CVE-2022-1827

The PDF24 Article To PDF WordPress plugin through 4.2.2 does not have CSRF check in place when updating its settings, which could allow attackers to make a logged in admin change them via a CSRF attack...

WordPress plugin PDF24 Articles To PDF 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation. WordPress is a set of blogging platforms developed using the PHP language. WordPress plugin is an application plugin. WordPress PDF24 Articles To PDF plugin 4.2.2 and earlier versions have a cross-site request forgery...

PT-2022-3521 · Schneider Electric · Ecostruxure Power Commission

Name of the Vulnerable Software and Affected Versions: EcoStruxure Power Commission versions prior to V2.22 Description: A vulnerability exists that could cause all remote domains to access the resources supplied by the server when an attacker sends a fetch request from a third-party site or...

CVE-2022-30922

creationtimestamp| type| source ---|---|--- 2022-06-08 18:32:46+00:00| seen| https://t.me/cibsecurity/44040...

CVE-2022-1883

SQL Injection in GitHub repository camptocamp/terraboard prior to 2.2.0...

CVE-2022-29309

mysiteforme v2.2.1 was discovered to contain a Server-Side Request Forgery...

CVE-2022-29028

A vulnerability has been identified in JT2Go All versions V13.3.0.3, Teamcenter Visualization V13.3 All versions V13.3.0.3, Teamcenter Visualization V14.0 All versions V14.0.0.1. The TiffLoader.dll is vulnerable to infinite loop condition while parsing specially crafted TIFF files. An attacker...

PT-2022-19557

Name of the Vulnerable Software and Affected Versions Tiddlywiki5 version 5.2.2 Description An arbitrary file upload vulnerability in the file upload module allows attackers to execute arbitrary code via a crafted SVG file. The vendor argues that this is not a legitimate issue and there is no...

Tiddlywiki5 代码问题漏洞

Tiddlywiki5 is an independent JavaScript wiki by Jeremy Ruston, an individual developer in the UK. It is used for browsers, Node.js, AWS Lambda, and more. A code issue vulnerability exists in Tiddlywiki5 version 5.2.2, which stems from an arbitrary file upload issue in the file upload module. An...

GHSA-JQWH-JRPG-5J3H Jenkins Favorite Plugin vulnerable to Cross-Site Request Forgery

Jenkins Favorite Plugin version 2.2.0 and older is vulnerable to CSRF resulting in data modification...

CVE-2021-0126

Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...

CVE-2022-0027

creationtimestamp| type| source ---|---|--- 2022-05-11 20:34:34+00:00| seen| https://t.me/cibsecurity/42387...

CVE-2022-1453

creationtimestamp| type| source ---|---|--- 2022-05-11 00:32:57+00:00| seen| https://t.me/cibsecurity/42272 2026-04-03 21:02:33+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3mimmlfbfd32i...

CVE-2022-28708

On F5 BIG-IP 16.1.x versions prior to 16.1.2.2 and 15.1.x versions prior to 15.1.5.1, when a BIG-IP DNS resolver-enabled, HTTP-Explicit or SOCKS profile is configured on a virtual server, an undisclosed DNS response can cause the Traffic Management Microkernel TMM process to terminate. Note:...

CVE-2022-27662

On F5 Traffix SDC 5.2.x versions prior to 5.2.2 and 5.1.x versions prior to 5.1.35, a stored Cross-Site Template Injection vulnerability exists in an undisclosed page of the Traffix SDC Configuration utility that allows an attacker to execute template language-specific instructions in the context...

Northern.tech Mender Enterprise 跨站请求伪造漏洞

Northern.tech Mender Enterprise is a wireless update manager for IoT devices from Northern.tech. A security vulnerability exists in Northern.tech Mender Enterprise prior to version 3.2.2, which stems from a cross-domain websocket hijacking allowed via the Deviceconnect microservice from 1.3.0...

CVE-2022-28438

creationtimestamp| type| source ---|---|--- 2022-04-22 00:33:09+00:00| seen| https://t.me/cibsecurity/41287...

CVE-2022-22181

creationtimestamp| type| source ---|---|--- 2022-04-14 20:19:10+00:00| seen| https://t.me/cibsecurity/40785...

CVE-2022-22550

Dell PowerScale OneFS, versions 8.2.2 and above, contain a password disclosure vulnerability. An unprivileged local attacker could potentially exploit this vulnerability, leading to account take over...

CVE-2022-26631

creationtimestamp| type| source ---|---|--- 2022-04-06 15:10:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1877 2022-04-18 18:23:22+00:00| seen| https://t.me/cibsecurity/41010 2026-07-29 12:00:44+00:00| seen| https://t.me/CVEhub/9364 2026-07-30 00:01:14+00:00| seen|...