The investigation revealed that only part of the LastPass source code and part of some proprietary technical documents were stolen
Do Son
CVE-2022-36804 affects Bitbucket Server and Data Center, allows attackers can execute arbitrary code by sending a malicious HTTP request
Cisco has addressed a high severity privilege escalation vulnerability (CVE-2022-20921) found in the API implementation of the Cisco MSO
@Enesdex found a privilege escalation flaw (CVE-2022-2959) in the Linux kernel that can be exploited by attackers for privilege escalation
Discovery Protocol is enabled by default globally and on all interfaces in FXOS and NX-OS, CVE-2022-20824 impacts numerous products
CVE-2021-36260 is a command injection vulnerability in the web server of some Hikvision products, due to the insufficient input validation
CVE-2022-38477 is a high-severity memory safety bugs within the browser engine, which could have been exploited to run arbitrary code
GitLab issued a security notice to fix a flaw (CVE-2022-2884) in the Community Edition and Enterprise Edition, with a CVSS score of 9.9.
Apache Flume released the latest security bulletin on August 21, which contains a remote code execution vulnerability (CVE-2022-34916)
Derek Abdine, a security researcher, disclosed multiple vulnerabilities in Arris routers, the most critical being CVE-2022-31793.
To exploit the CVE-2022-38392 bug first, the target device must meet the trigger conditions, and second, the attacker must also play an unfiltered song