{"vulnerability": "2022-48", "sightings": [{"uuid": "34436100-ac6c-40b8-b3fc-7edbe71a84cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2024-01-31T18:10:03.000000Z"}, {"uuid": "c21feb8b-d5ec-4646-ac35-bb3196e291aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48197", "type": "exploited", "source": "https://www.exploit-db.com/exploits/51198", "content": "", "creation_timestamp": "2023-04-01T00:00:00.000000Z"}, {"uuid": "5d13e339-b25d-4637-881b-233c71648fbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48470", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/113729147924043094", "content": "", "creation_timestamp": "2024-12-28T06:57:59.409032Z"}, {"uuid": "22df05b8-c0e0-4174-b586-b5f4cad88811", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48470", "type": "seen", "source": "https://bsky.app/profile/cve-notifications.bsky.social/post/3ledxh254g22k", "content": "", "creation_timestamp": "2024-12-28T07:16:01.749979Z"}, {"uuid": "7331a8bd-6e1e-4812-b834-661836f861bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48610", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lk2qmojmc32h", "content": "", "creation_timestamp": "2025-03-10T23:51:08.669509Z"}, {"uuid": "abbb7706-9422-4ecd-a670-408fcacb3b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-02-23T02:10:52.000000Z"}, {"uuid": "e3361c65-6421-4342-91b4-aac5859094ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-17)", "content": "", "creation_timestamp": "2025-06-17T00:00:00.000000Z"}, {"uuid": "3528118c-2450-467e-88fe-a82c3fe2d3d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-06-17)", "content": "", "creation_timestamp": "2025-06-17T00:00:00.000000Z"}, {"uuid": "5b89cd11-55a5-4756-9025-9480358b1daf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://gist.github.com/Ant0wan/47ec3e4d21f0d679eabde1000c04eb92", "content": "", "creation_timestamp": "2025-04-21T18:16:35.000000Z"}, {"uuid": "371cd946-335b-4693-8c4e-3b227bbffe3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-05-31)", "content": "", "creation_timestamp": "2025-05-31T00:00:00.000000Z"}, {"uuid": "3624c71f-39c8-4dbe-93ea-a8e2be198698", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-06-01)", "content": "", "creation_timestamp": "2025-06-01T00:00:00.000000Z"}, {"uuid": "083d9531-69b8-4287-841a-5c19051bc271", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lp5vio5fzd2c", "content": "", "creation_timestamp": "2025-05-14T21:02:23.476431Z"}, {"uuid": "4bb985bb-2c5b-4d92-b705-8926ba2ef870", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-12)", "content": "", "creation_timestamp": "2025-09-12T00:00:00.000000Z"}, {"uuid": "1a35ae5d-e125-465a-8aab-fdc8f1c6f5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-21)", "content": "", "creation_timestamp": "2025-07-21T00:00:00.000000Z"}, {"uuid": "496b3220-5ca3-46d7-b59c-16c47f796a29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48323", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3l76g26rx2g", "content": "", "creation_timestamp": "2025-10-19T21:02:28.644483Z"}, {"uuid": "af4b2ee5-f2ad-4348-9942-bf3ca910c609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-10-22T12:02:05.000000Z"}, {"uuid": "0f3d92d0-a7b3-4151-8979-0a3a5743b3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "d16212f3-8ca4-4dc3-8de8-4eb2b15234a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-07-30)", "content": "", "creation_timestamp": "2025-07-30T00:00:00.000000Z"}, {"uuid": "b1ce4b5d-7f89-4632-8708-7c13cdf75b5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-01)", "content": "", "creation_timestamp": "2025-08-01T00:00:00.000000Z"}, {"uuid": "48d26bb5-6fed-47b0-a164-31fe14088c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-16)", "content": "", "creation_timestamp": "2025-09-16T00:00:00.000000Z"}, {"uuid": "af9c6028-96c5-4804-a684-2df9df4f80d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-15)", "content": "", "creation_timestamp": "2025-10-15T00:00:00.000000Z"}, {"uuid": "aa4b4e14-4cea-4f61-96d7-6021b8b72b5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-21)", "content": "", "creation_timestamp": "2025-09-21T00:00:00.000000Z"}, {"uuid": "9255e084-88f5-4424-ab39-11e84fdb23ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-10)", "content": "", "creation_timestamp": "2025-08-10T00:00:00.000000Z"}, {"uuid": "5cb6692e-0d48-4453-9b42-2cbf9e26394f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://bsky.app/profile/pigondrugs.bsky.social/post/3m3n6t5d5ae23", "content": "", "creation_timestamp": "2025-10-20T16:01:29.466303Z"}, {"uuid": "005d4b60-8feb-468b-9b3a-f66df8705da2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4950884", "content": "", "creation_timestamp": "2025-10-20T16:19:15.863578Z"}, {"uuid": "a545e25e-6b1b-4d7a-9a2f-d494d6ab1bde", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-11-01)", "content": "", "creation_timestamp": "2025-11-01T00:00:00.000000Z"}, {"uuid": "ae752bd2-31d0-4173-b8ca-20d34ea3a92e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m3nmqgdccs2w", "content": "", "creation_timestamp": "2025-10-20T20:10:32.380326Z"}, {"uuid": "4fb7cef7-fa31-4001-8937-b7cb0e2a3df3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48666", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "89b333aa-4054-4543-a17a-fcc566ea149f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48827", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "dabae612-6f16-4b0f-b6c9-8a0c8b4256e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48828", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "2fdcb350-170a-453d-a71d-0554bf8fe3a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48829", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-07", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "134ab755-4983-491b-a7a3-dc50e1bdc015", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48935", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-226-15", "content": "", "creation_timestamp": "2025-08-14T10:00:00.000000Z"}, {"uuid": "15f64e43-2eff-46f0-ab41-45453ad70471", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-15)", "content": "", "creation_timestamp": "2025-08-15T00:00:00.000000Z"}, {"uuid": "8ca2a0a7-ea60-456b-8f95-6c867acfe31e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-08-17)", "content": "", "creation_timestamp": "2025-08-17T00:00:00.000000Z"}, {"uuid": "68e56494-0912-4892-a7af-1d2b93b97e29", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-28)", "content": "", "creation_timestamp": "2025-10-28T00:00:00.000000Z"}, {"uuid": "455fb784-f940-4db1-b7fc-c324804db620", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m5tfyspy7k2b", "content": "", "creation_timestamp": "2025-11-17T14:16:20.060311Z"}, {"uuid": "4a0554cb-8a2c-4468-8860-0dc4ec2034d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "13274c9a-4244-4c8d-b342-8543b86e0af1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "1fcc0d0b-a680-4637-85e1-b8d40c7c0b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-10-14)", "content": "", "creation_timestamp": "2025-10-14T00:00:00.000000Z"}, {"uuid": "d8095bed-09f5-4ee5-b65a-30fd0b3945db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-22)", "content": "", "creation_timestamp": "2025-09-22T00:00:00.000000Z"}, {"uuid": "86dfc913-fc2b-40c3-8ce4-e86684d62993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-09-29)", "content": "", "creation_timestamp": "2025-09-29T00:00:00.000000Z"}, {"uuid": "5259974d-7d91-4c46-bd2e-d07e4d2545db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-08-22)", "content": "", "creation_timestamp": "2025-08-22T00:00:00.000000Z"}, {"uuid": "7bf41e71-460f-474f-be9f-2fd2f650044c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://bsky.app/profile/mecambioamac.com/post/3m3ugk4j7ik2c", "content": "", "creation_timestamp": "2025-10-23T13:08:17.838845Z"}, {"uuid": "0cdecb50-9d9a-412b-91c9-69b7c9d1f176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3m3qa4bemix2w", "content": "", "creation_timestamp": "2025-10-21T21:02:34.232117Z"}, {"uuid": "591401d8-e330-4d95-8272-635753e68c0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-09-15)", "content": "", "creation_timestamp": "2025-09-15T00:00:00.000000Z"}, {"uuid": "a01873cd-eec8-4364-9f0d-78c598f23170", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://bsky.app/profile/thedailytechfeed.com/post/3m3rkjegecs2q", "content": "", "creation_timestamp": "2025-10-22T09:41:27.071212Z"}, {"uuid": "339d507a-9497-42fa-9537-834fbd9404bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48986", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3me6zzvrufd2z", "content": "", "creation_timestamp": "2026-02-06T13:45:15.863485Z"}, {"uuid": "86ab4f87-bfd5-487e-89e4-e4459b93baed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-02)", "content": "", "creation_timestamp": "2025-12-02T00:00:00.000000Z"}, {"uuid": "a4ce8bdb-9d53-4a9d-9d4d-1017a1631365", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-03)", "content": "", "creation_timestamp": "2025-12-03T00:00:00.000000Z"}, {"uuid": "6b87ad07-bb7f-49c2-b8bb-aaf4fea90f50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-043-06", "content": "", "creation_timestamp": "2026-02-12T11:00:00.000000Z"}, {"uuid": "4f8f0e02-edb4-4241-83ca-da85791eec6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-12)", "content": "", "creation_timestamp": "2025-12-12T00:00:00.000000Z"}, {"uuid": "7c9efddb-1c8a-4c63-9487-a4315c50a5c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48986", "type": "seen", "source": "https://bsky.app/profile/linux.activitypub.awakari.com.ap.brid.gy/post/3mdm5q5bzrlp2", "content": "", "creation_timestamp": "2026-01-30T01:30:59.264656Z"}, {"uuid": "4400b9c2-d459-412f-824d-1d412e837556", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2025-12-16)", "content": "", "creation_timestamp": "2025-12-16T00:00:00.000000Z"}, {"uuid": "aec284db-e990-4621-a09d-2b18a121e87d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48744", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3melvyttbgs2l", "content": "", "creation_timestamp": "2026-02-11T16:37:45.149311Z"}, {"uuid": "4f5a1c00-9dc8-4fbb-bb86-4367de22b679", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://bsky.app/profile/gcpweekly.bsky.social/post/3maejvmc2ay2k", "content": "", "creation_timestamp": "2025-12-19T20:31:52.781222Z"}, {"uuid": "efbc0874-1d74-437a-ba90-a34329a118d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-24)", "content": "", "creation_timestamp": "2025-12-24T00:00:00.000000Z"}, {"uuid": "c408cd60-9e78-4ebe-8f1a-3085d4266b6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2025-12-30)", "content": "", "creation_timestamp": "2025-12-30T00:00:00.000000Z"}, {"uuid": "adc014ff-7c57-4357-9e5d-3db0017b610f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-02)", "content": "", "creation_timestamp": "2026-01-02T00:00:00.000000Z"}, {"uuid": "cce1b627-2fa5-417d-8a8e-07f0ea235d6a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-03)", "content": "", "creation_timestamp": "2026-01-03T00:00:00.000000Z"}, {"uuid": "62d11284-ee3e-4a1d-b424-04004df02d8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-25)", "content": "", "creation_timestamp": "2026-03-25T00:00:00.000000Z"}, {"uuid": "302da703-ea20-4254-a107-54de27cbe63f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-16)", "content": "", "creation_timestamp": "2026-03-16T00:00:00.000000Z"}, {"uuid": "942da9d0-1733-49d1-b4ec-0fd3f409c066", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-03-24)", "content": "", "creation_timestamp": "2026-03-24T00:00:00.000000Z"}, {"uuid": "ba85d343-bcc0-4435-b57f-b99457021cc8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48826", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "01fd1a7a-a0b6-4995-8fc3-7f3202592051", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48961", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "36fe841b-991b-45dc-8694-268260570351", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48674", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "98e46332-9148-4c70-af53-77063bc84760", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48953", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "44311bf0-47ce-49bf-b501-d352cc0cbedb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48909", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "6fd20309-6559-4b1e-bdca-eab54afecec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48901", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "1490d61d-3d63-4506-a42f-f58a207f93c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48769", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a74c2a81-e451-45e6-873a-afbc4141effd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48763", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "7fbb24d4-769e-480c-a748-f6de79e7979a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48664", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d94384ec-9f3a-4191-b704-e04f03e287ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48765", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "2c924006-e5db-4856-b575-e6dbbb3dd3a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48863", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8ab2e0e1-cd98-4598-aea1-b1068e999e8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48943", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "73c2475e-607e-4807-bc1e-afa074d8a1d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48893", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0a9de3e5-824a-45fd-a4d2-822e15cf002b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48706", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "8253f3d4-fed1-4d85-9543-87f20a6e5cfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48875", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "81b31734-20cf-45e3-9afa-9f5d33a1d469", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48755", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "85d5cf57-5e32-4fd1-bd9a-b21489243f3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48844", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "614d08ce-51e0-416b-8703-d014fdb13df8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48796", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "92efdda2-d4d8-4d1f-aed6-73d99386c745", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48920", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "affbd5a5-9563-4414-9f22-affc9f506341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48628", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e8c09152-58b5-49a0-b5c0-6668f9e69d00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48792", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "cc85ddea-9a67-45d3-ac49-e53840d609c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48950", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "e5fd098b-5f52-47d3-a51b-3635dbfa2560", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48761", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "a8fad3a5-d370-43d5-a74d-cdf248e87a21", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48642", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "422b236a-5f71-4741-9f55-24971117662f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48825", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "66ebfd0e-1e56-4118-be67-fd72385e6072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48975", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "0a68c89d-b61d-40ee-a65e-808073cd4cc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48733", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b785f40b-e1d8-4f4b-90cb-016998bd9156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48887", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "dddd4e3e-57b9-4a25-bcca-f20ab8967731", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48952", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "317213eb-edc5-4d51-90f7-1688c37f0c81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48865", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "d30d6efc-7b2d-4154-9743-1aefbba93e01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48811", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "5088ff3d-b856-4701-97aa-cbb392486f9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48721", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4d343e00-f4fe-46df-a943-f30c1c8c06f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48633", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "ad38a15c-c7a4-4438-abb9-36f07f072b1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48827", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4605484d-1823-4979-bb47-88775a7810f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-01-19)", "content": "", "creation_timestamp": "2026-01-19T00:00:00.000000Z"}, {"uuid": "b04f0442-b739-4308-881b-cddcfb0ca4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48902", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "294e3f9e-fa08-4f8a-b631-c6a452b0384d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48791", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "c6ddcf88-4670-4211-976f-fa7f17e06532", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48740", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "f4d06b88-d888-4d35-8104-78963a18d6b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48802", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b2c96244-a4e4-4f1c-957c-debff3ac6575", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48744", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "c561e4f8-816e-411a-9fab-a1ec288da218", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48979", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "b3619cbd-5c51-4e6d-a927-7797b17be476", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48712", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "787522e0-fe17-43fc-a02f-53a6632202ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48751", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "92538156-8888-43c7-a3a3-86983f9c057d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48852", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "9e5b4ac0-61ea-46db-afba-c64f0b268a06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48833", