778 matches found
GHSA-6278-2Q4M-CMF3 ZK Framework vulnerable to malicious POST
ZK Framework version 9.6.1, 9.6.0.1, 9.5.1.3, 9.0.1.2 and 8.6.4.1 allows attackers to access sensitive information via a crafted POST request sent to the component AuUploader...
CVE-2022-30984
A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent...
CVE-2022-30601
creationtimestamp| type| source ---|---|--- 2022-08-19 00:23:03+00:00| seen| https://t.me/cibsecurity/48416 2026-03-09 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0252/...
GHSA-QMHJ-M29V-GVMR Bots using py-cord as Discord API wrapper are vulnerable to shutdowns through remote code execution
Impact py-cord is a an API wrapper for Discord written in Python. Bots using py-cord version 2.0.0 are vulnerable to remote shutdown if they are added to the server with the application.commands scope without the bot scope. Currently, it appears that all public bots that use slash commands are...
PT-2022-22603 · Fusionpbx · Fusionpbx
Name of the Vulnerable Software and Affected Versions: FusionPBX version 5.0.1 Description: A command injection issue was found in FusionPBX via the /fax/fax send.php endpoint. This allows for potential command execution. Recommendations: For FusionPBX version 5.0.1, update to a version that...
FusionPBX 命令注入漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX version 5.0.1, which originates from a command...
Veritas NetBackup 安全漏洞
Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports ransomware detection and backup protection of environmental data such as metadata and virtual environments. A security vulnerabilit...
Veritas NetBackup 安全漏洞
Veritas NetBackup is a storage service from Veritas, Inc. that is used to provide backup and recovery capabilities for enterprise environments. The software supports the detection of ransomware and backup protection of environmental data such as metadata and virtual environments. A security...
CVE-2022-30122
creationtimestamp| type| source ---|---|--- 2022-07-23 06:11:11+00:00| seen| https://t.me/ctinow/55936 2022-12-06 00:40:34+00:00| seen| https://t.me/cibsecurity/54041 2025-12-29 06:18:32+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3mb46v7hjcv2h...
GNU SASL 缓冲区错误漏洞
GNU SASL is a GNU community implementation of the Simple Authentication and Security Layer SASL framework and some common SASL mechanisms. A security vulnerability exists in GNU SASL versions prior to 2.0.1 that stems from. Server-side out-of-bounds reads to maliciously authenticated GSS-API...
repo-git-downloader 安全漏洞
repo-git-downloader is a tool for downloading git repositories. repo-git-downloader v0.1.1 contains a denial of service vulnerability, which stems from the presence of improper regular expressions and can be exploited by attackers to cause a denial of service DOS attack...
validate-data 安全漏洞
validate-data is a NodeJs backend library by Anoop P R Individual Developer. It is used to validate data according to the provided rules. A denial of service vulnerability exists in validate-data version v0.1.1, which stems from not properly handling incoming error messages and can be exploited b...
CVE-2022-30155
Windows Kernel Denial of Service Vulnerability...
PT-2022-20733 · Itop +1 · Itop +1
Name of the Vulnerable Software and Affected Versions: ITOP version 3.0.1 Description: A cross-site scripting XSS issue was found in ITOP. The vulnerability can be exploited via the "/itop/pages/ajax.render.php" API endpoint. Recommendations: For ITOP version 3.0.1, as a temporary workaround,...
PYSEC-2022-43071
api-res-py package in PyPI 0.1 is vulnerable to a code execution backdoor in the request package...
com.amazon.opendistroforelasticsearch:opendistro_security (>=1.0.0.0 <=1.0.0.2), com.amazon.opendistroforelasticsearch:opendistro_security_advanced_modules (>=1.0.0.0 <=1.0.0.2) +37 more potentially affected by CVE-2020-7021 via org.elasticsearch:elasticsearch (>=7.0.0 <=7.0.1)
org.elasticsearch:elasticsearch MAVEN version =7.0.0, =1.0.0.0, =1.0.0.0, =1.31.2, =0.1.3, =7.0.0-35.0.0-beta1, =7.0.0-35.0.0-beta1, =0.1, =4.2, =4.2, =4.2, =1.1, =1.3 and more Source cves: CVE-2020-7021 Source advisory: OSV:GHSA-CQGV-256R-M9R8...
CVE-2022-30412
Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/individuals/updatestatus.php?id=...
UBUNTU-CVE-2022-29167
Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression to parse Host HTTP...
CVE-2022-29167 ReDoS vulnerability in header parsing in hawk
Hawk is an HTTP authentication scheme providing mechanisms for making authenticated HTTP requests with partial cryptographic verification of the request and response, covering the HTTP method, request URI, host, and optionally the request payload. Hawk used a regular expression to parse Host HTTP...