CVE-2022-39197 has been described as an XSS vulnerability in the teamserver that affected the Cobalt Strike version prior to 4.7.1.
Do Son
A critical buffer overflow & remote code execution (CVE-2022-41140) vulnerability affected several D-Link routers that were unpatched.
The CVE-2022-3239 flaw (CVSS score: 7.0) is a use-after-free bug that was found in the Linux kernel video4linux driver.
CVE-2022-40300 is an SQLi issue that could allow an attacker to query and access the database table entries using the vulnerable request
CVE-2022-3210 vulnerability affects the D-Link DIR-2150 hardware revision R with firmware version v4.01 & below
Security researcher released CVE-2022-37706 PoC exploit code and write-up for privilege escalation flaw in Enlightenment Desktop for Linux
CVE-2022-40283 impacts dozens of devices in the various models, including Lenovo L14 Gen 2, Lenovo L15 Gen 2, Lenovo P1 Gen 4,
there has been an increasing number of recent cases of phishing of Steam players through Browser-in-the-Browser technology
78researchlab released CVE-2022-34721 PoC exploit code for critical remote code execution vulnerability affecting multiple Windows versions.
Tracked as CVE-2022-40137 and affecting Lenovo Desktop, Desktop AIO, Smart Edge, Smart Office, ThinkStation, and ThinkSystem models
CVSS score: 9.8, CVE-2022-3180 allows unauthenticated attackers to add a malicious user with admin privileges to completely take over sites.
By sending a specially crafted request, an attacker could exploit the CVE-2022-37969 vulnerability to gain elevated privileges.