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "4df87b55-8f24-45bc-a4d8-9ef3f7de2d9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "c933734a-9be8-4142-889e-26e95c752803", "vulnerability": "CVE-2022-48673", "type": "seen", "source": "https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8", "content": "", "creation_timestamp": "2025-12-03T14:14:49.267740Z"}, {"uuid": "57e7344b-5668-4c05-b139-dcb751e986a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48668", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "ba6a5e3f-3f1a-46b6-a0dd-cb44ddc2729b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48979", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "bb4730f9-3f65-48ad-ac49-d6b0395ff683", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-4899", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "177d3d51-90e5-4f4a-81d5-09e9e8103ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48633", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "f0015a97-b364-4271-9858-fe609d297b2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48667", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "8b129205-fda7-4699-bcdd-05576ab7a7e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48887", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "69e2de83-7ae7-4ffe-a89f-1a15770ac97f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48976", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a3caa493-00b9-4789-907f-7235c9bde846", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48990", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "fc244563-a10e-4650-b614-4c4fd774312d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48064", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "85ba034c-a211-4a40-80ab-48a5693d6ca4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48673", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "975220d1-722a-4189-8284-693f5a0ae1b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48628", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "26733de3-7d90-4e74-b28c-c06c673da842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48646", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "80a2dbec-ce8f-46ef-888b-9010ce04f0bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48744", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "c949cdab-47e7-4f8d-a43f-77961163f460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48706", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "14866892-7a0c-4112-8e22-fe312123c463", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48929", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "6c0edeb2-f1c1-4b02-92e7-3ab24079ae34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48766", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "26342297-8112-44fc-bd6c-ae808fc31e20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48816", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "a1a8868c-3241-4153-8a1a-6738a91d2432", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48771", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "24d84580-2d03-4dfd-9f1f-5d8b541c4a7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48998", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/", "content": "", "creation_timestamp": "2026-03-19T00:00:00.000000Z"}, {"uuid": "84d1e49d-a5a3-412a-b898-984666cee07d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-25)", "content": "", "creation_timestamp": "2026-01-25T00:00:00.000000Z"}, {"uuid": "5450979c-f855-412d-b6dc-9384d6093349", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-01-26)", "content": "", "creation_timestamp": "2026-01-26T00:00:00.000000Z"}, {"uuid": "9606c23d-1986-43f0-a97a-1287b97eb9ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-48618", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4cbf88f4-8601-41f4-b34e-d8e335575a8b", "content": "", "creation_timestamp": "2026-02-02T12:26:41.828526Z"}, {"uuid": "01fa0a0e-35ca-4eee-a99d-b228c2dfcd91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-48503", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/93d74598-7e4e-46bc-8806-7233c367e9dd", "content": "", "creation_timestamp": "2026-02-02T12:25:48.083527Z"}, {"uuid": "215c2bf0-1915-43dc-a5ed-62fc831fcd01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-04)", "content": "", "creation_timestamp": "2026-04-04T00:00:00.000000Z"}, {"uuid": "823263ae-cd95-4a31-ad3e-41448f5e304d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-05)", "content": "", "creation_timestamp": "2026-04-05T00:00:00.000000Z"}, {"uuid": "b4350b66-2f5b-4f1a-966a-789cdbc6e1af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48468", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "1f76586e-1822-4f1e-9669-87e723d4087a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48565", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "bcc19676-dc7c-4907-8dfa-bc58eab5002f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48560", "type": "seen", "source": "https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/", "content": "", "creation_timestamp": "2026-04-02T17:00:00.000000Z"}, {"uuid": "8475fe6c-4434-4fad-90ac-e02f954bbb9e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48111", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/5761", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48111\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter.\n\ud83d\udccf Published: 2023-03-10T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T19:12:12.856Z\n\ud83d\udd17 References:\n1. http://sipe.com\n2. http://wi400.com\n3. https://labs.yarix.com/advisories/CVE-2022-48111/\n4. https://labs.yarix.com/2023/02/siri-wi400-xss-on-login-page-cve-2022-48111/\n5. https://devisions.github.io/blog/cve-2022-48111", "creation_timestamp": "2025-02-27T19:26:02.000000Z"}, {"uuid": "6c2ad465-55ab-49ad-9610-bba5c7ba8134", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48610", "type": "seen", "source": "https://t.me/cvedetector/19989", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48610 - Apple macOS Ventura/WatchOS/iOS/iPadOS State Management Data Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48610 \nPublished : March 10, 2025, 8:15 p.m. | 1\u00a0hour, 17\u00a0minutes ago \nDescription : This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"10 Mar 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-03-10T23:13:43.000000Z"}, {"uuid": "f009aa89-84e4-4462-9f80-ccf3b1b70a03", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-21)", "content": "", "creation_timestamp": "2026-04-21T00:00:00.000000Z"}, {"uuid": "b4c2dace-4932-49e3-a49d-a894301eecc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-04-22)", "content": "", "creation_timestamp": "2026-04-22T00:00:00.000000Z"}, {"uuid": "0ae567ba-0e52-4f13-83d0-a64f1b56ff06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48228", "type": "seen", "source": "Telegram/j0JsFPvs77E_ngT7SiOpPRciuEuwLIBexPKMz4V0KAqlkNvB", "content": "", "creation_timestamp": "2025-02-14T21:09:17.000000Z"}, {"uuid": "95e09879-d7c5-4b25-9da1-850b3f978f22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48287", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8555", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48287\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data integrity.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T20:45:30.269Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474\n2. https://consumer.huawei.com/en/support/bulletin/2023/2/", "creation_timestamp": "2025-03-24T21:23:37.000000Z"}, {"uuid": "877af110-f6c4-4f77-8f55-0db95cc59e1d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48629", "type": "published-proof-of-concept", "source": "Telegram/6rO4r15NLp_xp4s86B0syKGI9f6hLb5onCUgDxwoUTKXRGTi", "content": "", "creation_timestamp": "2025-02-14T21:08:30.000000Z"}, {"uuid": "911c08d2-7bac-4ff5-8b05-af41fd42e24c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48425", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5601", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48425\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel through 6.2.7, fs/ntfs3/inode.c has an invalid kfree because it does not validate MFT flags before replaying logs.\n\ud83d\udccf Published: 2023-03-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-26T19:56:45.158Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/pub/scm/linux/kernel/git/next/linux-next.git/commit/fs/ntfs3?id=467333af2f7b95eeaa61a5b5369a80063cd971fd\n2. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=467333af2f7b95eeaa61a5b5369a80063cd971fd\n3. https://security.netapp.com/advisory/ntap-20230413-0006/", "creation_timestamp": "2025-02-26T20:24:55.000000Z"}, {"uuid": "d5ad7143-3aac-42b8-8ed2-b928bb1bcd5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48422", "type": "published-proof-of-concept", "source": "https://t.me/codeby_sec/7497", "content": "\u200b\u041e\u0441\u0432\u0435\u0436\u0430\u0435\u0442 \u0438\u043d\u043e\u0433\u0434\u0430, \u0432 \u0437\u043d\u043e\u0439 \u0445\u043e\u043b\u043e\u0434\u043d\u0430\u044f \u0432\u043e\u0434\u0430. PoC CVE-2022-48422. OnlyOffice 7.3\n\n\u041a\u0443, \u043a\u0438\u0431\u0435\u0440\u0440\u0435\u043a\u0440\u0443\u0442\u044b. \u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0442\u0430\u0442\u044c\u044f \u043f\u043e\u0441\u0432\u044f\u0449\u0435\u043d\u0430 CVE-2022-48422. \u0414\u0430\u043d\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0431\u044b\u043b\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0430 \u0432 ONLYOFFICE-DocumentServer-7.3.0 \u0438 \u0434\u0430\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0435\u043b\u0435\u0433\u0438\u0438 \u0447\u0435\u0440\u0435\u0437 \u0442\u0440\u043e\u044f\u043d\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u044f libgcc_s.so.1 \u0432 \u0442\u0435\u043a\u0443\u0449\u0435\u043c \u0440\u0430\u0431\u043e\u0447\u0435\u043c \u043a\u0430\u0442\u0430\u043b\u043e\u0433\u0435, \u043a\u043e\u0442\u043e\u0440\u044b\u043c \u043c\u043e\u0436\u0435\u0442 \u0431\u044b\u0442\u044c \u043b\u044e\u0431\u043e\u0439 \u043a\u0430\u0442\u0430\u043b\u043e\u0433, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u0441\u044f \u0434\u043e\u043a\u0443\u043c\u0435\u043d\u0442 ONLYOFFICE. \u041e\u0434\u043d\u0430\u043a\u043e, \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u0447\u0442\u0438\u0432\u0435 \u043f\u0440\u043e\u0441\u0442\u043e \u043f\u043e\u043f\u0440\u043e\u0431\u0443\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043a\u0440\u0430\u0448. \u0414\u0443\u043c\u0430\u044e, \u044d\u0442\u043e \u044f\u0432\u044f\u043b\u0435\u0442\u0441\u044f \u0445\u043e\u0440\u043e\u0448\u0435\u0439 \u043f\u0440\u0430\u043a\u0442\u0438\u043a\u043e\u0439 \u0434\u043b\u044f \u043f\u044b\u0432\u043d\u0430 \u0440\u0438\u043b \u043a\u0435\u0439\u0441\u043e\u0432.\n\n\ud83d\udccc \u0427\u0438\u0442\u0430\u0442\u044c \u0434\u0430\u043b\u0435\u0435\n\n#reverse #cve #pwn", "creation_timestamp": "2023-06-26T17:17:14.000000Z"}, {"uuid": "a33fbca9-1d7d-4216-b2ec-48e06b171b44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48123", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10242", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48123\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:26:58.233Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/15", "creation_timestamp": "2025-04-03T15:34:53.000000Z"}, {"uuid": "4c5c3254-a439-4fec-9d14-bf3396ffb4d2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48364", "type": "seen", "source": "Telegram/zvIrm9y4EJ-eIJ9mGhyJ-ioCdSG4IHPkk01zk7QpecsKfgKW", "content": "", "creation_timestamp": "2025-03-08T04:34:11.000000Z"}, {"uuid": "70611497-774d-4c7d-8638-53e0769fb0af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48445", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/549", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48445\n\ud83d\udd39 Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\ud83d\udccf Published: 2023-06-06T05:13:06.034Z\n\ud83d\udccf Modified: 2025-01-07T20:27:59.031Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T20:37:31.000000Z"}, {"uuid": "5ea0f89f-4c70-421f-a105-4fb3c005ec02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48444", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/548", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48444\n\ud83d\udd39 Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\ud83d\udccf Published: 2023-06-06T05:13:05.113Z\n\ud83d\udccf Modified: 2025-01-07T20:30:32.395Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T20:36:52.000000Z"}, {"uuid": "27c75b7b-a2cf-4ee9-9f8c-26ce692e8617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48438", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48438\n\ud83d\udd39 Description: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\ud83d\udccf Published: 2023-06-06T05:12:59.511Z\n\ud83d\udccf Modified: 2025-01-07T20:55:08.287Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T21:39:04.000000Z"}, {"uuid": "68d7813c-68e8-40e8-8002-86edf0a0490d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48390", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/577", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48390\n\ud83d\udd39 Description: In telephony service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\ud83d\udccf Published: 2023-06-06T05:12:56.627Z\n\ud83d\udccf Modified: 2025-01-07T20:56:20.868Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T21:38:56.000000Z"}, {"uuid": "39af3bac-5751-455e-a0ef-f22bc71bcff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48443", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/583", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48443\n\ud83d\udd39 Description: In telephony service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\ud83d\udccf Published: 2023-06-06T05:13:04.209Z\n\ud83d\udccf Modified: 2025-01-07T20:32:40.774Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T21:39:33.000000Z"}, {"uuid": "008943dd-03d7-4c15-abad-0603aa393ec9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48442", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48442\n\ud83d\udd39 Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\ud83d\udccf Published: 2023-06-06T05:13:03.298Z\n\ud83d\udccf Modified: 2025-01-07T20:35:50.086Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T21:39:28.000000Z"}, {"uuid": "6ff3bbb2-2158-4d1c-a057-ced59e97f90e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48441", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/581", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48441\n\ud83d\udd39 Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\ud83d\udccf Published: 2023-06-06T05:13:02.382Z\n\ud83d\udccf Modified: 2025-01-07T20:38:29.534Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T21:39:23.000000Z"}, {"uuid": "e0cfbcba-3c3e-4382-8381-5c15a649f0a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48440", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/580", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48440\n\ud83d\udd39 Description: In dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\ud83d\udccf Published: 2023-06-06T05:13:01.448Z\n\ud83d\udccf Modified: 2025-01-07T20:48:12.686Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T21:39:18.000000Z"}, {"uuid": "7577d5fb-b158-43ce-81ab-4b864d02aaf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48439", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/579", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48439\n\ud83d\udd39 Description: In cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\ud83d\udccf Published: 2023-06-06T05:13:00.524Z\n\ud83d\udccf Modified: 2025-01-07T20:49:29.922Z\n\ud83d\udd17 References:\n1. https://www.unisoc.com/en_us/secy/announcementDetail/1664822361414762498", "creation_timestamp": "2025-01-07T21:39:09.000000Z"}, {"uuid": "f53b0461-cf8c-489f-a2b3-a5a2d2fcb222", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48181", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48181\n\ud83d\udd39 Description: An ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.\n\ud83d\udccf Published: 2023-06-05T21:01:48.880Z\n\ud83d\udccf Modified: 2025-01-08T15:55:59.489Z\n\ud83d\udd17 References:\n1. https://support.lenovo.com/us/en/product_security/LEN-124495", "creation_timestamp": "2025-01-08T16:16:54.000000Z"}, {"uuid": "0dd9fe36-eea4-4c63-8780-922314ce4a81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48188", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/723", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48188\n\ud83d\udd39 Description: A buffer overflow vulnerability in the SecureBootDXE BIOS driver of some Lenovo Desktop and ThinkStation models could allow an attacker with local access to elevate their privileges to execute arbitrary code.\n\ud83d\udccf Published: 2023-06-05T21:03:07.044Z\n\ud83d\udccf Modified: 2025-01-08T15:50:42.163Z\n\ud83d\udd17 References:\n1. https://support.lenovo.com/us/en/product_security/LEN-124495", "creation_timestamp": "2025-01-08T16:19:29.000000Z"}, {"uuid": "41e129f2-aa0f-4572-bf82-a76615ebe4fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48223", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4472", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48223\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2023-04-04T16:15:07.187\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://acuant.com\n2. https://hackandpwn.com/disclosures/CVE-2022-48223.pdf\n3. https://acuant.com\n4. https://hackandpwn.com/disclosures/CVE-2022-48223.pdf", "creation_timestamp": "2025-02-14T19:11:15.000000Z"}, {"uuid": "858af01a-618f-4456-916a-11f594264022", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48224", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4471", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48224\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2023-04-04T16:15:07.230\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://acuant.com\n2. https://hackandpwn.com/disclosures/CVE-2022-48224.pdf\n3. https://acuant.com\n4. https://hackandpwn.com/disclosures/CVE-2022-48224.pdf", "creation_timestamp": "2025-02-14T19:11:11.000000Z"}, {"uuid": "e83ec121-7637-447a-8175-b6fcd110d438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48225", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/4470", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48225\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: No description available\n\ud83d\udccf Published: 2023-04-04T15:15:08.757\n\ud83d\udccf Modified: N/A\n\ud83d\udd17 References:\n1. https://acuant.com\n2. https://hackandpwn.com/disclosures/CVE-2022-48225.pdf\n3. https://acuant.com\n4. https://hackandpwn.com/disclosures/CVE-2022-48225.pdf", "creation_timestamp": "2025-02-14T19:11:08.000000Z"}, {"uuid": "86036af7-f178-4ee8-b329-ca71b23b4d8c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48352", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5143", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48352\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Some smartphones have data initialization issues. Successful exploitation of this vulnerability may cause a system panic.