‼ CVE-2022-45482 ‼
📖 Read
via "National Vulnerability Database".
Lazy Mouse server enforces weak password requirements and doesn't implement rate limiting, allowing remote unauthenticated users to easily and quickly brute force the PIN and execute arbitrary commands. CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45480 ‼
📖 Read
via "National Vulnerability Database".
PC Keyboard WiFi & Bluetooth allows an attacker (in a man-in-the-middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45215 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in Book Store Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter under the Add New System User module.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-4271 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Reflected in GitHub repository osticket/osticket prior to 1.16.4.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45483 ‼
📖 Read
via "National Vulnerability Database".
Lazy Mouse allows an attacker (in a man in the middle position between the server and a connected device) to see all data (including keypresses) in cleartext. CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43272 ‼
📖 Read
via "National Vulnerability Database".
DCMTK v3.6.7 was discovered to contain a memory leak via the T_ASC_Association object.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-46159 ‼
📖 Read
via "National Vulnerability Database".
Discourse is an open-source discussion platform. In version 2.8.13 and prior on the `stable` branch and version 2.9.0.beta14 and prior on the `beta` and `tests-passed` branches, any authenticated user can create an unlisted topic. These topics, which are not readily available to other users, can take up unnecessary site resources. A patch for this issue is available in the `main` branch of Discourse. There are no known workarounds available.📖 Read
via "National Vulnerability Database".
🗓️ Deserialized web security roundup: Algolia API key leak, GitHub CVE reporting, scoring CVSS scores 🗓️
📖 Read
via "The Daily Swig".
Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news📖 Read
via "The Daily Swig".
The Daily Swig | Cybersecurity news and views
Deserialized web security roundup: Algolia API key leak, GitHub CVE reporting, scoring CVSS scores
Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news
‼ CVE-2022-45652 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the startIp parameter in the formSetPPTPServer function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45672 ‼
📖 Read
via "National Vulnerability Database".
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the formWx3AuthorizeSet function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45667 ‼
📖 Read
via "National Vulnerability Database".
Tenda i22 V1.0.0.3(4687) is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45650 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the firewallEn parameter in the formSetFirewallCfg function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45671 ‼
📖 Read
via "National Vulnerability Database".
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the appData parameter in the formSetAppFilterRule function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44363 ‼
📖 Read
via "National Vulnerability Database".
Tenda i21 V1.0.0.14(4656) is vulnerable to Buffer Overflow via /goform/setSnmpInfo.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45674 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6V1.0 V15.03.05.19 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45669 ‼
📖 Read
via "National Vulnerability Database".
Tenda i22 V1.0.0.3(4687) was discovered to contain a buffer overflow via the index parameter in the formWifiMacFilterGet function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45653 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the page parameter in the fromNatStaticSetting function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45651 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6V1.0 V15.03.05.19 was discovered to contain a buffer overflow via the list parameter in the formSetVirtualSer function.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44348 ‼
📖 Read
via "National Vulnerability Database".
Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45641 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6V1.0 V15.03.05.19 is vulnerable to Buffer Overflow via formSetMacFilterCfg.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-44365 ‼
📖 Read
via "National Vulnerability Database".
Tenda i21 V1.0.0.14(4656) has a stack overflow vulnerability via /goform/setSysPwd.📖 Read
via "National Vulnerability Database".