Vulnerability of the web interface of the Cisco IOS XE operating system, allowing a hacker to execute arbitrary commands

The vulnerability of the Cisco IOS XE operating system’s web interface exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Microsoft SharePoint Server Remote Code Execution Vulnerability (CNVD-2023-53468)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A remote code...

CVE-2022-45874

Huawei Aslan Children's Watch has an improper authorization vulnerability. Successful exploit could allow the attacker to access certain file...

CVE-2022-41290 IBM AIX privilege escalation

IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rmrlcachefile command to obtain root privileges. IBM X-Force ID: 236690...

CVE-2022-25929 Cross-site Scripting (XSS)

The package smoothie from 1.31.0 and before 1.36.1 are vulnerable to Cross-site Scripting XSS due to improper user input sanitization in strokeStyle and tooltipLabel properties. Exploiting this vulnerability is possible when the user can control these properties...

Design/Logic Flaw

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46318

The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings...

CVE-2022-46314

The IPC module has defects introduced in the design process. Successful exploitation of this vulnerability may affect system availability...

CVE-2022-46318

The HAware module has a function logic error. Successful exploitation of this vulnerability will affect the account removal function in Settings...

The vulnerability of the Windows Graphics Component, which allows a hacker to disclose protected information on Windows operating systems

The vulnerability of the Windows Graphics Component relates to the disclosure of information. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2022-14751 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android version 13 Description: The issue is related to a side channel information disclosure in the getSmsRoleHolder function of RoleService.java. This could allow an attacker to determine whether an app is installed without requiring query...

PT-2022-5863 · Microsoft · 365 Apps For Enterprise +2

Name of the Vulnerable Software and Affected Versions: Microsoft 365 Apps for Enterprise affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft Office Graphics component, allowing an attacker to execute arbitrary code using a specially...

DEV-0139 launches targeted attacks against the cryptocurrency industry

Over the past several years, the cryptocurrency market has considerably expanded, gaining the interest of investors and threat actors. Cryptocurrency itself has been used by cybercriminals for their operations, notably for ransom payment in ransomware attacks, but we have also observed threat...

Arbitrary File Read Vulnerability in Macroview HCM Human Resource Management System

Beijing Hongjing Century Software Co., Ltd "Hongjing Software" focuses on the research, development and application promotion of human resources and talent management digitalization digitalization and intelligence products for state-owned enterprises and institutions. There is an arbitrary file...

CVE-2022-41158 eyoom builder Remote Code Execution Vulnerability

Remote code execution vulnerability can be achieved by using cookie values as paths to a file by this builder program. A remote attacker could exploit the vulnerability to execute or inject malicious code...

Macroview eHR suffers from an arbitrary file read vulnerability

Beijing Hongjing Century Software Co., Ltd "Hongjing Software" has always been focusing on the research and development and application promotion of human resources and talent management digitalization digitalization and intelligence products for state-owned enterprises and institutions since its...

Offensive-Payloads

Offensive Payloads This repository is a collection of payloads...

Directorist < 7.4.2.2 - Subscriber+ Arbitrary User Password Update via IDOR

The plugin suffers from an IDOR vulnerability which an attacker can exploit to change the password of arbitrary users instead of his own. The following Python script automates the exploitation of this vulnerability. The script was tested on an installation of WordPress 6.1 with the vulnerable...

CVE-2022-44560

The launcher module has an Intent redirection vulnerability. Successful exploitation of this vulnerability may cause launcher module data to be modified...

Unauthorized Access Vulnerability in ACCMBOS Platform of Guangdong Zhongshi Intelligent Control Technology Co.

Guangdong Zhongshi Intelligent Control Technology Co., Ltd. is a science and technology enterprise with industrial Internet applications and services and smart city construction as its core business. An unauthorized access vulnerability exists in the ACCMBOS platform of Guangdong Zhongshi...