\n\ud83d\udccf Published: 2023-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T15:05:24.094Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505\n2. https://consumer.huawei.com/en/support/bulletin/2023/3/", "creation_timestamp": "2025-02-24T15:27:40.000000Z"}, {"uuid": "c23dd12c-4431-481a-b81e-29f0a5e17b39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48353", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5145", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48353\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause kernel privilege escalation, which results in system service exceptions.\n\ud83d\udccf Published: 2023-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T14:58:29.921Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505\n2. https://consumer.huawei.com/en/support/bulletin/2023/3/", "creation_timestamp": "2025-02-24T15:27:45.000000Z"}, {"uuid": "f720f0c9-412e-4f9b-a5e3-ccba07e4c377", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48348", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5204", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48348\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The MediaProvider module has a vulnerability of unauthorized data read. Successful exploitation of this vulnerability may affect confidentiality and integrity.\n\ud83d\udccf Published: 2023-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T19:10:14.845Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505\n2. https://consumer.huawei.com/en/support/bulletin/2023/3/", "creation_timestamp": "2025-02-24T19:22:18.000000Z"}, {"uuid": "18aa8c40-cd64-4586-a5ef-773e1305a912", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48349", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5205", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48349\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The control component has a spoofing vulnerability. Successful exploitation of this vulnerability may affect confidentiality and availability.\n\ud83d\udccf Published: 2023-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T19:08:56.212Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505\n2. https://consumer.huawei.com/en/support/bulletin/2023/3/", "creation_timestamp": "2025-02-24T19:22:19.000000Z"}, {"uuid": "6c2358da-c35c-43cc-b909-e109b284778e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48351", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5194", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48351\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The secure OS module has configuration defects. Successful exploitation of this vulnerability may affect availability.\n\ud83d\udccf Published: 2023-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T17:45:11.969Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505\n2. https://consumer.huawei.com/en/support/bulletin/2023/3/", "creation_timestamp": "2025-02-24T18:26:36.000000Z"}, {"uuid": "9ba62b50-2c30-4833-ba00-37b504a2534b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48350", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5192", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48350\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The HUAWEI Messaging app has a vulnerability of unauthorized file access. Successful exploitation of this vulnerability may affect confidentiality.\n\ud83d\udccf Published: 2023-03-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-24T17:48:00.999Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202303-0000001529824505\n2. https://consumer.huawei.com/en/support/bulletin/2023/3/", "creation_timestamp": "2025-02-24T18:26:34.000000Z"}, {"uuid": "3f8fb391-0317-4a3c-ab36-5823c04dc5c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48422", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48422\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: ONLYOFFICE Docs through 7.3 on certain Linux distributions allows local users to gain privileges via a Trojan horse libgcc_s.so.1 in the current working directory, which may be any directory in which an ONLYOFFICE document is located.\n\ud83d\udccf Published: 2023-03-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:12:44.384Z\n\ud83d\udd17 References:\n1. https://forum.onlyoffice.com/t/security-hole-library-from-cwd/3302", "creation_timestamp": "2025-02-27T16:26:01.000000Z"}, {"uuid": "0c7a2a80-5377-4390-8b3b-e866b35002eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48424", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5703", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48424\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.\n\ud83d\udccf Published: 2023-03-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:17:48.210Z\n\ud83d\udd17 References:\n1. https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.3\n2. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=4f1dc7d9756e66f3f876839ea174df2e656b7f79\n3. https://security.netapp.com/advisory/ntap-20230505-0002/", "creation_timestamp": "2025-02-27T16:25:55.000000Z"}, {"uuid": "970a061b-242f-4b5a-9659-fadf5bb81b12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48423", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/5705", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48423\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel before 6.1.3, fs/ntfs3/record.c does not validate resident attribute names. An out-of-bounds write may occur.\n\ud83d\udccf Published: 2023-03-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-02-27T16:14:52.066Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=54e45702b648b7c0000e90b3e9b890e367e16ea8\n2. https://cdn.kernel.org/pub/linux/kernel/v6.x/ChangeLog-6.1.3\n3. https://security.netapp.com/advisory/ntap-20230505-0003/", "creation_timestamp": "2025-02-27T16:26:00.000000Z"}, {"uuid": "50dc894e-33ef-48dc-b767-0d007e85a282", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48362", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7230", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48362\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Zoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)\n\ud83d\udccf Published: 2023-02-25T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T20:28:51.711Z\n\ud83d\udd17 References:\n1. https://srcincite.io/blog/2022/01/20/zohowned-a-critical-authentication-bypass-on-zoho-manageengine-desktop-central.html\n2. https://www.manageengine.com/products/desktop-central/cve-2022-48362.html", "creation_timestamp": "2025-03-11T20:41:22.000000Z"}, {"uuid": "0d173da3-4523-460c-a389-6762abd4ffaf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48364", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/6747", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48364\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive.\n\ud83d\udccf Published: 2023-03-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-06T20:02:21.461Z\n\ud83d\udd17 References:\n1. https://github.com/mastodon/mastodon/pull/18525\n2. https://github.com/mastodon/mastodon/compare/v3.5.2...v3.5.3\n3. https://github.com/40826d/advisories/blob/master/CVE-2022-48364/README.md\n4. https://github.com/mastodon/mastodon/blob/main/CHANGELOG.md#353---2022-05-26", "creation_timestamp": "2025-03-06T20:34:11.000000Z"}, {"uuid": "0bdf856e-68c7-47f2-8393-00b530e7e873", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48610", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7052", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48610\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: This issue was addressed through improved state management. This issue is fixed in macOS Ventura 13.1, watchOS 9.2, iOS 16.2 and iPadOS 16.2. An app may be able to access user-sensitive data.\n\ud83d\udccf Published: 2025-03-10T19:37:48.949Z\n\ud83d\udccf Modified: 2025-03-10T19:37:48.949Z\n\ud83d\udd17 References:\n1. https://support.apple.com/en-us/102808\n2. https://support.apple.com/en-us/102741\n3. https://support.apple.com/en-us/102807", "creation_timestamp": "2025-03-10T20:38:58.000000Z"}, {"uuid": "af0598dc-5aea-49cb-af81-10236ad95176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48292", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8560", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48292\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T20:41:15.744Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474\n2. https://consumer.huawei.com/en/support/bulletin/2023/2/", "creation_timestamp": "2025-03-24T21:23:45.000000Z"}, {"uuid": "b784603c-0202-4af5-afcb-14ae145ca355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48363", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7245", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48363\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.\n\ud83d\udccf Published: 2023-02-26T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-11T19:54:43.431Z\n\ud83d\udd17 References:\n1. https://gerrit.automotivelinux.org/gerrit/q/project:src%252Flibqtappfw+status:open\n2. https://gerrit.automotivelinux.org/gerrit/c/src/libqtappfw/+/28484\n3. https://gerrit.automotivelinux.org/gerrit/c/src/libqtappfw/+/28485\n4. https://jira.automotivelinux.org/browse/SPEC-4661", "creation_timestamp": "2025-03-11T20:41:42.000000Z"}, {"uuid": "909b1aea-5bed-4bc5-b587-3bc0f2b717f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4883", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8284", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4883\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.\n\ud83d\udccf Published: 2023-02-07T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-20T19:45:33.470Z\n\ud83d\udd17 References:\n1. https://bugzilla.redhat.com/show_bug.cgi?id=2160213\n2. https://gitlab.freedesktop.org/xorg/lib/libxpm/-/merge_requests/9\n3. https://lists.x.org/archives/xorg-announce/2023-January/003312.html\n4. https://gitlab.freedesktop.org/xorg/lib/libxpm/-/commit/515294bb8023a45ff91669\n5. https://lists.debian.org/debian-lts-announce/2023/06/msg00021.html", "creation_timestamp": "2025-03-20T20:19:44.000000Z"}, {"uuid": "99739ae2-3542-49d7-b4a4-3b35c1ff5d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48345", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/7319", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48345\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: sanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.\n\ud83d\udccf Published: 2023-02-24T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-12T15:36:20.862Z\n\ud83d\udd17 References:\n1. https://github.com/braintree/sanitize-url/commit/d4bdc89f1743fe3cdb7c3f24b06e4c875f349b0c\n2. https://github.com/braintree/sanitize-url/compare/v6.0.1...v6.0.2", "creation_timestamp": "2025-03-12T15:40:48.000000Z"}, {"uuid": "4dcb4287-aa62-441c-ab6d-0a05708824f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4897", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/7565", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4897\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting\n\ud83d\udccf Published: 2023-02-21T08:50:50.848Z\n\ud83d\udccf Modified: 2025-03-14T13:47:04.786Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/7b0eeafe-b9bc-43b2-8487-a23d3960f73f", "creation_timestamp": "2025-03-14T14:45:24.000000Z"}, {"uuid": "5a15409c-41e2-4049-b759-e45d972151de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4838", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8788", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4838\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-06T19:59:19.786Z\n\ud83d\udccf Modified: 2025-03-25T20:38:05.060Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/9937e369-60e8-451c-8790-1a83a59115fc", "creation_timestamp": "2025-03-25T21:25:40.000000Z"}, {"uuid": "d700edbd-a0ae-40c2-922f-8b435f101795", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48290", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8559", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48290\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The phone-PC collaboration module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect data confidentiality and integrity.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T20:42:33.810Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474\n2. https://consumer.huawei.com/en/support/bulletin/2023/2/", "creation_timestamp": "2025-03-24T21:23:44.000000Z"}, {"uuid": "64840510-7fd9-4a87-8dcc-134c083a2c1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48289", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48289\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T20:43:27.050Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474\n2. https://consumer.huawei.com/en/support/bulletin/2023/2/", "creation_timestamp": "2025-03-24T21:23:42.000000Z"}, {"uuid": "43162fcd-5176-4b0a-a2d8-677011795f8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48288", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8556", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48288\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.\n\ud83d\udccf Published: 2023-02-09T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-24T20:44:11.768Z\n\ud83d\udd17 References:\n1. https://device.harmonyos.com/en/docs/security/update/security-bulletins-202302-0000001454769474\n2. https://consumer.huawei.com/en/support/bulletin/2023/2/", "creation_timestamp": "2025-03-24T21:23:38.000000Z"}, {"uuid": "3a056c41-bf4a-4257-8e75-1514b95d663b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48113", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8939", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48113\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this vulnerability to login as root via hardcoded credentials.\n\ud83d\udccf Published: 2023-02-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T19:15:13.916Z\n\ud83d\udd17 References:\n1. https://wefir.blogspot.com/2022/12/totolink-n200rev5-telnet-backdoor.html", "creation_timestamp": "2025-03-26T19:26:13.000000Z"}, {"uuid": "8555a8c8-e67d-40f2-ac91-576c470e805f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48114", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8942", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48114\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: RuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.\n\ud83d\udccf Published: 2023-02-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T19:09:37.859Z\n\ud83d\udd17 References:\n1. https://gitee.com/y_project/RuoYi/issues/I65V2B", "creation_timestamp": "2025-03-26T19:26:16.000000Z"}, {"uuid": "9be5ea28-ab4a-40c9-9a71-280b1110e2ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48166", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8765", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48166\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.\n\ud83d\udccf Published: 2023-02-06T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-25T20:00:01.376Z\n\ud83d\udd17 References:\n1. https://docs.google.com/document/d/1zvbuu3Hkk3CAkojAivlUESvtHblHJNLJdpGOoNtk-Vo/edit?usp=sharing\n2. https://github.com/strik3r0x1/Vulns/blob/main/WAVLINK%20WN530HG4.md", "creation_timestamp": "2025-03-25T20:24:35.000000Z"}, {"uuid": "bebdcd5d-3cd6-418a-92b0-8da0d9a6183d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4825", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8785", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4825\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP-ShowHide WordPress plugin before 1.05 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-06T19:59:18.188Z\n\ud83d\udccf Modified: 2025-03-25T20:40:01.173Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a2758983-d3a7-4718-b5b8-30169df6780a", "creation_timestamp": "2025-03-25T21:25:38.000000Z"}, {"uuid": "d5d90604-9430-4836-a2f8-a79d8f329eb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4833", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/8787", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4833\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The YourChannel: Everything you want in a YouTube plugin WordPress plugin before 1.2.3 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-02-06T19:59:18.984Z\n\ud83d\udccf Modified: 2025-03-25T20:39:19.473Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/35ba38cf-4f23-4344-8de3-cf3004ebf84c", "creation_timestamp": "2025-03-25T21:25:39.000000Z"}, {"uuid": "7ecfa82b-6952-408a-b04e-171cac9b96d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48140", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8946", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48140\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: DedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename.\n\ud83d\udccf Published: 2023-02-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T19:00:32.739Z\n\ud83d\udd17 References:\n1. https://github.com/ChandlerChin/dedecms/blob/main/xss.docx", "creation_timestamp": "2025-03-26T19:26:23.000000Z"}, {"uuid": "2e407ef2-c804-4a14-9b06-16238b9dc0f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48130", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/8945", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48130\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.