‼ CVE-2022-1511 ‼
📖 Read
via "National Vulnerability Database".
Improper Access Control in GitHub repository snipe/snipe-it prior to 5.4.4.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-24892 ‼
📖 Read
via "National Vulnerability Database".
Shopware is an open source e-commerce software platform. Starting with version 5.0.4 and before version 5.7.9, multiple tokens for password reset can be requested. All tokens can be used to change the password. This makes it possible for an attacker to take over the victim's account if they somehow gain access to the victims email account and find an unused password reset token in the emails. This issue is fixed in version 5.7.9.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28117 ‼
📖 Read
via "National Vulnerability Database".
A Server-Side Request Forgery (SSRF) in feed_parser class of Navigate CMS v2.9.4 allows remote attackers to force the application to make arbitrary requests via injection of arbitrary URLs into the feed parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22443 ‼
📖 Read
via "National Vulnerability Database".
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 224440.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29411 ‼
📖 Read
via "National Vulnerability Database".
SQL Injection (SQLi) vulnerability in Mufeng's Hermit ????? plugin <= 3.1.6 on WordPress allows attackers to execute SQLi attack via (&id).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29412 ‼
📖 Read
via "National Vulnerability Database".
Multiple Cross-Site Request Forgery (CSRF) vulnerabilities in Hermit ????? plugin <= 3.1.6 on WordPress allow attackers to delete cache, delete a source, create source.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29584 ‼
📖 Read
via "National Vulnerability Database".
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 allows stored XSS when a particular Cascading Style Sheets (CSS) class for embedly is used, and JavaScript code is constructed to perform an action.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22322 ‼
📖 Read
via "National Vulnerability Database".
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 218370.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29415 ‼
📖 Read
via "National Vulnerability Database".
Unauthenticated Reflected Cross-Site Scripting (XSS) vulnerability in Mati Skiba @ Rav Messer's Ravpage plugin <= 2.16 at WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-28892 ‼
📖 Read
via "National Vulnerability Database".
Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0 is vulnerable to Cross Site Request Forgery (CSRF) because randomly generated tokens are too easily guessable.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-1514 ‼
📖 Read
via "National Vulnerability Database".
Stored XSS via upload plugin functionality in zip format in GitHub repository neorazorx/facturascripts prior to 2022.06. Cross-site scripting attacks can have devastating consequences. Code injected into a vulnerable application can exfiltrate data or install malware on the user's machine. Attackers can masquerade as authorized users via session cookies, allowing them to perform any action allowed by the user account.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22441 ‼
📖 Read
via "National Vulnerability Database".
IBM InfoSphere Information Server 11.7 could allow an authenticated user to view information of higher privileged users and groups due to a privilege escalation vulnerability. IBM X-Force ID: 224426.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29413 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) leading to Stored Cross-Site Scripting (XSS) in Mufeng's Hermit ????? plugin <= 3.1.6 on WordPress via &title parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29410 ‼
📖 Read
via "National Vulnerability Database".
Authenticated SQL Injection (SQLi) vulnerability in Mufeng's Hermit ????? plugin <= 3.1.6 on WordPress allows attackers with Subscriber or higher user roles to execute SQLi attack via (&ids).📖 Read
via "National Vulnerability Database".
‼ CVE-2021-38952 ‼
📖 Read
via "National Vulnerability Database".
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 211408.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-27860 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) leading to Cross-Site Scripting (XSS) in Shea Bunge's Footer Text plugin <= 2.0.3 on WordPress.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-29585 ‼
📖 Read
via "National Vulnerability Database".
In Mahara before 20.10.5, 21.04.4, 21.10.2, and 22.04.0, a site using Isolated Institutions is vulnerable if more than ten groups are used. They are all shown from page 2 of the group results list (rather than only being shown for the institution that the viewer is a member of).📖 Read
via "National Vulnerability Database".
‼ CVE-2022-22427 ‼
📖 Read
via "National Vulnerability Database".
IBM InfoSphere Information Server 11.7 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScript code in the Web UI thus altering the intended functionality potentially leading to credentials disclosure within a trusted session. IBM X-Force ID: 223720.📖 Read
via "National Vulnerability Database".
🕴 Microsoft: Russia Using Cyberattacks in Coordination With Military Invasion of Ukraine 🕴
📖 Read
via "Dark Reading".
Six Russian state-backed threat actors have lunched 237 cyberattacks on Ukraine's infrastructure, new research from MIcrosoft shows.📖 Read
via "Dark Reading".
Dark Reading
Microsoft: Russia Using Cyberattacks in Coordination With Military Invasion of Ukraine
Six Russian state-backed threat actors have lunched 237 cyberattacks on Ukraine's infrastructure, new research from MIcrosoft shows.
🔏 The Most Exploited Vulnerabilities of 2021 🔏
📖 Read
via "".
U.S., Australian, Canadian, New Zealand, and UK cybersecurity authorities say these vulnerabilities were targeted the most by hackers last year.📖 Read
via "".
Digital Guardian
The Most Exploited Vulnerabilities of 2021
U.S., Australian, Canadian, New Zealand, and UK cybersecurity authorities say these vulnerabilities were targeted the most by hackers last year.
🕴 Capital One Ventures, Snowflake Ventures, Verizon Ventures, and Wipro Ventures Join Securonix $1B+ Growth Investment as Strategic Investors 🕴
📖 Read
via "Dark Reading".
Blue Chip Companies Deepen Commitment Based on Success of Long-Standing Customer and Partner Relationships and Conviction of Securonix’s Vision and Hypergrowth Potential📖 Read
via "Dark Reading".