WinAPRS 安全漏洞

WinAPRS is a multifaceted system for packet radios in Hams that allows monitoring of real-time geographic information such as vehicle location, weather status, radio direction finding, and more. It involves maps, GPS tracking, packet radios and more. A security vulnerability exists in WinAPRS...

USN-5416-1 linux-oem-5.14 vulnerabilities

Qiuhao Li, Gaoning Pan and Yongkang Jia discovered that the KVM implementation in the Linux kernel did not properly perform guest page table updates in some situations. An attacker in a guest vm could possibly use this to crash the host OS. CVE-2022-1158 It was discovered that the implementation ...

UBUNTU-CVE-2022-1516

A NULL pointer dereference flaw was found in the Linux kernel’s X.25 set of standardized network protocols functionality in the way a user terminates their session using a simulated Ethernet card and continued usage of this connection. This flaw allows a local user to crash the system...

Asterisk 代码问题漏洞

Asterisk is software for a PBX system that runs on Linux and supports IP calls using SIP, IAX, and H323 protocols. Asterisk version 19.x and prior versions of STIR/SHAKEN contain a security vulnerability that originates from the ability to send arbitrary requests e.g., GET to interfaces such as...

UBUNTU-CVE-2022-1204

A use-after-free flaw was found in the Linux kernel’s Amateur Radio AX.25 protocol functionality in the way a user connects with the protocol. This flaw allows a local user to crash the system...

CVE-2022-0784

creationtimestamp| type| source ---|---|--- 2022-03-28 22:41:50+00:00| seen| https://t.me/cibsecurity/39664 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-26 2025-01-26 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2022-0001

creationtimestamp| type| source ---|---|--- 2022-03-10 11:08:32+00:00| seen| https://t.me/sysodmins/14260 2022-03-11 07:04:29+00:00| published-proof-of-concept| https://t.me/SecLabNews/11732 2022-03-11 16:40:00+00:00| published-proof-of-concept| https://t.me/truesecator/2723 2022-06-16...

CVE-2022-25096

Home Owners Collection Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in /members/viewmember.php...

PT-2022-17219 · Ibexa +1 · Ibexa Dxp +1

Name of the Vulnerable Software and Affected Versions: Ibexa DXP ezsystems/ezpublish-kernel versions 7.5.x through 7.5.25 Ibexa DXP ezsystems/ezpublish-kernel versions 1.3.x through 1.3.11 Description: The issue allows Insecure Direct Object Reference IDOR attacks against image files because the...

CVE-2021-45420

creationtimestamp| type| source ---|---|--- 2022-02-14 16:33:26+00:00| seen| https://t.me/cibsecurity/37423 2025-01-27 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-01-27 2025-01-27 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2022-23020

creationtimestamp| type| source ---|---|--- 2022-01-25 22:18:47+00:00| seen| https://t.me/cibsecurity/36252...

Jfrog JFrog Artifactory SQL注入漏洞

Jfrog JFrog Artifactory is an open source, general-purpose Artifact repository manager from Israel's JFrog Jfrog that supports clustered and high-availability Docker registries and provides an end-to-end solution for automating artifacts used to track artifacts from development to production. JFr...

CVE-2021-44427

creationtimestamp| type| source ---|---|--- 2021-11-30 00:33:35+00:00| seen| https://t.me/cibsecurity/33073 2024-01-15 12:15:47+00:00| seen| https://t.me/arpsyndicate/2782 2024-11-22 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-22 2024-12-24 00:00:00+00:00| see...

CVE-2021-0661

creationtimestamp| type| source ---|---|--- 2021-11-25 10:36:56+00:00| seen| https://t.me/BlueRedTeam/1224 2021-11-25 11:00:21+00:00| seen| https://t.me/CyberSecurityTechnologies/4828 2021-11-25 15:06:57+00:00| seen| https://t.me/truesecator/2373 2021-11-25 16:45:07+00:00| seen|...

Datalust Seq 安全漏洞

Datalust Seq is a logging server from Datalust Australia. It is used to speed up diagnostics in complex, asynchronous and distributed applications. A security vulnerability exists in Datalust Seq.App.HtmlEmail, which stems from the fact that in some cases the program uses plaintext on port 25 and...

mysql: Server: Optimizer unspecified vulnerability (CPU Jul 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...

mysql: InnoDB unspecified vulnerability (CPU Jul 2021)

Vulnerability in the MySQL Server product of Oracle MySQL component: InnoDB. Supported versions that are affected are 8.0.25 and prior. Difficult to exploit vulnerability allows high privileged attacker with logon to the infrastructure where MySQL Server executes to compromise MySQL Server...

WordPress 插件跨站脚本漏洞

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the SP...

Vulnerability in the MySQL Server product of Oracle MySQL (component: Server: Federated). Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of MySQL Server. CVSS 3.1 Base Score 4.9 (Availability impacts). CVSS Vector: (CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H).

...

UBUNTU-CVE-2021-2437

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.25 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Server. Successful...