\n\ud83d\udccf Published: 2023-02-02T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-26T19:01:14.647Z\n\ud83d\udd17 References:\n1. https://github.com/Stevenbaga/fengsha/blob/main/W20E/formSetStaticRoute.md", "creation_timestamp": "2025-03-26T19:26:22.000000Z"}, {"uuid": "2bb11c0a-a25a-4589-a3bf-a69cd157d7da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48094", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9101", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48094\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: lmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:18:37.463Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/litanhua-fost9/hu05qa/gp3psgfdt1czpf45?singleDoc", "creation_timestamp": "2025-03-27T14:27:40.000000Z"}, {"uuid": "821ac22a-6321-454d-a088-01e8b7f4bb73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48093", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9093", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48093\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php.\n\ud83d\udccf Published: 2023-02-01T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:21:34.196Z\n\ud83d\udd17 References:\n1. https://www.yuque.com/litanhua-fost9/hu05qa/ng2cb9ln0i0oqpo7?singleDo", "creation_timestamp": "2025-03-27T14:27:27.000000Z"}, {"uuid": "8a2a5b44-8f4e-424d-9800-71757980bf74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48624", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9092", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48624\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.\n\ud83d\udccf Published: 2024-02-19T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-27T14:21:35.466Z\n\ud83d\udd17 References:\n1. https://github.com/gwsw/less/commit/c6ac6de49698be84d264a0c4c0c40bb870b10144\n2. https://greenwoodsoftware.com/less/\n3. https://github.com/gwsw/less/compare/v605...v606\n4. https://security.netapp.com/advisory/ntap-20240605-0010/\n5. https://lists.debian.org/debian-lts-announce/2024/05/msg00018.html", "creation_timestamp": "2025-03-27T14:27:26.000000Z"}, {"uuid": "ad5a8580-0264-4322-bbc5-b033fa1f26a7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4837", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9173", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4837\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The CPO Companion WordPress plugin before 1.1.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-30T20:31:48.836Z\n\ud83d\udccf Modified: 2025-03-27T19:21:45.193Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/41abeacb-ef3e-4621-89bb-df0f2eb617da", "creation_timestamp": "2025-03-27T19:26:44.000000Z"}, {"uuid": "16c87cd6-6a54-4a7b-a0f9-69eb66d60176", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4872", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9208", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4872\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Chained Products WordPress plugin before 2.12.0 does not have authorisation and CSRF checks, as well as does not ensure that the option to be updated belong to the plugin, allowing unauthenticated attackers to set arbitrary options to 'no'\n\ud83d\udccf Published: 2023-01-30T20:31:34.088Z\n\ud83d\udccf Modified: 2025-03-27T20:05:55.692Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/c76a1c0b-8a5b-4639-85b6-9eebc63c3aa6", "creation_timestamp": "2025-03-27T20:27:27.000000Z"}, {"uuid": "fd0d82a4-c1a8-4cf7-98b8-244acbf9a0fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4834", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/9209", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4834\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The CPT Bootstrap Carousel WordPress plugin through 1.12 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\ud83d\udccf Published: 2023-01-30T20:31:39.463Z\n\ud83d\udccf Modified: 2025-03-27T20:04:46.019Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/6183318f-0230-47a1-87f2-3c5aaef678a5", "creation_timestamp": "2025-03-27T20:27:28.000000Z"}, {"uuid": "89e235c3-6e46-4fb2-b1cf-9345a9a0158e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48176", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9351", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48176\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Netgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.\n\ud83d\udccf Published: 2023-01-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T14:12:40.732Z\n\ud83d\udd17 References:\n1. https://www.netgear.com/about/security/\n2. https://hdwsec.fr/blog/20221109-netgear/\n3. https://kb.netgear.com/000065242/Security-Advisory-for-Pre-authentication-Stack-Overflow-on-some-Routers-and-Nighthawk-WiFi-Mesh-Systems-PSV-2022-0146", "creation_timestamp": "2025-03-28T14:27:34.000000Z"}, {"uuid": "d462f723-8cb1-4e54-b859-38f9f912223f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48175", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9350", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48175\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Rukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dashboard/ajax_request.\n\ud83d\udccf Published: 2023-01-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T14:13:24.627Z\n\ud83d\udd17 References:\n1. https://github.com/y1s3m0/vulnfind/blob/main/rukovoditel/rce_ajax_request.md", "creation_timestamp": "2025-03-28T14:27:33.000000Z"}, {"uuid": "4cca478c-e29a-4b4a-81f6-fd2615098cf8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48066", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9386", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48066\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.\n\ud83d\udccf Published: 2023-01-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T16:18:32.023Z\n\ud83d\udd17 References:\n1. https://befitting-vinca-933.notion.site/Totolink-A830R-V4-1-2cu-5182-Login-Authentication-Bypass-Vulnerability-e0dfe09f136a4cf59e3754edbd934c15", "creation_timestamp": "2025-03-28T16:27:51.000000Z"}, {"uuid": "04841c18-a466-4fc6-bc2f-7c86a68de78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48067", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9398", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48067\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack.\n\ud83d\udccf Published: 2023-01-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T16:03:54.619Z\n\ud83d\udd17 References:\n1. https://befitting-vinca-933.notion.site/Totolink-A830R-V4-1-2cu-5182-Sensitive-Information-Disclosure-567f4a17d5cc401b97e5c3e61aae8ca0", "creation_timestamp": "2025-03-28T16:28:10.000000Z"}, {"uuid": "7bd59b4a-9b4f-4288-a5e7-5643f3b474c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48007", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9404", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48007\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: A stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent.\n\ud83d\udccf Published: 2023-01-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T17:09:26.905Z\n\ud83d\udd17 References:\n1. https://github.com/Piwigo/Piwigo/issues/1835", "creation_timestamp": "2025-03-28T17:28:44.000000Z"}, {"uuid": "90f93b22-4e8d-45e0-b4da-16e0f0d2a8a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48011", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9407", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48011\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Opencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function.\n\ud83d\udccf Published: 2023-01-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T17:07:55.726Z\n\ud83d\udd17 References:\n1. https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities/blob/main/Opencats-0.9.7-sql%20injection%20in%20viewerrors-importID.md\n2. https://github.com/Sakura-501/Opencats-0.9.7-Vulnerabilities", "creation_timestamp": "2025-03-28T17:28:46.000000Z"}, {"uuid": "689069b0-ad4d-49e2-952c-73b4239ac51a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48008", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/9406", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48008\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file.\n\ud83d\udccf Published: 2023-01-27T00:00:00.000Z\n\ud83d\udccf Modified: 2025-03-28T17:08:29.166Z\n\ud83d\udd17 References:\n1. https://github.com/Sakura-501/LimeSurvey-5.4.15-PluginUploadtoRCE", "creation_timestamp": "2025-03-28T17:28:45.000000Z"}, {"uuid": "8c101246-d6ed-433a-9915-9eab86f4c720", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4816", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10097", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4816\n\ud83d\udd25 CVSS Score: 6.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: A denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the application.\n\ud83d\udccf Published: 2023-01-23T16:35:48.549Z\n\ud83d\udccf Modified: 2025-04-02T15:28:28.728Z\n\ud83d\udd17 References:\n1. https://iknow.lenovo.com.cn/detail/dc_205899.html", "creation_timestamp": "2025-04-02T15:33:25.000000Z"}, {"uuid": "3a40b09e-afa2-43a4-81d8-67b87cc45f41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48121", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10276", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48121\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:41:00.759Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/16", "creation_timestamp": "2025-04-03T16:35:15.000000Z"}, {"uuid": "ca8ed67a-62ab-4fb6-9ead-a9b95948a570", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48125", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10254", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48125\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:20:18.754Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/13", "creation_timestamp": "2025-04-03T15:35:11.000000Z"}, {"uuid": "23b3220c-fbb7-47f0-a064-00d2fcb6053c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48120", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48120\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: SQL Injection vulnerability in kishan0725 Hospital Management System thru commit 4770d740f2512693ef8fd9aa10a8d17f79fad9bd (on March 13, 2021), allows attackers to execute arbitrary commands via the contact and doctor parameters to /search.php.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:44:41.014Z\n\ud83d\udd17 References:\n1. https://github.com/kishan0725/Hospital-Management-System/issues/32", "creation_timestamp": "2025-04-03T16:35:12.000000Z"}, {"uuid": "dee090fe-d2b2-421b-abf2-18df64ebf8d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48281", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10234", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48281\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: processCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., \"WRITE of size 307203\") via a crafted TIFF image.\n\ud83d\udccf Published: 2023-01-23T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T14:04:15.193Z\n\ud83d\udd17 References:\n1. https://gitlab.com/libtiff/libtiff/-/issues/488\n2. https://gitlab.com/libtiff/libtiff/-/commit/d1b6b9c1b3cae2d9e37754506c1ad8f4f7b646b5\n3. https://www.debian.org/security/2023/dsa-5333\n4. https://lists.debian.org/debian-lts-announce/2023/01/msg00037.html\n5. https://security.netapp.com/advisory/ntap-20230302-0004/\n6. https://security.gentoo.org/glsa/202305-31", "creation_timestamp": "2025-04-03T14:35:23.000000Z"}, {"uuid": "21be5473-5220-4fce-a2ac-329cee814ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48124", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10250", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48124\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: TOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.\n\ud83d\udccf Published: 2023-01-20T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-03T15:21:29.815Z\n\ud83d\udd17 References:\n1. https://github.com/Am1ngl/ttt/tree/main/14", "creation_timestamp": "2025-04-03T15:35:04.000000Z"}, {"uuid": "294eda5b-8566-416c-ac05-88e9537eb7ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48090", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/10776", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48090\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Tramyardg hotel-mgmt-system version 2022.4 is vulnerable to SQL Injection via /app/dao/CustomerDAO.php.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T19:25:41.172Z\n\ud83d\udd17 References:\n1. https://github.com/tramyardg/hotel-mgmt-system/issues/21", "creation_timestamp": "2025-04-07T19:45:44.000000Z"}, {"uuid": "3e2366a5-8175-49ac-bfe1-6cdc23144e96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48258", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10723", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48258\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T15:38:53.064Z\n\ud83d\udd17 References:\n1. https://github.com/MisterTea/EternalTerminal/issues/555\n2. https://github.com/MisterTea/EternalTerminal/pull/556\n3. http://www.openwall.com/lists/oss-security/2023/02/16/1\n4. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U6MO4FSKYNSAJVUXYP7LRY7ARUIGKBFL/\n5. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/2RY6PKBU73I45L6YWNYCUK2XBEXEFX7L/\n6. https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NYODHZECXYFC2BNODZPZXZAXOKGMCYAP/", "creation_timestamp": "2025-04-07T15:45:25.000000Z"}, {"uuid": "5a0ed07b-dca3-4e26-aaf6-4ff66675bc95", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4851", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11275", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4851\n\ud83d\udd25 CVSS Score: 9.8 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: Improper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:36:55.682Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/e3cebc1a-1326-4a08-abad-0414a717fa0f", "creation_timestamp": "2025-04-10T16:49:28.000000Z"}, {"uuid": "49a10eda-a1d2-4784-b2ab-e30213e92f5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48256", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/10717", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48256\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Technitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.\n\ud83d\udccf Published: 2023-01-13T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-07T15:40:46.877Z\n\ud83d\udd17 References:\n1. https://github.com/TechnitiumSoftware/DnsServer/blob/master/CHANGELOG.md#version-100", "creation_timestamp": "2025-04-07T15:45:16.000000Z"}, {"uuid": "351a0314-a03e-4e7e-875f-1d8ea25e7656", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4855", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11088", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4855\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-217020.\n\ud83d\udccf Published: 2022-12-30T08:46:56.398Z\n\ud83d\udccf Modified: 2025-04-09T15:44:05.593Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.217020\n2. https://vuldb.com/?ctiid.217020\n3. https://github.com/joinia/webray.com.cn/blob/main/lead-management-system/leadmanasql.md", "creation_timestamp": "2025-04-09T15:47:33.000000Z"}, {"uuid": "55fca941-94e3-4e17-b605-3facb8afa6e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4857", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11089", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4857\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: A vulnerability was found in Modbus Tools Modbus Poll up to 9.10.0 and classified as critical. Affected by this issue is some unknown functionality of the file mbpoll.exe of the component mbp File Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-217022 is the identifier assigned to this vulnerability.\n\ud83d\udccf Published: 2022-12-30T09:05:15.425Z\n\ud83d\udccf Modified: 2025-04-09T15:43:42.621Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.217022\n2. https://vuldb.com/?ctiid.217022\n3. https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Poll/Modbus%20Poll%20(version%209.10.0%20and%20earlier)%20mbp%20file%20has%20a%20buffer%20overflow%20vulnerability.md\n4. https://github.com/Durian1546/vul/blob/main/webray.com.cn/Modbus%20Poll/poc/poc.mbp", "creation_timestamp": "2025-04-09T15:47:34.000000Z"}, {"uuid": "8afad521-4c39-4dee-b78a-6b7e900b7447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4849", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11085", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4849\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-09T15:44:54.692Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948\n2. https://huntr.dev/bounties/404ce7dd-f345-4d98-ad80-c53ac74f4e5c", "creation_timestamp": "2025-04-09T15:47:29.000000Z"}, {"uuid": "5144515d-bcf5-4988-85b4-951f2d70e717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4845", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11272", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4845\n\ud83d\udd25 CVSS Score: 6.7 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:H/A:H)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:38:41.219Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948\n2. https://huntr.dev/bounties/075dbd51-b078-436c-9e3d-7f25cd2e7e1b", "creation_timestamp": "2025-04-10T16:49:22.000000Z"}, {"uuid": "444ea9f7-80a1-4fcf-a62a-ae1e01e78f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4817", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11271", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4817\n\ud83d\udd25 CVSS Score: 3.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N)\n\ud83d\udd39 Description: A vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patch is b8cb29b43dc704708d598c60ac1881db7cf8e9c3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216988.