D-Link DIR-615 安全漏洞

The D-Link DIR-615 is a wireless router from AUO D-Link, Taiwan, China. A security vulnerability exists in firmware version 20.06 of the D-Link DIR-615. The vulnerability stems from the WAN configuration page can be accessed directly without authentication, which could lead to disclosure of...

CVE-2022-30601

creationtimestamp| type| source ---|---|--- 2022-08-19 00:23:03+00:00| seen| https://t.me/cibsecurity/48416 2026-03-09 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0252/...

CVE-2022-30571

The iWay Service Manager Console component of TIBCO Software Inc.'s TIBCO iWay Service Manager contains easily exploitable Reflected Cross Site Scripting XSS vulnerabilities that allow a low privileged attacker with network access to execute scripts targeting the affected system or the victim's...

TIBCO Software iWay Service Manager 路径遍历漏洞

TIBCO Software iWay Service Manager is a highly scalable enterprise service bus from TIBCO Software with a fully integrated service design-time environment and Web services for application and container creation and deployment capabilities. A path traversal vulnerability exists in TIBCO Software...

openssh_key_parser 安全漏洞

opensshkeyparser is an open source python package. A security vulnerability exists in versions of opensshkeyparser prior to 0.0.6, which stems from the fact that if a key field is shorter than declared, the parser raises an error and displays a message containing the original field value...

GHSA-P64X-8RXX-WF6Q Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc and Extract database functions are subject to SQL injection if untrusted data is used as a kind/lookupname value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected...

CVE-2022-2006

creationtimestamp| type| source ---|---|--- 2022-06-21 10:54:55+00:00| seen| https://t.me/truesecator/3080 2025-04-16 17:56:46+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12116...

CVE-2021-39043

IBM Jazz Team Server 6.0.6, 6.0.6.1, 7.0, 7.0.1, and 7.0.2 is vulnerable to stored cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session...

JGraph draw.io输入验证错误漏洞

JGraph draw.io is a configurable chart/whiteboard visualization application from JGraph. A security vulnerability exists in JGraph draw.io versions prior to 18.0.6 that stems from improper input validation...

CVE-2022-30688

creationtimestamp| type| source ---|---|--- 2022-05-17 22:27:47+00:00| seen| https://t.me/cibsecurity/42852...

CVE-2022-1068

creationtimestamp| type| source ---|---|--- 2022-04-02 02:20:12+00:00| seen| https://t.me/cibsecurity/40033...

CVE-2022-1033

Unrestricted Upload of File with Dangerous Type in GitHub repository crater-invoice/crater prior to 6.0.6...

CVE-2022-0628

creationtimestamp| type| source ---|---|--- 2022-03-21 21:26:28+00:00| seen| https://t.me/cibsecurity/39325...

CVE-2022-23350

BigAnt Software BigAnt Server v5.6.06 was discovered to contain a cross-site scripting XSS vulnerability...

Big Ant Studios BigAnt Software BigAnt Server 跨站脚本漏洞

BigAnt Software BigAnt Server is a server from Big Ant Studios in Australia. BigAnt Software BigAnt Server version 5.6.06 suffers from a security vulnerability, no details of the vulnerability are available at this time...

PT-2022-13422

Name of the Vulnerable Software and Affected Versions calibre-web versions prior to 0.6.17 Description The issue is related to Server-Side Request Forgery SSRF in the GitHub repository janeczku/calibre-web. This is due to an incomplete fix, which results in the blacklist not checking for 0.0.0.0,...

CVE-2022-0633

creationtimestamp| type| source ---|---|--- 2022-02-21 17:11:04+00:00| seen| https://t.me/truesecator/2655...

CVE-2021-33945

RICOH Printer series SP products 320DN, SP 325DNw, SP 320SN, SP 320SFN, SP 325SNw, SP 325SFNw, SP 330SN, Aficio SP 3500SF, SP 221S, SP 220SNw, SP 221SNw, SP 221SF, SP 220SFNw, SP 221SFNw v1.06 were discovered to contain a stack buffer overflow in the file /etc/wpasupplicant.conf. This vulnerabili...

CVE-2021-22806

creationtimestamp| type| source ---|---|--- 2022-02-11 20:28:47+00:00| seen| https://t.me/cibsecurity/37305...

UBUNTU-CVE-2020-13669

Cross-site Scripting XSS vulnerability in ckeditor of Drupal Core allows attacker to inject XSS. This issue affects: Drupal Core 8.8.x versions prior to 8.8.10.; 8.9.x versions prior to 8.9.6; 9.0.x versions prior to 9.0.6...