CVE-2022-29395

creationtimestamp| type| source ---|---|--- 2022-05-11 00:43:04+00:00| seen| https://t.me/cibsecurity/42314...

CVE-2020-28629

creationtimestamp| type| source ---|---|--- 2022-04-18 20:23:35+00:00| seen| https://t.me/cibsecurity/41022...

CVE-2022-27960

Insecure permissions configured in the userid parameter at SysUserController.java of OFCMS v1.1.4 allows attackers to access and arbitrarily modify users' personal information...

CVE-2022-22998

creationtimestamp| type| source ---|---|--- 2022-03-21 18:50:15+00:00| seen| https://t.me/truesecator/2755 2022-03-22 12:21:26+00:00| seen| https://t.me/NeKaspersky/2021 2022-07-13 00:25:43+00:00| seen| https://t.me/cibsecurity/46102...

CVE-2022-0714

creationtimestamp| type| source ---|---|--- 2022-02-22 22:12:42+00:00| seen| https://t.me/cibsecurity/37898...

Northstar Club Management 安全漏洞

Northstar Club Management is a web-based solution from Northstar, Inc. that allows organizations to manage all elements of a club, such as memberships, guests, events, and more. A security vulnerability exists in Northstar Club Management version 6.3, which stems from a lack of valid filtering an...

USN-5244-1 dbus vulnerability

Daniel Onaca discovered that DBus contained a use-after-free vulnerability, caused by the incorrect handling of usernames sharing the same UID. An attacker could possibly use this issue to cause DBus to crash, resulting in a denial of service...

CVE-2021-4182

creationtimestamp| type| source ---|---|--- 2021-12-31 00:34:27+00:00| seen| https://t.me/cibsecurity/34771...

The vulnerability of the application’s web interface for automated internal and external IT audits. McAfee Policy Auditor allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of the application’s web interface for automating internal and external IT audits, as provided by McAfee Policy Auditor, is related to the failure to protect the structure of the web page when processing the UID request parameter. Exploiting this vulnerability allows a malicious...

CVE-2021-42115

Missing HTTPOnly flag in Web Applications operating on Business-DNA Solutions GmbH’s TopEase® Platform Version = 7.1.27 allows an unauthenticated remote attacker to escalate privileges from unauthenticated to authenticated user via stealing and injecting the session- independent and static cookie...

CVE-2021-31852

A Reflected Cross-Site Scripting vulnerability in McAfee Policy Auditor prior to 6.5.2 allows a remote unauthenticated attacker to inject arbitrary web script or HTML via the UID request parameter. The malicious script is reflected unmodified into the Policy Auditor web-based interface which coul...

McAfee Policy Auditor 跨站脚本漏洞

McAfee Policy Auditor is an agent-based IT assessment solution that leverages the Security Content Automation Protocol SCAP to automate the processes required for internal and external IT and security audits.A reflective cross-site scripting vulnerability exists in versions of McAfee Policy Audit...

CVE-2021-33087

creationtimestamp| type| source ---|---|--- 2021-11-17 22:14:52+00:00| seen| https://t.me/cibsecurity/32547...

CVE-2021-35977

creationtimestamp| type| source ---|---|--- 2021-10-08 18:40:15+00:00| seen| https://t.me/cibsecurity/30249...

Samsung SMR 路径遍历漏洞

Samsung SMR is a system patch package from Samsung South Korea. It provides patches for Samsung mobile applications. A path traversal vulnerability exists in versions prior to Samsung SMR Oct-2021 Release 1, which stems from a path traversal vulnerability in FactoryAirCommnadManger, which allows ...

Design/Logic Flaw

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save function found in the /includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users unique STRIPE identifier and make purchases...

CVE-2021-39347 Stripe for WooCommerce 3.0.0 - 3.3.9 Missing Authorization Controls to Financial Account Hijacking

The Stripe for WooCommerce WordPress plugin is missing a capability check on the save function found in the /includes/admin/class-wc-stripe-admin-user-edit.php file that makes it possible for attackers to configure their account to use other site users unique STRIPE identifier and make purchases...

GitLab 信息泄露漏洞

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. An information disclosure vulnerability exists in GitLab...

CVE-2021-40378

creationtimestamp| type| source ---|---|--- 2021-09-21 04:41:53+00:00| seen| https://t.me/pwnwikizhchannel/842...

OnyakTech Comments Pro 信任管理问题漏洞

OnyakTech Comments Pro has been building DNN modules since 2003. A trust management issue vulnerability exists in OnyakTech Comments Pro that stems from a hard-coded username and user ID issue in the comment post request function. The vulnerability allows an attacker to control the username of a...