\n\ud83d\udccf Published: 2022-12-28T18:22:43.535Z\n\ud83d\udccf Modified: 2025-04-10T16:39:50.756Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.216988\n2. https://vuldb.com/?ctiid.216988\n3. https://github.com/centic9/jgit-cookbook/pull/86\n4. https://github.com/centic9/jgit-cookbook/commit/b8cb29b43dc704708d598c60ac1881db7cf8e9c3", "creation_timestamp": "2025-04-10T16:49:21.000000Z"}, {"uuid": "29791190-7dfc-4eca-a0aa-3fbd839d1880", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4814", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11270", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4814\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:40:29.814Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/e65b3458-c2e2-4c0b-9029-e3c9ee015ae4", "creation_timestamp": "2025-04-10T16:49:21.000000Z"}, {"uuid": "aed05078-b28c-4a2f-9a13-35d461f6a364", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4813", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11269", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4813\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: Insufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:41:06.432Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/a24b45d8-554b-4131-8ce1-f33bf8cdbacc", "creation_timestamp": "2025-04-10T16:49:19.000000Z"}, {"uuid": "3628e45f-83b7-4722-8330-a681180822de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4812", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11268", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4812\n\ud83d\udd25 CVSS Score: 8.6 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L)\n\ud83d\udd39 Description: Authorization Bypass Through User-Controlled Key in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:42:45.508Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/33924891-5c36-4b46-b417-98eaab688c4c", "creation_timestamp": "2025-04-10T16:49:19.000000Z"}, {"uuid": "47c66d29-2cd3-496d-b158-e0e8f95edce7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4850", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11274", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4850\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:37:37.605Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948\n2. https://huntr.dev/bounties/46dc4728-eacc-43f5-9831-c203fdbcc346", "creation_timestamp": "2025-04-10T16:49:27.000000Z"}, {"uuid": "5b13f600-37b3-4bf8-89a0-a934f2d74511", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4846", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11273", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4846\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Cross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-29T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:38:21.044Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/c9bb2b785dc5852655405d5c9ab127a2d5aa3948\n2. https://huntr.dev/bounties/38c685fc-7065-472d-a46e-e26bf0b556d3", "creation_timestamp": "2025-04-10T16:49:26.000000Z"}, {"uuid": "a70d2b19-9a2c-4188-b372-85386e86c536", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4811", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11297", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4811\n\ud83d\udd25 CVSS Score: 8.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L)\n\ud83d\udd39 Description: Authorization Bypass Through User-Controlled Key vulnerability in usememos usememos/memos.This issue affects usememos/memos before 0.9.1.\n\n\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:43:23.786Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/e907b754-4f33-46b6-9dd2-0d2223cb060c", "creation_timestamp": "2025-04-10T17:49:19.000000Z"}, {"uuid": "92ee477c-9be1-4815-b97b-acffd77bbc55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4810", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11296", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4810\n\ud83d\udd25 CVSS Score: 6.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Improper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:43:57.084Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/f0c8d778-db86-4ed3-85bb-5315ab56915e", "creation_timestamp": "2025-04-10T17:49:18.000000Z"}, {"uuid": "2309b28a-d4b8-4337-a191-bc747cec9852", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4805", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11295", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4805\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)\n\ud83d\udd39 Description: Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:44:53.097Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/b03f6a9b-e49b-42d6-a318-1d7afd985873", "creation_timestamp": "2025-04-10T17:49:17.000000Z"}, {"uuid": "0d390a7c-55ca-4661-a6ea-f4572123897b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4804", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11294", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-4804\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_0, Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: Improper Authorization in GitHub repository usememos/memos prior to 0.9.1.\n\ud83d\udccf Published: 2022-12-28T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T16:45:38.972Z\n\ud83d\udd17 References:\n1. https://github.com/usememos/memos/commit/3556ae4e651d9443dc3bb8a170dd3cc726517a53\n2. https://huntr.dev/bounties/4ee48a1e-6332-4d95-a360-9c392643c533", "creation_timestamp": "2025-04-10T17:49:17.000000Z"}, {"uuid": "4213d801-9822-4d4f-8cc5-64185ed3aae3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48196", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11302", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48196\n\ud83d\udd25 CVSS Score: 7.4 (cvssV3_1, Vector: CVSS:3.1/AC:L/AV:A/A:H/C:N/I:N/PR:N/S:C/UI:N)\n\ud83d\udd39 Description: Certain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 before 1.0.11.136, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.\n\ud83d\udccf Published: 2022-12-30T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-10T18:42:19.707Z\n\ud83d\udd17 References:\n1. https://www.bleepingcomputer.com/news/security/netgear-warns-users-to-patch-recently-fixed-wifi-router-bug/\n2. https://kb.netgear.com/000065495/Security-Advisory-for-Pre-Authentication-Buffer-Overflow-on-Some-Routers-PSV-2019-0208", "creation_timestamp": "2025-04-10T18:49:13.000000Z"}, {"uuid": "625476bd-f824-4a8c-9ffc-16838658c019", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48195", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11430", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48195\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: An issue was discovered in Mellium mellium.im/sasl before 0.3.1. When performing SCRAM-based SASL authentication, if the remote end advertises support for channel binding, no random nonce is generated (instead, the nonce is empty). This causes authentication to fail in the best case, but (if paired with a remote end that does not validate the length of the nonce) could lead to insufficient randomness being used during authentication.\n\ud83d\udccf Published: 2022-12-31T00:00:00.000Z\n\ud83d\udccf Modified: 2025-04-11T14:46:45.333Z\n\ud83d\udd17 References:\n1. https://mellium.im/cve/cve-2022-48195/", "creation_timestamp": "2025-04-11T14:51:01.000000Z"}, {"uuid": "2406dcc1-9169-49e8-a4d3-f6a8970460d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-04-28)", "content": "", "creation_timestamp": "2026-04-28T00:00:00.000000Z"}, {"uuid": "7a7c695b-d8c9-4f4f-8513-9a370fb4e2bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48923", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16473", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48923\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nbtrfs: prevent copying too big compressed lzo segment\n\nCompressed length can be corrupted to be a lot larger than memory\nwe have allocated for buffer.\nThis will cause memcpy in copy_compressed_segment to write outside\nof allocated memory.\n\nThis mostly results in stuck read syscall but sometimes when using\nbtrfs send can get #GP\n\n  kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI\n  kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P           OE     5.17.0-rc2-1 #12\n  kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs]\n  kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs\n  Code starting with the faulting instruction\n  ===========================================\n     0:*  48 8b 06                mov    (%rsi),%rax              <-- trapping instruction\n     3:   48 8d 79 08             lea    0x8(%rcx),%rdi\n     7:   48 83 e7 f8             and    $0xfffffffffffffff8,%rdi\n     b:   48 89 01                mov    %rax,(%rcx)\n     e:   44 89 f0                mov    %r14d,%eax\n    11:   48 8b 54 06 f8          mov    -0x8(%rsi,%rax,1),%rdx\n  kernel: RSP: 0018:ffffb110812efd50 EFLAGS: 00010212\n  kernel: RAX: 0000000000001000 RBX: 000000009ca264c8 RCX: ffff98996e6d8ff8\n  kernel: RDX: 0000000000000064 RSI: 000841551d5c1000 RDI: ffffffff9500435d\n  kernel: RBP: ffff989a3be856c0 R08: 0000000000000000 R09: 0000000000000000\n  kernel: R10: 0000000000000000 R11: 0000000000001000 R12: ffff98996e6d8000\n  kernel: R13: 0000000000000008 R14: 0000000000001000 R15: 000841551d5c1000\n  kernel: FS:  0000000000000000(0000) GS:ffff98a09d640000(0000) knlGS:0000000000000000\n  kernel: CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033\n  kernel: CR2: 00001e9f984d9ea8 CR3: 000000014971a000 CR4: 00000000003506e0\n  kernel: Call Trace:\n  kernel:  \n  kernel: end_compressed_bio_read (fs/btrfs/compression.c:104 fs/btrfs/compression.c:1363 fs/btrfs/compression.c:323) btrfs\n  kernel: end_workqueue_fn (fs/btrfs/disk-io.c:1923) btrfs\n  kernel: btrfs_work_helper (fs/btrfs/async-thread.c:326) btrfs\n  kernel: process_one_work (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:212 ./include/trace/events/workqueue.h:108 kernel/workqueue.c:2312)\n  kernel: worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2455)\n  kernel: ? process_one_work (kernel/workqueue.c:2397)\n  kernel: kthread (kernel/kthread.c:377)\n  kernel: ? kthread_complete_and_exit (kernel/kthread.c:332)\n  kernel: ret_from_fork (arch/x86/entry/entry_64.S:301)\n  kernel:  \n\ud83d\udccf Published: 2024-08-22T01:32:58.084Z\n\ud83d\udccf Modified: 2025-05-15T12:28:19.161Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/8df508b7a44cd8110c726057cd28e8f8116885eb\n2. https://git.kernel.org/stable/c/e326bd06cdde46df952361456232022298281d16\n3. https://git.kernel.org/stable/c/741b23a970a79d5d3a1db2d64fa2c7b375a4febb", "creation_timestamp": "2025-05-15T12:34:19.000000Z"}, {"uuid": "f210f4ed-06f0-4d7a-9bdd-e4459f8486dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48735", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16479", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48735\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nALSA: hda: Fix UAF of leds class devs at unbinding\n\nThe LED class devices that are created by HD-audio codec drivers are\nregistered via devm_led_classdev_register() and associated with the\nHD-audio codec device.  Unfortunately, it turned out that the devres\nrelease doesn't work for this case; namely, since the codec resource\nrelease happens before the devm call chain, it triggers a NULL\ndereference or a UAF for a stale set_brightness_delay callback.\n\nFor fixing the bug, this patch changes the LED class device register\nand unregister in a manual manner without devres, keeping the\ninstances in hda_gen_spec.\n\ud83d\udccf Published: 2024-06-20T11:13:22.065Z\n\ud83d\udccf Modified: 2025-05-15T12:28:07.326Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/a7de1002135cf94367748ffc695a29812d7633b5\n2. https://git.kernel.org/stable/c/0e629052f013eeb61494d4df2f1f647c2a9aef47\n3. https://git.kernel.org/stable/c/813e9f3e06d22e29872d4fd51b54992d89cf66c8\n4. https://git.kernel.org/stable/c/549f8ffc7b2f7561bea7f90930b6c5104318e87b", "creation_timestamp": "2025-05-15T12:34:26.000000Z"}, {"uuid": "faf04ed5-0e58-4f0c-96a6-e836f14735e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48747", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16478", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48747\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nblock: Fix wrong offset in bio_truncate()\n\nbio_truncate() clears the buffer outside of last block of bdev, however\ncurrent bio_truncate() is using the wrong offset of page. So it can\nreturn the uninitialized data.\n\nThis happened when both of truncated/corrupted FS and userspace (via\nbdev) are trying to read the last of bdev.\n\ud83d\udccf Published: 2024-06-20T11:13:29.951Z\n\ud83d\udccf Modified: 2025-05-15T12:28:08.943Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/6cbf4c731d7812518cd857c2cfc3da9fd120f6ae\n2. https://git.kernel.org/stable/c/b63e120189fd92aff00096d11e2fc5253f60248b\n3. https://git.kernel.org/stable/c/4633a79ff8bc82770486a063a08b55e5162521d8\n4. https://git.kernel.org/stable/c/941d5180c430ce5b0f7a3622ef9b76077bfa3d82\n5. https://git.kernel.org/stable/c/3ee859e384d453d6ac68bfd5971f630d9fa46ad3", "creation_timestamp": "2025-05-15T12:34:25.000000Z"}, {"uuid": "01540530-b048-46d4-bf68-d44c1d664663", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48766", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16477", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48766\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: Wrap dcn301_calculate_wm_and_dlg for FPU.\n\nMirrors the logic for dcn30. Cue lots of WARNs and some\nkernel panics without this fix.\n\ud83d\udccf Published: 2024-06-20T11:13:42.486Z\n\ud83d\udccf Modified: 2025-05-15T12:28:10.454Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/456ba2433844a6483cc4c933aa8f43d24575e341\n2. https://git.kernel.org/stable/c/25f1488bdbba63415239ff301fe61a8546140d9f", "creation_timestamp": "2025-05-15T12:34:23.000000Z"}, {"uuid": "0f26ee81-4e69-47f6-8a1b-dc5b9518f6c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48773", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16476", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48773\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nxprtrdma: fix pointer derefs in error cases of rpcrdma_ep_create\n\nIf there are failures then we must not leave the non-NULL pointers with\nthe error value, otherwise `rpcrdma_ep_destroy` gets confused and tries\nfree them, resulting in an Oops.\n\ud83d\udccf Published: 2024-07-16T11:13:13.111Z\n\ud83d\udccf Modified: 2025-05-15T12:28:12.049Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/1e7433fb95ccc01629a5edaa4ced0cd8c98d0ae0\n2. https://git.kernel.org/stable/c/9921c866dc369577c3ebb9adf2383b01b58c18de\n3. https://git.kernel.org/stable/c/2526d4d8b209dc5ac1fbeb468149774888b2a141\n4. https://git.kernel.org/stable/c/a9c10b5b3b67b3750a10c8b089b2e05f5e176e33", "creation_timestamp": "2025-05-15T12:34:22.000000Z"}, {"uuid": "e72bad00-9988-455d-9be7-bfacfa8b8994", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48990", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16472", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48990\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amdgpu: fix use-after-free during gpu recovery\n\n[Why]\n    [  754.862560] refcount_t: underflow; use-after-free.\n    [  754.862898] Call Trace:\n    [  754.862903]  \n    [  754.862913]  amdgpu_job_free_cb+0xc2/0xe1 [amdgpu]\n    [  754.863543]  drm_sched_main.cold+0x34/0x39 [amd_sched]\n\n[How]\n    The fw_fence may be not init, check whether dma_fence_init\n    is performed before job free\n\ud83d\udccf Published: 2024-10-21T20:06:07.203Z\n\ud83d\udccf Modified: 2025-05-15T12:28:20.772Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/d2a89cd942edd50c1e652004fd64019be78b0a96\n2. https://git.kernel.org/stable/c/3cb93f390453cde4d6afda1587aaa00e75e09617", "creation_timestamp": "2025-05-15T12:34:18.000000Z"}, {"uuid": "7e45f359-6cec-4a2b-a18a-8d303b3fd6ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48796", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16475", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48796\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\niommu: Fix potential use-after-free during probe\n\nKasan has reported the following use after free on dev->iommu.\nwhen a device probe fails and it is in process of freeing dev->iommu\nin dev_iommu_free function, a deferred_probe_work_func runs in parallel\nand tries to access dev->iommu->fwspec in of_iommu_configure path thus\ncausing use after free.\n\nBUG: KASAN: use-after-free in of_iommu_configure+0xb4/0x4a4\nRead of size 8 at addr ffffff87a2f1acb8 by task kworker/u16:2/153\n\nWorkqueue: events_unbound deferred_probe_work_func\nCall trace:\n dump_backtrace+0x0/0x33c\n show_stack+0x18/0x24\n dump_stack_lvl+0x16c/0x1e0\n print_address_description+0x84/0x39c\n __kasan_report+0x184/0x308\n kasan_report+0x50/0x78\n __asan_load8+0xc0/0xc4\n of_iommu_configure+0xb4/0x4a4\n of_dma_configure_id+0x2fc/0x4d4\n platform_dma_configure+0x40/0x5c\n really_probe+0x1b4/0xb74\n driver_probe_device+0x11c/0x228\n __device_attach_driver+0x14c/0x304\n bus_for_each_drv+0x124/0x1b0\n __device_attach+0x25c/0x334\n device_initial_probe+0x24/0x34\n bus_probe_device+0x78/0x134\n deferred_probe_work_func+0x130/0x1a8\n process_one_work+0x4c8/0x970\n worker_thread+0x5c8/0xaec\n kthread+0x1f8/0x220\n ret_from_fork+0x10/0x18\n\nAllocated by task 1:\n ____kasan_kmalloc+0xd4/0x114\n __kasan_kmalloc+0x10/0x1c\n kmem_cache_alloc_trace+0xe4/0x3d4\n __iommu_probe_device+0x90/0x394\n probe_iommu_group+0x70/0x9c\n bus_for_each_dev+0x11c/0x19c\n bus_iommu_probe+0xb8/0x7d4\n bus_set_iommu+0xcc/0x13c\n arm_smmu_bus_init+0x44/0x130 [arm_smmu]\n arm_smmu_device_probe+0xb88/0xc54 [arm_smmu]\n platform_drv_probe+0xe4/0x13c\n really_probe+0x2c8/0xb74\n driver_probe_device+0x11c/0x228\n device_driver_attach+0xf0/0x16c\n __driver_attach+0x80/0x320\n bus_for_each_dev+0x11c/0x19c\n driver_attach+0x38/0x48\n bus_add_driver+0x1dc/0x3a4\n driver_register+0x18c/0x244\n __platform_driver_register+0x88/0x9c\n init_module+0x64/0xff4 [arm_smmu]\n do_one_initcall+0x17c/0x2f0\n do_init_module+0xe8/0x378\n load_module+0x3f80/0x4a40\n __se_sys_finit_module+0x1a0/0x1e4\n __arm64_sys_finit_module+0x44/0x58\n el0_svc_common+0x100/0x264\n do_el0_svc+0x38/0xa4\n el0_svc+0x20/0x30\n el0_sync_handler+0x68/0xac\n el0_sync+0x160/0x180\n\nFreed by task 1:\n kasan_set_track+0x4c/0x84\n kasan_set_free_info+0x28/0x4c\n ____kasan_slab_free+0x120/0x15c\n __kasan_slab_free+0x18/0x28\n slab_free_freelist_hook+0x204/0x2fc\n kfree+0xfc/0x3a4\n __iommu_probe_device+0x284/0x394\n probe_iommu_group+0x70/0x9c\n bus_for_each_dev+0x11c/0x19c\n bus_iommu_probe+0xb8/0x7d4\n bus_set_iommu+0xcc/0x13c\n arm_smmu_bus_init+0x44/0x130 [arm_smmu]\n arm_smmu_device_probe+0xb88/0xc54 [arm_smmu]\n platform_drv_probe+0xe4/0x13c\n really_probe+0x2c8/0xb74\n driver_probe_device+0x11c/0x228\n device_driver_attach+0xf0/0x16c\n __driver_attach+0x80/0x320\n bus_for_each_dev+0x11c/0x19c\n driver_attach+0x38/0x48\n bus_add_driver+0x1dc/0x3a4\n driver_register+0x18c/0x244\n __platform_driver_register+0x88/0x9c\n init_module+0x64/0xff4 [arm_smmu]\n do_one_initcall+0x17c/0x2f0\n do_init_module+0xe8/0x378\n load_module+0x3f80/0x4a40\n __se_sys_finit_module+0x1a0/0x1e4\n __arm64_sys_finit_module+0x44/0x58\n el0_svc_common+0x100/0x264\n do_el0_svc+0x38/0xa4\n el0_svc+0x20/0x30\n el0_sync_handler+0x68/0xac\n el0_sync+0x160/0x180\n\nFix this by setting dev->iommu to NULL first and\nthen freeing dev_iommu structure in dev_iommu_free\nfunction.