3624 matches found
CVE-2022-3689
creationtimestamp| type| source ---|---|--- 2022-11-28 16:28:16+00:00| seen| https://t.me/cibsecurity/53575 2025-03-18 10:00:06+00:00| published-proof-of-concept| Telegram/zR3G7SfYkfnK69UNOpyls8VYWA0vIOvRqvJArx2ZbPMEdo 2025-03-26 21:02:08+00:00| seen|...
github.com/russellhaering/gosaml2 is vulnerable to NULL Pointer Dereference
Impact In versions prior to v0.7.0 it was possible for an attacker to supply an invalid assertion which would trigger a panic due to a nil-pointer dereference. Patches The issue was patched in v0.7.0, released on March 2, 2022. Workarounds Callers to gosaml2 can use recover to handle panics to...
CVE-2013-2566
creationtimestamp| type| source ---|---|--- 2022-11-07 22:22:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/ssl/sslversion.rb 2024-02-15 00:48:21+00:00| seen| https://t.me/marianaalecu/3622 2024-02-15 00:49:09+00:00| seen|...
A Very Powerful Clipboard: Analysis of a Samsung in-the-wild exploit chain
Posted by Maddie Stone, Project Zero Note: The three vulnerabilities discussed in this blog were all fixed in Samsung’s March 2021 release. They were fixed as CVE-2021-25337, CVE-2021-25369, CVE-2021-25370. To ensure your Samsung device is up-to-date under settings you can check that your device ...
CVE-2022-3801
creationtimestamp| type| source ---|---|--- 2022-11-01 19:13:55+00:00| seen| https://t.me/cibsecurity/52395 2024-04-25 22:21:04+00:00| seen| https://t.me/arpsyndicate/4880 2024-12-24 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-12-24 2025-01-15 00:00:00+00:00| see...
CVE-2022-39285
creationtimestamp| type| source ---|---|--- 2022-10-08 00:17:32+00:00| seen| https://t.me/cibsecurity/51026 2023-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51071...
CVE-2022-41082
creationtimestamp| type| source ---|---|--- 2022-09-30 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=883 2022-09-30 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2022/09/customer-guidance-for-reported-zero-day-vulnerabilities-in-microsoft-exchange-server/...
CVE-2022-35413
creationtimestamp| type| source ---|---|--- 2022-09-14 02:25:57+00:00| seen| https://t.me/cibsecurity/49750 2024-01-15 10:01:13+00:00| seen| https://t.me/arpsyndicate/2777 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-03...
CVE-2022-37042
creationtimestamp| type| source ---|---|--- 2022-08-12 12:07:32+00:00| exploited| https://t.me/truesecator/3286 2022-08-12 18:43:37+00:00| seen| https://t.me/cibsecurity/48066 2022-08-13 07:34:20+00:00| exploited| https://t.me/itsecnews/1182 2022-08-20 17:15:20+00:00| published-proof-of-concept|...
Israeli Spyware Vendor Uses Chrome 0day to Target Journalists
By Deeba Ahmed The spyware vendor Candiru used the Chrome zero-day in March 2022 to target journalists and other unsuspected victims… This is a post from HackRead.com Read the original post: Israeli Spyware Vendor Uses Chrome 0day to Target Journalists...
CVE-2022-1565
creationtimestamp| type| source ---|---|--- 2022-07-18 20:39:52+00:00| seen| https://t.me/cibsecurity/46478 2023-03-29 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51122...
Security Updates for Microsoft Excel Products C2R (March 2021)
The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-27053, CVE-2021-27054,...
Security Updates for Microsoft Visio Products C2R (March 2021)
The Microsoft Visio Products are missing a security update. It is, therefore, affected by the following vulnerability: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...
Security Updates for Microsoft PowerPoint Products C2R (March 2021)
The Microsoft PowerPoint Products are missing a security update. It is, therefore, affected by the following vulnerability: - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-27056 C Tenable Network...
Security Updates for Microsoft Office Products C2R (March 2021)
The Microsoft Office Products are missing security updates. They are affected by a remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands. CVE-2021-24108, CVE-2021-27058 C Tenable Network Security, Inc. The descriptiv...
Azure File Sync Agent v15.0 Release – March 2022 (KB5003882)
Update for Azure File Sync agent version 15.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v15.0 Release – March 2022 (KB5003882)
Update for Azure File Sync agent version 15.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v15.0 Release – March 2022 (KB5003882)
Update for Azure File Sync agent version 15.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
march-daigakujuken.com Cross Site Scripting vulnerability OBB-2526412
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
WordPress Advanced Uploader plugin <= 4.2 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Roel van Beurden in WordPress Advanced Uploader plugin versions = 4.2. Solution Deactivate and delete. This plugin has been closed as of March 28, 2022 and is not available for download. This closure is temporary, pending a full review...