Latest news
An attacker could exploit the CVE-2022-36066 vulnerability to upload a malicious Zip or Gzip Tar archive file to execute arbitrary code
CVE-2022-41040, is a Server-Side Request Forgery (SSRF) vulnerability, CVE-2022-41082, allows remote code execution (RCE)
Andy Nguyen released CVE-2022-2566 PoC exploit code for high FFmpeg heap out-of-bounds memory write vulnerability affecting FFMPEG
CVE-2021-43980 was caused by a long-standing concurrency flaw in the simplified implementation of blocking reads and writes
hackers exploit CVE-2022-39261 to read access to private files, contents of other files on the server, database credentials Drupal-powered websites
Microsoft did not explain the details of the CVE-2022-37972 vulnerability but said that the vulnerability has been disclosed in advance.
By sending a specially-crafted call, an attacker could exploit the CVE-2022-36934 vulnerability to execute arbitrary code on the system.
CVE-2022-35951 has a CVSS score of 7.0 and is described as a heap overflow in Redis 7.0 XAUTOCLAIM command's COUNT argument.
Sophos published a security advisory about CVE-2022-3236, a code injection flaw that affects the User Portal and Webadmin of Sophos Firewall
An attacker could exploit the CVE-2022-40955 vulnerability to deserialize and thus achieve remote code execution.
CVE-2022-28721, rated as critical in severity with a 9.8 CVSS scale is a buffer overflow, caused by improper bounds checking
CVE-2022-39197 has been described as an XSS vulnerability in the teamserver that affected the Cobalt Strike version prior to 4.7.1.