\n\ud83d\udccf Published: 2024-07-16T11:43:50.796Z\n\ud83d\udccf Modified: 2025-05-15T12:28:13.750Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/cb86e511e78e796de6947b8f3acca1b7c76fb2ff\n2. https://git.kernel.org/stable/c/65ab30f6a6952fa9ee13009862736cf8d110e6e5\n3. https://git.kernel.org/stable/c/f74fc4b5bd533ea3d30ce47cccb8ef8d21fda85a\n4. https://git.kernel.org/stable/c/b54240ad494300ff0994c4539a531727874381f4", "creation_timestamp": "2025-05-15T12:34:21.000000Z"}, {"uuid": "49b8c3f4-5f0a-4a66-8599-385ff40d79e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48824", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16474", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48824\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: myrs: Fix crash in error case\n\nIn myrs_detect(), cs->disable_intr is NULL when privdata->hw_init() fails\nwith non-zero. In this case, myrs_cleanup(cs) will call a NULL ptr and\ncrash the kernel.\n\n[    1.105606] myrs 0000:00:03.0: Unknown Initialization Error 5A\n[    1.105872] myrs 0000:00:03.0: Failed to initialize Controller\n[    1.106082] BUG: kernel NULL pointer dereference, address: 0000000000000000\n[    1.110774] Call Trace:\n[    1.110950]  myrs_cleanup+0xe4/0x150 [myrs]\n[    1.111135]  myrs_probe.cold+0x91/0x56a [myrs]\n[    1.111302]  ? DAC960_GEM_intr_handler+0x1f0/0x1f0 [myrs]\n[    1.111500]  local_pci_probe+0x48/0x90\n\ud83d\udccf Published: 2024-07-16T11:44:09.970Z\n\ud83d\udccf Modified: 2025-05-15T12:28:15.394Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/5c5ceea00c8c9df150708e66cb9f2891192c1162\n2. https://git.kernel.org/stable/c/0e42c4a3d732517edc3766dd45a14e60d29dd929\n3. https://git.kernel.org/stable/c/6207f35c213f6cb2fc3f13b5e77f08c710e1de19\n4. https://git.kernel.org/stable/c/1d6cd26605b4d662063a83c15c776b5299a1cb23\n5. https://git.kernel.org/stable/c/4db09593af0b0b4d7d4805ebb3273df51d7cc30d", "creation_timestamp": "2025-05-15T12:34:20.000000Z"}, {"uuid": "7777bcea-2da8-4ab6-a1b6-eaea5ca82685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48703", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16480", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48703\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nthermal/int340x_thermal: handle data_vault when the value is ZERO_SIZE_PTR\n\nIn some case, the GDDV returns a package with a buffer which has\nzero length. It causes that kmemdup() returns ZERO_SIZE_PTR (0x10).\n\nThen the data_vault_read() got NULL point dereference problem when\naccessing the 0x10 value in data_vault.\n\n[   71.024560] BUG: kernel NULL pointer dereference, address:\n0000000000000010\n\nThis patch uses ZERO_OR_NULL_PTR() for checking ZERO_SIZE_PTR or\nNULL value in data_vault.\n\ud83d\udccf Published: 2024-05-03T15:14:07.390Z\n\ud83d\udccf Modified: 2025-05-15T12:28:05.793Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/dae42083b045a4ddf71c57cf350cb2412b5915c2\n2. https://git.kernel.org/stable/c/7931e28098a4c1a2a6802510b0cbe57546d2049d", "creation_timestamp": "2025-05-15T12:34:27.000000Z"}, {"uuid": "1c905d35-ac85-4699-a4e3-61ab81288a6b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48695", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16483", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48695\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nscsi: mpt3sas: Fix use-after-free warning\n\nFix the following use-after-free warning which is observed during\ncontroller reset:\n\nrefcount_t: underflow; use-after-free.\nWARNING: CPU: 23 PID: 5399 at lib/refcount.c:28 refcount_warn_saturate+0xa6/0xf0\n\ud83d\udccf Published: 2024-05-03T17:44:55.829Z\n\ud83d\udccf Modified: 2025-05-15T12:28:00.702Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/b8fc9e91b931215110ba824d1a2983c5f60b6f82\n2. https://git.kernel.org/stable/c/d4959d09b76eb7a4146f5133962b88d3bddb63d6\n3. https://git.kernel.org/stable/c/82efb917eeb27454dc4c6fe26432fc8f6c75bc16\n4. https://git.kernel.org/stable/c/5682c94644fde72f72bded6580c38189ffc856b5\n5. https://git.kernel.org/stable/c/ea10a652ad2ae2cf3eced6f632a5c98f26727057\n6. https://git.kernel.org/stable/c/6229fa494a5949be209bc73afbc5d0a749c2e3c7\n7. https://git.kernel.org/stable/c/41acb064c4e013808bc7d5fc1b506fa449425b0b\n8. https://git.kernel.org/stable/c/991df3dd5144f2e6b1c38b8d20ed3d4d21e20b34", "creation_timestamp": "2025-05-15T12:34:30.000000Z"}, {"uuid": "2268b83f-e1d2-498c-9551-9c2cc584cddf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48698", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16482", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48698\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\ndrm/amd/display: fix memory leak when using debugfs_lookup()\n\nWhen calling debugfs_lookup() the result must have dput() called on it,\notherwise the memory will leak over time.  Fix this up by properly\ncalling dput().\n\ud83d\udccf Published: 2024-05-03T15:11:37.455Z\n\ud83d\udccf Modified: 2025-05-15T12:28:02.646Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/58acd2ebae034db3bacf38708f508fbd12ae2e54\n2. https://git.kernel.org/stable/c/3a6279d243cb035eaaff1450980b40cf19748f05\n3. https://git.kernel.org/stable/c/cbfac7fa491651c57926c99edeb7495c6c1aeac2", "creation_timestamp": "2025-05-15T12:34:29.000000Z"}, {"uuid": "0b0eb556-5ab0-4c75-866e-55f0acfa7d57", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48699", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16481", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48699\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nsched/debug: fix dentry leak in update_sched_domain_debugfs\n\nKuyo reports that the pattern of using debugfs_remove(debugfs_lookup())\nleaks a dentry and with a hotplug stress test, the machine eventually\nruns out of memory.\n\nFix this up by using the newly created debugfs_lookup_and_remove() call\ninstead which properly handles the dentry reference counting logic.\n\ud83d\udccf Published: 2024-05-03T15:11:54.150Z\n\ud83d\udccf Modified: 2025-05-15T12:28:04.183Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/26e9a1ded8923510e5529fbb28390b22228700c2\n2. https://git.kernel.org/stable/c/0c32a93963e03c03e561d5a066eedad211880ba3\n3. https://git.kernel.org/stable/c/c2e406596571659451f4b95e37ddfd5a8ef1d0dc", "creation_timestamp": "2025-05-15T12:34:28.000000Z"}, {"uuid": "6fa8677d-f156-4be9-9f46-76e46eb11f01", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48829", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/19693", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48829\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes\n\niattr::ia_size is a loff_t, so these NFSv3 procedures must be\ncareful to deal with incoming client size values that are larger\nthan s64_max without corrupting the value.\n\nSilently capping the value results in storing a different value\nthan the client passed in which is unexpected behavior, so remove\nthe min_t() check in decode_sattr3().\n\nNote that RFC 1813 permits only the WRITE procedure to return\nNFS3ERR_FBIG. We believe that NFSv3 reference implementations\nalso return NFS3ERR_FBIG when ia_size is too large.\n\ud83d\udccf Published: 2024-07-16T11:44:13.313Z\n\ud83d\udccf Modified: 2025-06-27T10:21:09.814Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/72c14aed6838b5d90b4dd926b6a339b34bb02e08\n2. https://git.kernel.org/stable/c/a231ae6bb50e7c0a9e9efd7b0d10687f1d71b3a3\n3. https://git.kernel.org/stable/c/37f2d2cd8eadddbbd9c7bda327a9393399b2f89b\n4. https://git.kernel.org/stable/c/aa9051ddb4b378bd22e72a67bc77b9fc1482c5f0\n5. https://git.kernel.org/stable/c/a648fdeb7c0e17177a2280344d015dba3fbe3314", "creation_timestamp": "2025-06-27T10:49:58.000000Z"}, {"uuid": "1fcbdc4e-038b-4b28-a825-53d97d2a1d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48828", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/19694", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2022-48828\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: In the Linux kernel, the following vulnerability has been resolved:\n\nNFSD: Fix ia_size underflow\n\niattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and\nNFSv4 both define file size as an unsigned 64-bit type. Thus there\nis a range of valid file size values an NFS client can send that is\nalready larger than Linux can handle.\n\nCurrently decode_fattr4() dumps a full u64 value into ia_size. If\nthat value happens to be larger than S64_MAX, then ia_size\nunderflows. I'm about to fix up the NFSv3 behavior as well, so let's\ncatch the underflow in the common code path: nfsd_setattr().\n\ud83d\udccf Published: 2024-07-16T11:44:12.660Z\n\ud83d\udccf Modified: 2025-06-27T10:21:08.711Z\n\ud83d\udd17 References:\n1. https://git.kernel.org/stable/c/d2211e6e34d0755f35e2f8c22d81999fa81cfc71\n2. https://git.kernel.org/stable/c/38d02ba22e43b6fc7d291cf724bc6e3b7be6626b\n3. https://git.kernel.org/stable/c/8e0ecaf7a7e57b30284d6b3289cc436100fadc48\n4. https://git.kernel.org/stable/c/da22ca1ad548429d7822011c54cfe210718e0aa7\n5. https://git.kernel.org/stable/c/e6faac3f58c7c4176b66f63def17a34232a17b0e", "creation_timestamp": "2025-06-27T10:49:59.000000Z"}, {"uuid": "a95e95f0-1f8e-44ab-a933-9bebdd86efd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48610", "type": "seen", "source": "Telegram/rTyqeSgyH6_YJt3M7PzpYmjKrWgN75J6JZhOcSxLJSe7KkF3", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "f0ccf805-8426-4eb5-a77f-65577b1cabca", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4829", "type": "seen", "source": "Telegram/J0z0y2qIt4zo3hlydts-_tvFXKexl_HEa7RWgyT1vbvKU3cY", "content": "", "creation_timestamp": "2025-03-11T04:41:13.000000Z"}, {"uuid": "6c3e4852-7d67-45e2-9a5e-e573eb4281be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48193", "type": "seen", "source": "https://t.me/cibsecurity/73636", "content": "\u203c CVE-2022-48193 \u203c\n\nWeak ciphers in Softing smartLink SW-HT before 1.30 are enabled during secure communication (SSL).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T22:26:03.000000Z"}, {"uuid": "bb6d9208-ff09-4e70-8a80-f7e2529940c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48470", "type": "seen", "source": "https://t.me/cvedetector/13813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48470 - Huawei HiLink AI Life Identity Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48470 \nPublished : Dec. 28, 2024, 7:15 a.m. | 23\u00a0minutes ago \nDescription : Huawei HiLink AI Life product has an identity authentication bypass vulnerability. Successful exploitation of this vulnerability may allow attackers to access restricted functions.(Vulnerability ID:HWPSIRT-2022-42291)  \n  \nThis vulnerability has been assigned a (CVE)ID:CVE-2022-48470 \nSeverity: 4.0 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"28 Dec 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-12-28T08:45:03.000000Z"}, {"uuid": "e4453601-c0f2-443b-98ad-586d36040a4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48192", "type": "seen", "source": "https://t.me/cibsecurity/73634", "content": "\u203c CVE-2022-48192 \u203c\n\nCross-site Scripting vulnerability in Softing smartLink SW-HT before 1.30, which allows an attacker to execute a dynamic script (JavaScript, VBScript) in the context of the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-06T22:25:58.000000Z"}, {"uuid": "a3ee710a-3866-4773-bbb5-bf795068d257", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4874", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/87639", "content": "Vulnerable NetComm routers and a public PoC exploit (CVE-2022-4873, CVE-2022-4874)\n\nhttps://ift.tt/LpdgovF", "creation_timestamp": "2023-01-18T16:47:18.000000Z"}, {"uuid": "de0a0eba-9e46-4ecd-b5fd-99c1dfbbb80d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4873", "type": "published-proof-of-concept", "source": "https://t.me/ctinow/87639", "content": "Vulnerable NetComm routers and a public PoC exploit (CVE-2022-4873, CVE-2022-4874)\n\nhttps://ift.tt/LpdgovF", "creation_timestamp": "2023-01-18T16:47:18.000000Z"}, {"uuid": "afaad73f-67fd-4173-815c-25417a385e60", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48225", "type": "seen", "source": "Telegram/vpkuw_OlGwwBI3b1WaAg7Gib_WH14lPRLj8KuBB7CreacHKC", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}, {"uuid": "a575ae80-b6a4-4cd8-a946-101c25f9b9a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4899", "type": "seen", "source": "Telegram/IwprIIHeVcR1FI9OxEZ0Urew_PnnER8mJhAAK-cVF-pRvkRX", "content": "", "creation_timestamp": "2025-02-18T21:11:32.000000Z"}, {"uuid": "78aaa997-4ba9-42dd-8ed9-45942b8f6b63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48944", "type": "seen", "source": "https://t.me/cvedetector/4515", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48944 - Linux Kernel Sched Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48944 \nPublished : Aug. 30, 2024, 11:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsched: Fix yet more sched_fork() races  \n  \nWhere commit 4ef0c5c6b5ba (\"kernel/sched: Fix sched_fork() access an  \ninvalid sched_task_group\") fixed a fork race vs cgroup, it opened up a  \nrace vs syscalls by not placing the task on the runqueue before it  \ngets exposed through the pidhash.  \n  \nCommit 13765de8148f (\"sched/fair: Fix fault in reweight_entity\") is  \ntrying to fix a single instance of this, instead fix the whole class  \nof issues, effectively reverting this commit. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-30T13:58:47.000000Z"}, {"uuid": "210d9e0c-7a03-4878-a6c4-d774354f6968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48945", "type": "seen", "source": "https://t.me/cvedetector/6179", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48945 - \"Vivid Linux Kernel Media Driver Out-of-Bounds Write Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48945 \nPublished : Sept. 23, 2024, 10:15 a.m. | 40\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmedia: vivid: fix compose size exceed boundary  \n  \nsyzkaller found a bug:  \n  \n BUG: unable to handle page fault for address: ffffc9000a3b1000  \n #PF: supervisor write access in kernel mode  \n #PF: error_code(0x0002) - not-present page  \n PGD 100000067 P4D 100000067 PUD 10015f067 PMD 1121ca067 PTE 0  \n Oops: 0002 [#1] PREEMPT SMP  \n CPU: 0 PID: 23489 Comm: vivid-000-vid-c Not tainted 6.1.0-rc1+ #512  \n Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014  \n RIP: 0010:memcpy_erms+0x6/0x10  \n[...]  \n Call Trace:  \n    \n  ? tpg_fill_plane_buffer+0x856/0x15b0  \n  vivid_fillbuff+0x8ac/0x1110  \n  vivid_thread_vid_cap_tick+0x361/0xc90  \n  vivid_thread_vid_cap+0x21a/0x3a0  \n  kthread+0x143/0x180  \n  ret_from_fork+0x1f/0x30  \n    \n  \nThis is because we forget to check boundary after adjust compose->height  \nint V4L2_SEL_TGT_CROP case. Add v4l2_rect_map_inside() to fix this problem  \nfor this case. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Sep 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-09-23T12:58:19.000000Z"}, {"uuid": "8e19e01e-3d89-4c6b-9769-672b15afebc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48918", "type": "seen", "source": "https://t.me/cvedetector/3865", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48918 - Dell Inspiron 15 5510 iwlwifi mvm NULL Pointer Dereference Bug\", \n  \"Content\": \"CVE ID : CVE-2022-48918 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niwlwifi: mvm: check debugfs_dir ptr before use  \n  \nWhen \"debugfs=off\" is used on the kernel command line, iwiwifi's  \nmvm module uses an invalid/unchecked debugfs_dir pointer and causes  \na BUG:  \n  \n BUG: kernel NULL pointer dereference, address: 000000000000004f  \n #PF: supervisor read access in kernel mode  \n #PF: error_code(0x0000) - not-present page  \n PGD 0 P4D 0  \n Oops: 0000 [#1] PREEMPT SMP  \n CPU: 1 PID: 503 Comm: modprobe Tainted: G        W         5.17.0-rc5 #7  \n Hardware name: Dell Inc. Inspiron 15 5510/076F7Y, BIOS 2.4.1 11/05/2021  \n RIP: 0010:iwl_mvm_dbgfs_register+0x692/0x700 [iwlmvm]  \n Code: 69 a0 be 80 01 00 00 48 c7 c7 50 73 6a a0 e8 95 cf ee e0 48 8b 83 b0 1e 00 00 48 c7 c2 54 73 6a a0 be 64 00 00 00 48 8d 7d 8c  8b 48 50 e8 15 22 07 e1 48 8b 43 28 48 8d 55 8c 48 c7 c7 5f 73  \n RSP: 0018:ffffc90000a0ba68 EFLAGS: 00010246  \n RAX: ffffffffffffffff RBX: ffff88817d6e3328 RCX: ffff88817d6e3328  \n RDX: ffffffffa06a7354 RSI: 0000000000000064 RDI: ffffc90000a0ba6c  \n RBP: ffffc90000a0bae0 R08: ffffffff824e4880 R09: ffffffffa069d620  \n R10: ffffc90000a0ba00 R11: ffffffffffffffff R12: 0000000000000000  \n R13: ffffc90000a0bb28 R14: ffff88817d6e3328 R15: ffff88817d6e3320  \n FS:  00007f64dd92d740(0000) GS:ffff88847f640000(0000) knlGS:0000000000000000  \n CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n CR2: 000000000000004f CR3: 000000016fc79001 CR4: 0000000000770ee0  \n PKRU: 55555554  \n Call Trace:  \n    \n  ? iwl_mvm_mac_setup_register+0xbdc/0xda0 [iwlmvm]  \n  iwl_mvm_start_post_nvm+0x71/0x100 [iwlmvm]  \n  iwl_op_mode_mvm_start+0xab8/0xb30 [iwlmvm]  \n  _iwl_op_mode_start+0x6f/0xd0 [iwlwifi]  \n  iwl_opmode_register+0x6a/0xe0 [iwlwifi]  \n  ? 