileged users to write it. Connected sources confirm the issue in Samba (4.x) and note advisories reference this CVE; one entry (CBLMARINER) states no patch is available currently. No exploitation ...