On the Radar: Is 2022 the year encryption is doomed?

By Martin Lee. Quantum technology in development by the world’s superpowers will render many current encryption algorithms obsolete overnight. When it becomes available, whoever controls this technology will be able to read almost any encrypted data or message they wish. Organizations need... Thi...

CVE-2021-39744

creationtimestamp| type| source ---|---|--- 2022-03-30 20:12:43+00:00| seen| https://t.me/cibsecurity/39843...

CVE-2021-39773

In VpnManagerService, there is a possible disclosure of installed VPN packages due to side channel information disclosure. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

AttacheCase may insecurely load Dynamic Link Libraries

Overview AttacheCase may insecurely load Dynamic Link Libraries. AttacheCase is an open source file encryption software provided by HiBARA Software. AttacheCase contains an issue with the DLL search path, which may lead to insecurely loading Dynamic Link Libraries CWE-427. Taizoh Tsukamoto of...

Design/Logic Flaw

The Archer RSS feed integration for Archer 6.x through 6.9 SP1 6.9.1.0 is affected by an insecure credential storage vulnerability. A malicious attacker may obtain access to credential information to use it in further attacks...

g33kyrash Online Banking System 跨站脚本漏洞

g33kyrash Online Banking System is an online banking system developed by g33kyrash Personal Developer using PHP and MySQL. A security vulnerability exists in Online Banking System Protect version 1.0, which originates in the user profile, systeminfo, and account management parameters...

CVE-2021-43110

creationtimestamp| type| source ---|---|--- 2022-03-29 22:11:29+00:00| seen| https://t.me/cibsecurity/39773 2025-07-01 16:03:01+00:00| seen| https://bsky.app/profile/pigondrugs.bsky.social/post/3lsw35ott6i2r...

PDF Generator Web App Using TCPDF 1.0 Local File Inclusion Vulnerability

PDF Generator Web App using TCPDF version 1.0 suffers from a local file inclusion vulnerability. Title: PDF Generator Web App using TCPDF 1.0 LFI To RCE Author: Hejap Zairy Vendor: https://www.sourcecodester.com/php/15243/pdf-generator-web-app-using-tcpdf-and-phpoop-free-source-code.html...

FruityWifi Remote Code Execution Exploit

This is an exploit for FruityWifi that binds a shell to tcp port 4444 using a remote code execution vulnerability leveraged via a SOAP request. !/usr/bin/python3 -- coding: utf-8 -- usage: ./akhlutprowlingterror.py http://phishingsiteurl text=''' -o==============o- ████ ██████ ██████ ██ ██ ██████...

CVE-2022-26296

CVE-2022-26296 concerns the Berkeley BOOM RISC-V core (Berkeley Out-of-Order BOOM). The root cause is commit d77c2c3 enabling a side-channel that allows a local attacker to disclose information. Impact is described as unauthorized information disclosure with local access; CVSSv3.1 base score 5.5 ...

CVE-2021-44103

...

CVE-2021-44103

CVE-2021-44103 is documented as a duplicate of CVE-2021-42192, with connected data detailing a privilege-escalation flaw in KONGA 0.14.9. The Nuclei template for CVE-2021-42192 describes an improper access control that lets an authenticated user elevate to full admin by crafting a request (notabl...

CVE-2021-26599

creationtimestamp| type| source ---|---|--- 2022-03-28 07:39:49+00:00| seen| https://t.me/cibsecurity/39622 2025-06-03 13:00:35+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-26599.yaml 2025-06-04 21:02:23+00:00| seen|...

Online Banking System 1.0 SQL Injection

Title: Online Banking System v1.0 SQLi Author: nu11secur1ty Date: 03.27.2022 Vendor: https://www.sourcecodester.com/users/tips23 Software: https://www.sourcecodester.com/php/14868/banking-system-using-php-free-source-code.html Reference:...

CVE-2022-27938

CVE-2022-27938 affects stb_image.h version 2.19 (used by libsixel and other products). The issue is a reachable assertion in stbi__create_png_image_raw. Documented impact indicates a local impact with a high availability impact per CVSS 3.1 (vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H) a...

CVE-2022-1071

CVE-2022-1071 affects mruby/mruby prior to 3.2. The issue is a use-after-free in mrb_vm_exec, as documented in multiple sources (e.g., NVD/NIST entry). CVSSv3.1/base scores indicate HIGH severity (8.2) with LOCAL exploitability, low privileges required, UI interaction required, and CHANGED scope,...

Ruby on Rails Directory Traversal Vulnerability

Directory traversal vulnerability in Action View in Ruby on Rails allows remote attackers to read arbitrary files...

CVE-2022-25571

Bluedon Information Security Technologies Co.,Ltd Internet Access Detector v1.0 was discovered to contain an information leak which allows attackers to access the contents of the password file via unspecified vectors...

CVE-2022-25571

CVE-2022-25571 concerns Bluedon Information Security Technologies Co., Ltd. Internet Access Detector v1.0. The vulnerability is described as an information leak that allows attackers to access the contents of the password file via unspecified vectors. Documented impact notes refer to confidential...

CVE-2022-25571

Bluedon Information Security Technologies Co.,Ltd Internet Access Detector v1.0 was discovered to contain an information leak which allows attackers to access the contents of the password file via unspecified vectors...