17637 matches found
PT-2022-14591 · Google · Android Kernel
Name of the Vulnerable Software and Affected Versions: Android kernel affected versions not specified Description: The issue affects the Android kernel. No further details are provided about the nature of the problem or its potential impact. Recommendations: At the moment, there is no information...
CVE-2022-34659
The CVE-2022-34659 vulnerability affects Simcenter STAR-CCM+ (all versions) when the Power-on-Demand public license server is used. The issue is an information disclosure where applications expose the user, host, and display name of users, enabling an attacker to retrieve this data. Mitigations f...
CVE-2022-35290
CVE-2022-35290 corresponds to an information-disclosure issue in SAP Authenticator for Android. The available documents consistently describe that under certain conditions an attacker could access information that should be restricted. The NVD entry lists a CVSS v3.1 base score of 7.5 (HIGH), wit...
Andariel deploys DTrack and Maui ransomware
On July 7, 2022, the CISA published an alert, entitled, "North Korean State-Sponsored Cyber Actors Use Maui Ransomware To Target the Healthcare and Public Health Sector," related to a Stairwell report, "Maui Ransomware." Later, the Department of Justice announced that they had effectively clawed...
Apache JSPWiki Cross-Site Scripting Vulnerability (CNVD-2022-83599)
Apache JSPWiki is an open source WikiWiki engine built on Java, Servlet and JSP from the Apache Apache Foundation. Apache JSPWiki has a security vulnerability that stems from the fact that a carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability that an attacker could...
Apache JSPWiki XSS due to crafted request on XHRHtml2Markup.jsp
A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Version 2.11.3 contains a fix for th...
What We're Looking Forward to at Black Hat, DEF CON, and BSidesLV 2022
The week of Black Hat, DEF CON, and BSides is highly anticipated annual tradition for the cybersecurity community, a weeklong chance for security pros from all corners of the industry to meet in Las Vegas to talk shop and share what they've spent the last 12 months working on. But like many belov...
0xCC'd
We spend a lot of time preparing for Blackhat, and as part of putting together content for the show, one of our best, Lurene Grenier, submitted an unexpected piece of content: a poem. Now this poem isn't our regular security research or a shiny piece of corporate correspondence which we would nev...
CVE-2022-2652
CVE-2022-2652 concerns the v4l2loopback kernel module. The vulnerability arises from how format strings are crafted in the card label, allowing kernel stack memory leakage and, in some cases, a DoS via v4l2loopback crashing when the label is requested (e.g., with many %s modifiers). Multiple open...
CVE-2022-28732 Apache JSPWiki Cross-site scripting vulnerability on WeblogPlugin
A carefully crafted request on WeblogPlugin could trigger an XSS vulnerability on Apache JSPWiki, which could allow the attacker to execute javascript in the victim's browser and get some sensitive information about the victim. Apache JSPWiki users should upgrade to 2.11.3 or later...
CVE-2022-35867
This CVE (CVE-2022-35867) affects xhyve’s e1000 virtual device. The root cause is improper validation of the length of user-supplied data before copying to a stack-based buffer, enabling local privilege escalation and arbitrary code execution in the hypervisor context. Documented in ZDI-22-949, w...
CVE-2022-35223
creationtimestamp| type| source ---|---|--- 2022-08-02 20:18:36+00:00| seen| https://t.me/cibsecurity/47432...
PUB-A-212625740
Bulletin has no description...
mPDF 7.0 Local File Inclusion
Exploit Title: mPDF 7.0 - Local File Inclusion Google Dork: N/A Date: 2022-07-23 Exploit Author: Musyoka Ian Vendor Homepage: https://mpdf.github.io/ Software Link: https://mpdf.github.io/ Version: CuteNews Tested on: Ubuntu 20.04, mPDF 7.0.x CVE: N/A !/usr/bin/env python3 from urllib.parse impor...
Wavlink WN530HG4 - Password Disclosure
Exploit Title: Wavlink WN530HG4 - Password Disclosure Date: 2022-06-12 Exploit Author: Ahmed Alroky Author Company : AIactive Version: M30HG4.V5030.191116 Vendor home page : wavlink.com Authentication Required: No CVE : CVE-2022-34047 Tested on: Windows Exploit...
Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affects Rational Service Tester (CVE-2021-35603)
Summary A vulnerability in IBM SDK Java Version 1.8 and IBM Runtime Environment Java Version 1.8 used by Rational Service Tester. Rational Service Tester has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-35603 DESCRIPTION: An unspecified vulnerability in Java SE related to th...
Security Bulletin: A vulnerability in IBM Java SDK and IBM Java Runtime affects Rational Performance Tester (CVE-2021-35550)
Summary A vulnerability in IBM SDK Java Version 1.8 and IBM Runtime Environment Java Version 1.8 used by Rational Performance Tester. Rational Performance Tester has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2021-35550 DESCRIPTION: An unspecified vulnerability in Java SE relat...
Information Leakage Vulnerability in NetGuard Firewall System of Beijing NetGuard Nebula Information Technology Co.
Beijing Netnifty Information Technology Company is a leading enterprise in the domestic information security industry, specializing in the research and development, production and sales of information security products, and providing hierarchical overall security solutions and security profession...