4836 matches found
CVE-2022-26134
creationtimestamp| type| source ---|---|--- 2022-06-03 07:45:44+00:00| seen| https://www.cert.at/de/warnungen/2022/6/kritische-sicherheitslucke-in-atlassian-confluence-workarounds-verfugbar 2022-06-03 08:15:57+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2392 2022-06-03...
SUSE: Security Advisory (SUSE-SU-2022:1920-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Malicious code in stylis-ifl4 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67dee32869e4aa596866719fecd53f70729795c83ebace2b700e3322a45a0434 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Flower 授权问题漏洞
Flower is a Web-based, real-time monitoring and management of Celery distributed task queues. A denial of service vulnerability exists in the May 2, 2022 version of Flower and prior versions, which stems from being vulnerable to OAuth authentication bypass. An attacker can use this vulnerability ...
Malicious code in @amcdc/backend-api-swagger (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fdf152986975b3c807745701930b9dbe420c924c2f23afd1271d21dc73bd6c63 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in rkpacktest (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 64e155982820eba462dcbfa1616d8d13143172fae3248f9487a1d66ecfb674aa Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in mad-expo-core (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3b6c233978f8ced2a4470f669433a149ad554d58778e96f615d0dfbc7275c9f5 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in vor-test-project-npm-please-ignore-1 (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76b54e7d6e1b94a5892077c4de0ac61f32b1433a136e49363c4be9d886e76c7a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in simple-project-pkg-b (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 36656e6b75ae254df7a6e2a5d6664fe017a1357d328c429930e852e963f4dca3 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in coolqueue.io (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8b45bcc81654cdbe4ea3a6b5cc20f01160efe2d1b174f54299a4c4a8a65670f4 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Malicious code in @logistics-frontend/utils (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b2c617a6d61a62b6cadd5b810e4ef2ff8ab74e499dfe400bd5294f7b88e2a09c Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2022-1527
creationtimestamp| type| source ---|---|--- 2022-05-30 12:17:50+00:00| seen| https://t.me/cibsecurity/43534 2022-09-23 11:56:44+00:00| published-proof-of-concept| https://t.me/ETHICALHACKERSCOMMUNITY2/1238...
wuppr.com Cross Site Scripting vulnerability OBB-2633694
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
CVE-2022-20797
creationtimestamp| type| source ---|---|--- 2022-05-27 18:15:15+00:00| seen| https://t.me/cibsecurity/43490...
CVE-2022-30701
creationtimestamp| type| source ---|---|--- 2022-05-27 07:14:41+00:00| seen| https://t.me/cibsecurity/43471...
CVE-2022-28394
creationtimestamp| type| source ---|---|--- 2022-05-27 07:14:40+00:00| seen| https://t.me/cibsecurity/43470...
CVE-2022-26754
creationtimestamp| type| source ---|---|--- 2022-05-27 00:20:29+00:00| seen| https://t.me/cibsecurity/43465...
CVE-2022-26714
creationtimestamp| type| source ---|---|--- 2022-05-26 22:14:37+00:00| seen| https://t.me/cibsecurity/43427...
Microsoft Patch Tuesday May 2022: Edge RCE, PetitPotam LSA Spoofing, bad patches
Hello everyone! This episode will be about Microsoft Patch Tuesday for May 2022. Sorry for the delay, this month has been quite intense. As usual, Im using my Vulristics project and going through not only the vulnerabilities that were presented on May 10th, but all the MS vulnerabilities presente...