17638 matches found
5 Reasons You Should Learn About Cyber Security
By Owais Sultan In this technological era, the world has been converted into a global village with everything connected to everything.… This is a post from HackRead.com Read the original post: 5 Reasons You Should Learn About Cyber Security...
Buffer Over-read in function put_on_cmdline
Description Buffer Over-read in function putoncmdline at exgetln.c:3540 vim version git log commit e366ed4f2c6fa8cb663f1b9599b39d57ddbd8a2a HEAD - master, tag: v8.2.5136, origin/master, origin/HEAD POC ./vim -u NONE -i NONE -n -m -X -Z -e -s -S /mnt/share/max/fuzz/poc/vim/pocbor2s.dat -c :qa!...
hellertal.startbilder.de Cross Site Scripting vulnerability OBB-2654821
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Token bruteforcing.
Impact What kind of vulnerability is it? Who is impacted? Authenticated requests to the notebook server with ContentsManager.allowhidden = False only prevented listing the contents of hidden directories, not accessing individual hidden files or files in hidden directories i.e. hidden files were...
CVE-2022-22953
creationtimestamp| type| source ---|---|--- 2022-06-16 20:21:40+00:00| seen| https://t.me/cibsecurity/44644 2025-08-04 09:04:42+00:00| seen| https://gist.github.com/Th3redTea/d4ad7778a978d13241b07d4f5567dde2...
Security Bulletin: Multiple Vulnerabilities have been identified in IBM WebSphere Application Server shipped with IBM WebSphere Remote Server
Summary IBM WebSphere Application Server is shipped with IBM WebSphere Remote Server. Information about security vulnerabilities affecting IBM WebSphere Application Server have been published in a security bulletin -- CVE-2022-28614, CVE-2022-28615, CVE-2022-29404, CVE-2022-26377, CVE-2022-31813,...
CVE-2022-30549
CVE-2022-30549 describes an out-of-bounds read in Fuji Electric’s V-Server v4.0.11.0 and earlier and V-Server Lite v4.0.13.0 and earlier, exploitable by opening a specially crafted image file. The Red Hat/NVD entries corroborate the vulnerability in V-Server/V-Server Lite, with potential informat...
Adobe Bridge Multiple Vulnerabilities (APSB22-25) - Mac OS X
The host is missing an important security update according to Adobe June update. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2022-30159
CVE-2022-30159 is identified as a Microsoft Office information disclosure vulnerability referenced by security updates KB5002062/KB5002222/KB5002224. The connected documents indicate affected ecosystems include SharePoint Server and Microsoft Office components, with remediation via the listed sec...
CVE-2022-32381
itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via /school/model/getadminprofile.php?myindex=...
CVE-2022-32377
CVE-2022-32377 is documented as an SQL Injection vulnerability in itsourcecode Advanced School Management System v1.0, exploitable via /school/model/get_exam_timetable.php?id=. The connected records (NVD, Red Hat, CNVD, CVE lists) confirm a persistent SQLi issue affecting the application. CVSS me...
CVE-2022-24004
CVE-2022-24004 pertains to a Stored XSS in REDCap 12.0.11 affecting Messenger/messenger_ajax.php. The vulnerability allows any authenticated user editing an existing conversation to inject arbitrary code into the messenger title (new_title) field, with the payload then executing in the browsers o...
CVE-2021-41672
Affected product: PEEL Shopping CMS 9.4.0. Vulnerability: Authenticated SQL injection in utilisateurs.php. A user in the Administrator group can inject malicious SQL to influence application logic and retrieve data from the database. This is documented across multiple sources (NVD/Red Hat/CNVD) i...
CVE-2022-20200
CVE-2022-20200 affects Android 12L’s SoftApManager.updateApState, where a missing permission check can leak hotspot state. This enables local information disclosure with no extra privileges and no user interaction. The vulnerability is documented across multiple sources (NVD/Red Hat/PRION/Pixel b...
CVE-2022-20210
CVE-2022-20210 describes a bug in the modem parsing NAS messages used by UE and EMM in Android, where a malformed NAS message could cause remote crash leading to DoS or RCE. Connected sources confirm this is a vulnerability in the Android modem stack with critical impact (network attack, no user ...
Panther Labs: reflected XSS on panther.com
Summary: When visiting runpanther.io I got redirected to panther.com and the application failed to sanitise user's input resulting into HTML injection and possible XSS. Steps To Reproduce: F1774502 1. Go to...
CVE-2021-35102
creationtimestamp| type| source ---|---|--- 2022-06-14 14:18:56+00:00| seen| https://t.me/cibsecurity/44364...
CVE-2022-31845
CVE-2022-31845 affects WAVLINK WN535 G3 with firmware M35G3R.V5030.180927. The vulnerability is in the live_check.shtml page and allows information disclosure via execution of the exec cmd function, enabling an attacker to obtain sensitive router information. The connected data corroborates that ...
CVE-2022-32258
The Siemens SINEMA Remote Connect Server (all versions before v3.1) contains a legacy feature that allows importing device configurations via a dedicated endpoint, which could be leveraged to disclose information. The underlying issue is the presence of this endpoint-enabled import functionality ...