0xffffffffa0231000  \n  iwl_mvm_init+0x35/0x1000 [iwlmvm]  \n  ? 0xffffffffa0231000  \n  do_one_initcall+0x5a/0x1b0  \n  ? kmem_cache_alloc+0x1e5/0x2f0  \n  ? do_init_module+0x1e/0x220  \n  do_init_module+0x48/0x220  \n  load_module+0x2602/0x2bc0  \n  ? __kernel_read+0x145/0x2e0  \n  ? kernel_read_file+0x229/0x290  \n  __do_sys_finit_module+0xc5/0x130  \n  ? __do_sys_finit_module+0xc5/0x130  \n  __x64_sys_finit_module+0x13/0x20  \n  do_syscall_64+0x38/0x90  \n  entry_SYSCALL_64_after_hwframe+0x44/0xae  \n RIP: 0033:0x7f64dda564dd  \n Code: 5b 41 5c c3 66 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05  3d 01 f0 ff ff 73 01 c3 48 8b 0d 1b 29 0f 00 f7 d8 64 89 01 48  \n RSP: 002b:00007ffdba393f88 EFLAGS: 00000246 ORIG_RAX: 0000000000000139  \n RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f64dda564dd  \n RDX: 0000000000000000 RSI: 00005575399e2ab2 RDI: 0000000000000001  \n RBP: 000055753a91c5e0 R08: 0000000000000000 R09: 0000000000000002  \n R10: 0000000000000001 R11: 0000000000000246 R12: 00005575399e2ab2  \n R13: 000055753a91ceb0 R14: 0000000000000000 R15: 000055753a923018  \n    \n Modules linked in: btintel(+) btmtk bluetooth vfat snd_hda_codec_hdmi fat snd_hda_codec_realtek snd_hda_codec_generic iwlmvm(+) snd_sof_pci_intel_tgl mac80211 snd_sof_intel_hda_common soundwire_intel soundwire_generic_allocation soundwire_cadence soundwire_bus snd_sof_intel_hda snd_sof_pci snd_sof snd_sof_xtensa_dsp snd_soc_hdac_hda snd_hda_ext_core snd_soc_acpi_intel_match snd_soc_acpi snd_soc_core btrfs snd_compress snd_hda_intel snd_intel_dspcfg snd_intel_sdw_acpi snd_hda_codec raid6_pq iwlwifi snd_hda_core snd_pcm snd_timer snd soundcore cfg80211 intel_ish_ipc(+) thunderbolt rfkill intel_ishtp ucsi_acpi wmi i2c_hid_acpi i2c_hid evdev  \n CR2: 000000000000004f  \n ---[ end trace 0000000000000000 ]---  \n  \nCheck the debugfs_dir pointer for an error before using it.  \n  \n[change to make both conditional] \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, tim[...]", "creation_timestamp": "2024-08-22T05:08:09.000000Z"}, {"uuid": "ccb0c8b6-ea24-4220-ac70-f36fa2f6d9ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48912", "type": "seen", "source": "https://t.me/cvedetector/3863", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48912 - Linux Kernel netfilter Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48912 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: fix use-after-free in __nf_register_net_hook()  \n  \nWe must not dereference @new_hooks after nf_hook_mutex has been released,  \nbecause other threads might have freed our allocated hooks already.  \n  \nBUG: KASAN: use-after-free in nf_hook_entries_get_hook_ops include/linux/netfilter.h:130 [inline]  \nBUG: KASAN: use-after-free in hooks_validate net/netfilter/core.c:171 [inline]  \nBUG: KASAN: use-after-free in __nf_register_net_hook+0x77a/0x820 net/netfilter/core.c:438  \nRead of size 2 at addr ffff88801c1a8000 by task syz-executor237/4430  \n  \nCPU: 1 PID: 4430 Comm: syz-executor237 Not tainted 5.17.0-rc5-syzkaller-00306-g2293be58d6a1 #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106  \n print_address_description.constprop.0.cold+0x8d/0x336 mm/kasan/report.c:255  \n __kasan_report mm/kasan/report.c:442 [inline]  \n kasan_report.cold+0x83/0xdf mm/kasan/report.c:459  \n nf_hook_entries_get_hook_ops include/linux/netfilter.h:130 [inline]  \n hooks_validate net/netfilter/core.c:171 [inline]  \n __nf_register_net_hook+0x77a/0x820 net/netfilter/core.c:438  \n nf_register_net_hook+0x114/0x170 net/netfilter/core.c:571  \n nf_register_net_hooks+0x59/0xc0 net/netfilter/core.c:587  \n nf_synproxy_ipv6_init+0x85/0xe0 net/netfilter/nf_synproxy_core.c:1218  \n synproxy_tg6_check+0x30d/0x560 net/ipv6/netfilter/ip6t_SYNPROXY.c:81  \n xt_check_target+0x26c/0x9e0 net/netfilter/x_tables.c:1038  \n check_target net/ipv6/netfilter/ip6_tables.c:530 [inline]  \n find_check_entry.constprop.0+0x7f1/0x9e0 net/ipv6/netfilter/ip6_tables.c:573  \n translate_table+0xc8b/0x1750 net/ipv6/netfilter/ip6_tables.c:735  \n do_replace net/ipv6/netfilter/ip6_tables.c:1153 [inline]  \n do_ip6t_set_ctl+0x56e/0xb90 net/ipv6/netfilter/ip6_tables.c:1639  \n nf_setsockopt+0x83/0xe0 net/netfilter/nf_sockopt.c:101  \n ipv6_setsockopt+0x122/0x180 net/ipv6/ipv6_sockglue.c:1024  \n rawv6_setsockopt+0xd3/0x6a0 net/ipv6/raw.c:1084  \n __sys_setsockopt+0x2db/0x610 net/socket.c:2180  \n __do_sys_setsockopt net/socket.c:2191 [inline]  \n __se_sys_setsockopt net/socket.c:2188 [inline]  \n __x64_sys_setsockopt+0xba/0x150 net/socket.c:2188  \n do_syscall_x64 arch/x86/entry/common.c:50 [inline]  \n do_syscall_64+0x35/0xb0 arch/x86/entry/common.c:80  \n entry_SYSCALL_64_after_hwframe+0x44/0xae  \nRIP: 0033:0x7f65a1ace7d9  \nCode: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05  3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48  \nRSP: 002b:00007f65a1a7f308 EFLAGS: 00000246 ORIG_RAX: 0000000000000036  \nRAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f65a1ace7d9  \nRDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003  \nRBP: 00007f65a1b574c8 R08: 0000000000000001 R09: 0000000000000000  \nR10: 0000000020000000 R11: 0000000000000246 R12: 00007f65a1b55130  \nR13: 00007f65a1b574c0 R14: 00007f65a1b24090 R15: 0000000000022000  \n   \n  \nThe buggy address belongs to the page:  \npage:ffffea0000706a00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c1a8  \nflags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)  \nraw: 00fff00000000000 ffffea0001c1b108 ffffea000046dd08 0000000000000000  \nraw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000  \npage dumped because: kasan: bad access detected  \npage_owner tracks the page as freed  \npage last allocated via order 2, migratetype Unmovable, gfp_mask 0x52dc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_ZERO), pid 4430, ts 1061781545818, free_ts 1061791488993  \n prep_new_page mm/page_alloc.c:2434 [inline]  \n get_page_from_freelist+0xa72/0[...]", "creation_timestamp": "2024-08-22T05:08:04.000000Z"}, {"uuid": "c3e02e71-a7a8-4c10-87b9-6522c1ae0548", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48915", "type": "seen", "source": "https://t.me/cvedetector/3857", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48915 - Linux Thermal Zone NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2022-48915 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nthermal: core: Fix TZ_GET_TRIP NULL pointer dereference  \n  \nDo not call get_trip_hyst() from thermal_genl_cmd_tz_get_trip() if  \nthe thermal zone does not define one. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:57.000000Z"}, {"uuid": "5bf93c91-2f5a-4d20-b76c-57bc32fe008e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48911", "type": "seen", "source": "https://t.me/cvedetector/3856", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48911 - Linux Kernel Netfilter Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48911 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nf_queue: fix possible use-after-free  \n  \nEric Dumazet says:  \n  The sock_hold() side seems suspect, because there is no guarantee  \n  that sk_refcnt is not already 0.  \n  \nOn failure, we cannot queue the packet and need to indicate an  \nerror.  The packet will be dropped by the caller.  \n  \nv2: split skb prefetch hunk into separate change \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:56.000000Z"}, {"uuid": "7c91ccc9-85f7-4145-8ff7-c2ade979c889", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48920", "type": "seen", "source": "https://t.me/cvedetector/3854", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48920 - Btrfs flushoncommit warning vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48920 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: get rid of warning on transaction commit when using flushoncommit  \n  \nWhen using the flushoncommit mount option, during almost every transaction  \ncommit we trigger a warning from __writeback_inodes_sb_nr():  \n  \n  $ cat fs/fs-writeback.c:  \n  (...)  \n  static void __writeback_inodes_sb_nr(struct super_block *sb, ...  \n  {  \n        (...)  \n        WARN_ON(!rwsem_is_locked(&sb->s_umount));  \n        (...)  \n  }  \n  (...)  \n  \nThe trace produced in dmesg looks like the following:  \n  \n  [947.473890] WARNING: CPU: 5 PID: 930 at fs/fs-writeback.c:2610 __writeback_inodes_sb_nr+0x7e/0xb3  \n  [947.481623] Modules linked in: nfsd nls_cp437 cifs asn1_decoder cifs_arc4 fscache cifs_md4 ipmi_ssif  \n  [947.489571] CPU: 5 PID: 930 Comm: btrfs-transacti Not tainted 95.16.3-srb-asrock-00001-g36437ad63879 #186  \n  [947.497969] RIP: 0010:__writeback_inodes_sb_nr+0x7e/0xb3  \n  [947.502097] Code: 24 10 4c 89 44 24 18 c6 (...)  \n  [947.519760] RSP: 0018:ffffc90000777e10 EFLAGS: 00010246  \n  [947.523818] RAX: 0000000000000000 RBX: 0000000000963300 RCX: 0000000000000000  \n  [947.529765] RDX: 0000000000000000 RSI: 000000000000fa51 RDI: ffffc90000777e50  \n  [947.535740] RBP: ffff888101628a90 R08: ffff888100955800 R09: ffff888100956000  \n  [947.541701] R10: 0000000000000002 R11: 0000000000000001 R12: ffff888100963488  \n  [947.547645] R13: ffff888100963000 R14: ffff888112fb7200 R15: ffff888100963460  \n  [947.553621] FS:  0000000000000000(0000) GS:ffff88841fd40000(0000) knlGS:0000000000000000  \n  [947.560537] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n  [947.565122] CR2: 0000000008be50c4 CR3: 000000000220c000 CR4: 00000000001006e0  \n  [947.571072] Call Trace:  \n  [947.572354]    \n  [947.573266]  btrfs_commit_transaction+0x1f1/0x998  \n  [947.576785]  ? start_transaction+0x3ab/0x44e  \n  [947.579867]  ? schedule_timeout+0x8a/0xdd  \n  [947.582716]  transaction_kthread+0xe9/0x156  \n  [947.585721]  ? btrfs_cleanup_transaction.isra.0+0x407/0x407  \n  [947.590104]  kthread+0x131/0x139  \n  [947.592168]  ? set_kthread_struct+0x32/0x32  \n  [947.595174]  ret_from_fork+0x22/0x30  \n  [947.597561]    \n  [947.598553] ---[ end trace 644721052755541c ]---  \n  \nThis is because we started using writeback_inodes_sb() to flush delalloc  \nwhen committing a transaction (when using -o flushoncommit), in order to  \navoid deadlocks with filesystem freeze operations. This change was made  \nby commit ce8ea7cc6eb313 (\"btrfs: don't call btrfs_start_delalloc_roots  \nin flushoncommit\"). After that change we started producing that warning,  \nand every now and then a user reports this since the warning happens too  \noften, it spams dmesg/syslog, and a user is unsure if this reflects any  \nproblem that might compromise the filesystem's reliability.  \n  \nWe can not just lock the sb->s_umount semaphore before calling  \nwriteback_inodes_sb(), because that would at least deadlock with  \nfilesystem freezing, since at fs/super.c:freeze_super() sync_filesystem()  \nis called while we are holding that semaphore in write mode, and that can  \ntrigger a transaction commit, resulting in a deadlock. It would also  \ntrigger the same type of deadlock in the unmount path. Possibly, it could  \nalso introduce some other locking dependencies that lockdep would report.  \n  \nTo fix this call try_to_writeback_inodes_sb() instead of  \nwriteback_inodes_sb(), because that will try to read lock sb->s_umount  \nand then will only call writeback_inodes_sb() if it was able to lock it.  \nThis is fine because the cases where it can't read lock sb->s_umount  \nare during a filesystem unmount or during a filesystem freeze - in those  \ncases sb->s_umount is write locked and sync_filesystem() is called, which  \ncalls writeback_inodes_sb(). In other words, in all cases where we can[...]", "creation_timestamp": "2024-08-22T05:07:54.000000Z"}, {"uuid": "952c0791-bd79-4ef1-a603-e919c0abbd59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48909", "type": "seen", "source": "https://t.me/cvedetector/3858", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48909 - \"Linux SMC Connection Leak\"\", \n  \"Content\": \"CVE ID : CVE-2022-48909 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/smc: fix connection leak  \n  \nThere's a potential leak issue under following execution sequence :  \n  \nsmc_release      smc_connect_work  \nif (sk->sk_state == SMC_INIT)  \n     send_clc_confirim  \n tcp_abort();  \n     ...  \n     sk.sk_state = SMC_ACTIVE  \nsmc_close_active  \nswitch(sk->sk_state) {  \n...  \ncase SMC_ACTIVE:  \n smc_close_final()  \n // then wait peer closed  \n  \nUnfortunately, tcp_abort() may discard CLC CONFIRM messages that are  \nstill in the tcp send buffer, in which case our connection token cannot  \nbe delivered to the server side, which means that we cannot get a  \npassive close message at all. Therefore, it is impossible for the to be  \ndisconnected at all.  \n  \nThis patch tries a very simple way to avoid this issue, once the state  \nhas changed to SMC_ACTIVE after tcp_abort(), we can actively abort the  \nsmc connection, considering that the state is SMC_INIT before  \ntcp_abort(), abandoning the complete disconnection process should not  \ncause too much problem.  \n  \nIn fact, this problem may exist as long as the CLC CONFIRM message is  \nnot received by the server. Whether a timer should be added after  \nsmc_close_final() needs to be discussed in the future. But even so, this  \npatch provides a faster release for connection in above case, it should  \nalso be valuable. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:58.000000Z"}, {"uuid": "c1455dcf-983e-4603-a22e-b2551ebdfbac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48923", "type": "seen", "source": "https://t.me/cvedetector/3852", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48923 - Btrfs LZO Decompression Off-Path Information Disclosure\", \n  \"Content\": \"CVE ID : CVE-2022-48923 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbtrfs: prevent copying too big compressed lzo segment  \n  \nCompressed length can be corrupted to be a lot larger than memory  \nwe have allocated for buffer.  \nThis will cause memcpy in copy_compressed_segment to write outside  \nof allocated memory.  \n  \nThis mostly results in stuck read syscall but sometimes when using  \nbtrfs send can get #GP  \n  \n  kernel: general protection fault, probably for non-canonical address 0x841551d5c1000: 0000 [#1] PREEMPT SMP NOPTI  \n  kernel: CPU: 17 PID: 264 Comm: kworker/u256:7 Tainted: P           OE     5.17.0-rc2-1 #12  \n  kernel: Workqueue: btrfs-endio btrfs_work_helper [btrfs]  \n  kernel: RIP: 0010:lzo_decompress_bio (./include/linux/fortify-string.h:225 fs/btrfs/lzo.c:322 fs/btrfs/lzo.c:394) btrfs  \n  Code starting with the faulting instruction  \n  ===========================================  \n     0:*  48 8b 06                mov    (%rsi),%rax                \n  kernel: end_compressed_bio_read (fs/btrfs/compression.c:104 fs/btrfs/compression.c:1363 fs/btrfs/compression.c:323) btrfs  \n  kernel: end_workqueue_fn (fs/btrfs/disk-io.c:1923) btrfs  \n  kernel: btrfs_work_helper (fs/btrfs/async-thread.c:326) btrfs  \n  kernel: process_one_work (./arch/x86/include/asm/jump_label.h:27 ./include/linux/jump_label.h:212 ./include/trace/events/workqueue.h:108 kernel/workqueue.c:2312)  \n  kernel: worker_thread (./include/linux/list.h:292 kernel/workqueue.c:2455)  \n  kernel: ? process_one_work (kernel/workqueue.c:2397)  \n  kernel: kthread (kernel/kthread.c:377)  \n  kernel: ? kthread_complete_and_exit (kernel/kthread.c:332)  \n  kernel: ret_from_fork (arch/x86/entry/entry_64.S:301)  \n  kernel: \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:52.000000Z"}, {"uuid": "acaa73cb-0fc9-43c0-910a-6f76b94db527", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48925", "type": "seen", "source": "https://t.me/cvedetector/3851", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48925 - Iberr Corrupts Global State in RDMA/cma\", \n  \"Content\": \"CVE ID : CVE-2022-48925 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/cma: Do not change route.addr.src_addr outside state checks  \n  \nIf the state is not idle then resolve_prepare_src() should immediately  \nfail and no change to global state should happen. However, it  \nunconditionally overwrites the src_addr trying to build a temporary any  \naddress.  \n  \nFor instance if the state is already RDMA_CM_LISTEN then this will corrupt  \nthe src_addr and would cause the test in cma_cancel_operation():  \n  \n           if (cma_any_addr(cma_src_addr(id_priv)) && !id_priv->cma_dev)  \n  \nWhich would manifest as this trace from syzkaller:  \n  \n  BUG: KASAN: use-after-free in __list_add_valid+0x93/0xa0 lib/list_debug.c:26  \n  Read of size 8 at addr ffff8881546491e0 by task syz-executor.1/32204  \n  \n  CPU: 1 PID: 32204 Comm: syz-executor.1 Not tainted 5.12.0-rc8-syzkaller #0  \n  Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011  \n  Call Trace:  \n   __dump_stack lib/dump_stack.c:79 [inline]  \n   dump_stack+0x141/0x1d7 lib/dump_stack.c:120  \n   print_address_description.constprop.0.cold+0x5b/0x2f8 mm/kasan/report.c:232  \n   __kasan_report mm/kasan/report.c:399 [inline]  \n   kasan_report.cold+0x7c/0xd8 mm/kasan/report.c:416  \n   __list_add_valid+0x93/0xa0 lib/list_debug.c:26  \n   __list_add include/linux/list.h:67 [inline]  \n   list_add_tail include/linux/list.h:100 [inline]  \n   cma_listen_on_all drivers/infiniband/core/cma.c:2557 [inline]  \n   rdma_listen+0x787/0xe00 drivers/infiniband/core/cma.c:3751  \n   ucma_listen+0x16a/0x210 drivers/infiniband/core/ucma.c:1102  \n   ucma_write+0x259/0x350 drivers/infiniband/core/ucma.c:1732  \n   vfs_write+0x28e/0xa30 fs/read_write.c:603  \n   ksys_write+0x1ee/0x250 fs/read_write.c:658  \n   do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46  \n   entry_SYSCALL_64_after_hwframe+0x44/0xae  \n  \nThis is indicating that an rdma_id_private was destroyed without doing  \ncma_cancel_listens().  \n  \nInstead of trying to re-use the src_addr memory to indirectly create an  \nany address derived from the dst build one explicitly on the stack and  \nbind to that as any other normal flow would do. rdma_bind_addr() will copy  \nit over the src_addr once it knows the state is valid.  \n  \nThis is similar to commit bc0bdc5afaa7 (\"RDMA/cma: Do not change  \nroute.addr.src_addr.ss_family\") \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:51.000000Z"}, {"uuid": "9a9f63ab-5ce0-46b7-9401-740deebba15b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48930", "type": "seen", "source": "https://t.me/cvedetector/3897", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48930 - \"Red Hat Linux Kernel RDMA/ib_srp Deadlock\"\", \n  \"Content\": \"CVE ID : CVE-2022-48930 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nRDMA/ib_srp: Fix a deadlock  \n  \nRemove the flush_workqueue(system_long_wq) call since flushing  \nsystem_long_wq is deadlock-prone and since that call is redundant with a  \npreceding cancel_work_sync() \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:50:11.000000Z"}, {"uuid": "cb868392-4055-4470-a3d5-c25d9d89bf85", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48932", "type": "seen", "source": "https://t.me/cvedetector/3895", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48932 - Mellanox Technologies Linux Kernel Slab Out-of-Bounds Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48932 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/mlx5: DR, Fix slab-out-of-bounds in mlx5_cmd_dr_create_fte  \n  \nWhen adding a rule with 32 destinations, we hit the following out-of-band  \naccess issue:  \n  \n  BUG: KASAN: slab-out-of-bounds in mlx5_cmd_dr_create_fte+0x18ee/0x1e70  \n  \nThis patch fixes the issue by both increasing the allocated buffers to  \naccommodate for the needed actions and by checking the number of actions  \nto prevent this issue when a rule with too many actions is provided. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:33.000000Z"}, {"uuid": "d36d43b9-d814-476b-84fe-aede96daf3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48934", "type": "seen", "source": "https://t.me/cvedetector/3894", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48934 - \"Juniper Networks Linux Kernel `nfp` Tunnel ID Leak Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48934 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnfp: flower: Fix a potential leak in nfp_tunnel_add_shared_mac()  \n  \nida_simple_get() returns an id between min (0) and max (NFP_MAX_MAC_INDEX)  \ninclusive.  \nSo NFP_MAX_MAC_INDEX (0xff) is a valid id.  \n  \nIn order for the error handling path to work correctly, the 'invalid'  \nvalue for 'ida_idx' should not be in the 0..NFP_MAX_MAC_INDEX range,  \ninclusive.  \n  \nSo set it to -1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:32.000000Z"}, {"uuid": "c41fd379-a47b-4ceb-9741-71120bb32bb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48907", "type": "seen", "source": "https://t.me/cvedetector/3860", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48907 - Linux Kernel auxdisplay lcd2s Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2022-48907 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nauxdisplay: lcd2s: Fix memory leak in ->remove()  \n  \nOnce allocated the struct lcd2s_data is never freed.  \nFix the memory leak by switching to devm_kzalloc(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:02.000000Z"}, {"uuid": "f3df837e-5cf1-4b47-bf2e-c4ea588f495d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48924", "type": "seen", "source": "https://t.me/cvedetector/3850", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48924 - Intel int3400_thermal Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48924 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nthermal: int340x: fix memory leak in int3400_notify()  \n  \nIt is easy to hit the below memory leaks in my TigerLake platform:  \n  \nunreferenced object 0xffff927c8b91dbc0 (size 32):  \n  comm \"kworker/0:2\", pid 112, jiffies 4294893323 (age 83.604s)  \n  hex dump (first 32 bytes):  \n    4e 41 4d 45 3d 49 4e 54 33 34 30 30 20 54 68 65  NAME=INT3400 The  \n    72 6d 61 6c 00 6b 6b 6b 6b 6b 6b 6b 6b 6b 6b a5  rmal.kkkkkkkkkk.  \n  backtrace:  \n    [] __kmalloc_track_caller+0x2fe/0x4a0  \n    [] kvasprintf+0x65/0xd0  \n    [] kasprintf+0x4e/0x70  \n    [] int3400_notify+0x82/0x120 [int3400_thermal]  \n    [] acpi_ev_notify_dispatch+0x54/0x71  \n    [] acpi_os_execute_deferred+0x17/0x30  \n    [] process_one_work+0x21a/0x3f0  \n    [] worker_thread+0x4a/0x3b0  \n    [] kthread+0xfd/0x130  \n    [] ret_from_fork+0x1f/0x30  \n  \nFix it by calling kfree() accordingly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:50.000000Z"}, {"uuid": "7d03b82b-251c-4e12-8152-aec2d0105321", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48931", "type": "seen", "source": "https://t.me/cvedetector/3896", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48931 - Linux Kernel Configfs Race Condition\", \n  \"Content\": \"CVE ID : CVE-2022-48931 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nconfigfs: fix a race in configfs_{,un}register_subsystem()  \n  \nWhen configfs_register_subsystem() or configfs_unregister_subsystem()  \nis executing link_group() or unlink_group(),  \nit is possible that two processes add or delete list concurrently.  \nSome unfortunate interleavings of them can cause kernel panic.  \n  \nOne of cases is:  \nA --> B --> C --> D  \nA prev = prev   |  \n                                |               next->prev = prev  \n            prev->next = next   |  \n                                |                 // prev == B  \n                                |                 prev->next = next  \n  \nFix this by adding mutex when calling link_group() or unlink_group(),  \nbut parent configfs_subsystem is NULL when config_item is root.  \nSo I create a mutex configfs_subsystem_mutex. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:34.000000Z"}, {"uuid": "824a3eb6-0fa0-4689-97cf-f7bb7712c4c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48936", "type": "seen", "source": "https://t.me/cvedetector/3893", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48936 - Linux Kernel virtue_net IPVS IPip Tunnel GSO Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48936 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ngso: do not skip outer ip header in case of ipip and net_failover  \n  \nWe encounter a tcp drop issue in our cloud environment. Packet GROed in  \nhost forwards to a VM virtio_net nic with net_failover enabled. VM acts  \nas a IPVS LB with ipip encapsulation. The full path like:  \nhost gro -> vm virtio_net rx -> net_failover rx -> ipvs fullnat  \n -> ipip encap -> net_failover tx -> virtio_net tx  \n  \nWhen net_failover transmits a ipip pkt (gso_type = 0x0103, which means  \nSKB_GSO_TCPV4, SKB_GSO_DODGY and SKB_GSO_IPXIP4), there is no gso  \ndid because it supports TSO and GSO_IPXIP4. But network_header points to  \ninner ip header.  \n  \nCall Trace:  \n tcp4_gso_segment        ------> return NULL  \n inet_gso_segment        ------> inner iph, network_header points to  \n ipip_gso_segment  \n inet_gso_segment        ------> outer iph  \n skb_mac_gso_segment  \n  \nAfterwards virtio_net transmits the pkt, only inner ip header is modified.  \nAnd the outer one just keeps unchanged. The pkt will be dropped in remote  \nhost.  \n  \nCall Trace:  \n inet_gso_segment        ------> inner iph, outer iph is skipped  \n skb_mac_gso_segment  \n __skb_gso_segment  \n validate_xmit_skb  \n validate_xmit_skb_list  \n sch_direct_xmit  \n __qdisc_run  \n __dev_queue_xmit        ------> virtio_net  \n dev_hard_start_xmit  \n __dev_queue_xmit        ------> net_failover  \n ip_finish_output2  \n ip_output  \n iptunnel_xmit  \n ip_tunnel_xmit  \n ipip_tunnel_xmit        ------> ipip  \n dev_hard_start_xmit  \n __dev_queue_xmit  \n ip_finish_output2  \n ip_output  \n ip_forward  \n ip_rcv  \n __netif_receive_skb_one_core  \n netif_receive_skb_internal  \n napi_gro_receive  \n receive_buf  \n virtnet_poll  \n net_rx_action  \n  \nThe root cause of this issue is specific with the rare combination of  \nSKB_GSO_DODGY and a tunnel device that adds an SKB_GSO_ tunnel option.  \nSKB_GSO_DODGY is set from external virtio_net. We need to reset network  \nheader when callbacks.gso_segment() returns NULL.  \n  \nThis patch also includes ipv6_gso_segment(), considering SIT, etc. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:31.000000Z"}, {"uuid": "041f36f8-359c-452c-9534-7f2585b2c655", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48935", "type": "seen", "source": "https://t.me/cvedetector/3892", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48935 - Google Compute Engine Linux kernel Unregistered Flowtable Hooks Use After Free\", \n  \"Content\": \"CVE ID : CVE-2022-48935 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nf_tables: unregister flowtable hooks on netns exit  \n  \nUnregister flowtable hooks before they are releases via  \nnf_tables_flowtable_destroy() otherwise hook core reports UAF.  \n  \nBUG: KASAN: use-after-free in nf_hook_entries_grow+0x5a7/0x700 net/netfilter/core.c:142 net/netfilter/core.c:142  \nRead of size 4 at addr ffff8880736f7438 by task syz-executor579/3666  \n  \nCPU: 0 PID: 3666 Comm: syz-executor579 Not tainted 5.16.0-rc5-syzkaller #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n __dump_stack lib/dump_stack.c:88 [inline] lib/dump_stack.c:106  \n dump_stack_lvl+0x1dc/0x2d8 lib/dump_stack.c:106 lib/dump_stack.c:106  \n print_address_description+0x65/0x380 mm/kasan/report.c:247 mm/kasan/report.c:247  \n __kasan_report mm/kasan/report.c:433 [inline]  \n __kasan_report mm/kasan/report.c:433 [inline] mm/kasan/report.c:450  \n kasan_report+0x19a/0x1f0 mm/kasan/report.c:450 mm/kasan/report.c:450  \n nf_hook_entries_grow+0x5a7/0x700 net/netfilter/core.c:142 net/netfilter/core.c:142  \n __nf_register_net_hook+0x27e/0x8d0 net/netfilter/core.c:429 net/netfilter/core.c:429  \n nf_register_net_hook+0xaa/0x180 net/netfilter/core.c:571 net/netfilter/core.c:571  \n nft_register_flowtable_net_hooks+0x3c5/0x730 net/netfilter/nf_tables_api.c:7232 net/netfilter/nf_tables_api.c:7232  \n nf_tables_newflowtable+0x2022/0x2cf0 net/netfilter/nf_tables_api.c:7430 net/netfilter/nf_tables_api.c:7430  \n nfnetlink_rcv_batch net/netfilter/nfnetlink.c:513 [inline]  \n nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:634 [inline]  \n nfnetlink_rcv_batch net/netfilter/nfnetlink.c:513 [inline] net/netfilter/nfnetlink.c:652  \n nfnetlink_rcv_skb_batch net/netfilter/nfnetlink.c:634 [inline] net/netfilter/nfnetlink.c:652  \n nfnetlink_rcv+0x10e6/0x2550 net/netfilter/nfnetlink.c:652 net/netfilter/nfnetlink.c:652  \n  \n__nft_release_hook() calls nft_unregister_flowtable_net_hooks() which  \nonly unregisters the hooks, then after RCU grace period, it is  \nguaranteed that no packets add new entries to the flowtable (no flow  \noffload rules and flowtable hooks are reachable from packet path), so it  \nis safe to call nf_flow_table_free() which cleans up the remaining  \nentries from the flowtable (both software and hardware) and it unbinds  \nthe flow_block. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:31.000000Z"}, {"uuid": "fec88491-5979-41a3-bcc0-7a61a087b650", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48933", "type": "seen", "source": "https://t.me/cvedetector/3891", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48933 - Netfilter Module Memory Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48933 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnetfilter: nf_tables: fix memory leak during stateful obj update  \n  \nstateful objects can be updated from the control plane.  \nThe transaction logic allocates a temporary object for this purpose.  \n  \nThe ->init function was called for this object, so plain kfree() leaks  \nresources. We must call ->destroy function of the object.  \n  \nnft_obj_destroy does this, but it also decrements the module refcount,  \nbut the update path doesn't increment it.  \n  \nTo avoid special-casing the update object release, do module_get for  \nthe update case too and release it via nft_obj_destroy(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:27.000000Z"}, {"uuid": "6504e790-bc95-41a7-b190-b7033845aa2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48937", "type": "seen", "source": "https://t.me/cvedetector/3889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48937 - Linux kernel io_uring Soft Lockup Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48937 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nio_uring: add a schedule point in io_add_buffers()  \n  \nLooping ~65535 times doing kmalloc() calls can trigger soft lockups,  \nespecially with DEBUG features (like KASAN).  \n  \n[  253.536212] watchdog: BUG: soft lockup - CPU#64 stuck for 26s! [b219417889:12575]  \n[  253.544433] Modules linked in: vfat fat i2c_mux_pca954x i2c_mux spidev cdc_acm xhci_pci xhci_hcd sha3_generic gq(O)  \n[  253.544451] CPU: 64 PID: 12575 Comm: b219417889 Tainted: G S         O      5.17.0-smp-DEV #801  \n[  253.544457] RIP: 0010:kernel_text_address (./include/asm-generic/sections.h:192 ./include/linux/kallsyms.h:29 kernel/extable.c:67 kernel/extable.c:98)  \n[  253.544464] Code: 0f 93 c0 48 c7 c1 e0 63 d7 a4 48 39 cb 0f 92 c1 20 c1 0f b6 c1 5b 5d c3 90 0f 1f 44 00 00 55 48 89 e5 41 57 41 56 53 48 89 fb  c7 c0 00 00 80 a0 41 be 01 00 00 00 48 39 c7 72 0c 48 c7 c0 40  \n[  253.544468] RSP: 0018:ffff8882d8baf4c0 EFLAGS: 00000246  \n[  253.544471] RAX: 1ffff1105b175e00 RBX: ffffffffa13ef09a RCX: 00000000a13ef001  \n[  253.544474] RDX: ffffffffa13ef09a RSI: ffff8882d8baf558 RDI: ffffffffa13ef09a  \n[  253.544476] RBP: ffff8882d8baf4d8 R08: ffff8882d8baf5e0 R09: 0000000000000004  \n[  253.544479] R10: ffff8882d8baf5e8 R11: ffffffffa0d59a50 R12: ffff8882eab20380  \n[  253.544481] R13: ffffffffa0d59a50 R14: dffffc0000000000 R15: 1ffff1105b175eb0  \n[  253.544483] FS:  00000000016d3380(0000) GS:ffff88af48c00000(0000) knlGS:0000000000000000  \n[  253.544486] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n[  253.544488] CR2: 00000000004af0f0 CR3: 00000002eabfa004 CR4: 00000000003706e0  \n[  253.544491] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \n[  253.544492] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \n[  253.544494] Call Trace:  \n[  253.544496]    \n[  253.544498] ? io_queue_sqe (fs/io_uring.c:7143)  \n[  253.544505] __kernel_text_address (kernel/extable.c:78)  \n[  253.544508] unwind_get_return_address (arch/x86/kernel/unwind_frame.c:19)  \n[  253.544514] arch_stack_walk (arch/x86/kernel/stacktrace.c:27)  \n[  253.544517] ? io_queue_sqe (fs/io_uring.c:7143)  \n[  253.544521] stack_trace_save (kernel/stacktrace.c:123)  \n[  253.544527] ____kasan_kmalloc (mm/kasan/common.c:39 mm/kasan/common.c:45 mm/kasan/common.c:436 mm/kasan/common.c:515)  \n[  253.544531] ? ____kasan_kmalloc (mm/kasan/common.c:39 mm/kasan/common.c:45 mm/kasan/common.c:436 mm/kasan/common.c:515)  \n[  253.544533] ? __kasan_kmalloc (mm/kasan/common.c:524)  \n[  253.544535] ? kmem_cache_alloc_trace (./include/linux/kasan.h:270 mm/slab.c:3567)  \n[  253.544541] ? io_issue_sqe (fs/io_uring.c:4556 fs/io_uring.c:4589 fs/io_uring.c:6828)  \n[  253.544544] ? __io_queue_sqe (fs/io_uring.c:?)  \n[  253.544551] __kasan_kmalloc (mm/kasan/common.c:524)  \n[  253.544553] kmem_cache_alloc_trace (./include/linux/kasan.h:270 mm/slab.c:3567)  \n[  253.544556] ? io_issue_sqe (fs/io_uring.c:4556 fs/io_uring.c:4589 fs/io_uring.c:6828)  \n[  253.544560] io_issue_sqe (fs/io_uring.c:4556 fs/io_uring.c:4589 fs/io_uring.c:6828)  \n[  253.544564] ? __kasan_slab_alloc (mm/kasan/common.c:45 mm/kasan/common.c:436 mm/kasan/common.c:469)  \n[  253.544567] ? __kasan_slab_alloc (mm/kasan/common.c:39 mm/kasan/common.c:45 mm/kasan/common.c:436 mm/kasan/common.c:469)  \n[  253.544569] ? kmem_cache_alloc_bulk (mm/slab.h:732 mm/slab.c:3546)  \n[  253.544573] ? __io_alloc_req_refill (fs/io_uring.c:2078)  \n[  253.544578] ? io_submit_sqes (fs/io_uring.c:7441)  \n[  253.544581] ? __se_sys_io_uring_enter (fs/io_uring.c:10154 fs/io_uring.c:10096)  \n[  253.544584] ? __x64_sys_io_uring_enter (fs/io_uring.c:10096)  \n[  253.544587] ? do_syscall_64 (arch/x86/entry/common.c:50 arch/x86/entry/common.c:80)  \n[  253.544590] ? entry_SYSCALL_64_after_hwframe (??:?)  \n[  253.544596] __io_que[...]", "creation_timestamp": "2024-08-22T06:49:25.000000Z"}, {"uuid": "1e0724ba-7c9e-4509-be90-22544aea12e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48938", "type": "seen", "source": "https://t.me/cvedetector/3888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48938 - Linux Kernel Integer Overflow Vulnerability in CDC-NCM\", \n  \"Content\": \"CVE ID : CVE-2022-48938 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nCDC-NCM: avoid overflow in sanity checking  \n  \nA broken device may give an extreme offset like 0xFFF0  \nand a reasonable length for a fragment. In the sanity  \ncheck as formulated now, this will create an integer  \noverflow, defeating the sanity check. Both offset  \nand offset + len need to be checked in such a manner  \nthat no overflow can occur.  \nAnd those quantities should be unsigned. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:24.000000Z"}, {"uuid": "3da6a33f-0407-42bd-8631-09ba822aef47", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48941", "type": "seen", "source": "https://t.me/cvedetector/3887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48941 - Intel Ice Linux Kernel VF Reset and Removal Concurrency Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48941 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nice: fix concurrent reset and removal of VFs  \n  \nCommit c503e63200c6 (\"ice: Stop processing VF messages during teardown\")  \nintroduced a driver state flag, ICE_VF_DEINIT_IN_PROGRESS, which is  \nintended to prevent some issues with concurrently handling messages from  \nVFs while tearing down the VFs.  \n  \nThis change was motivated by crashes caused while tearing down and  \nbringing up VFs in rapid succession.  \n  \nIt turns out that the fix actually introduces issues with the VF driver  \ncaused because the PF no longer responds to any messages sent by the VF  \nduring its .remove routine. This results in the VF potentially removing  \nits DMA memory before the PF has shut down the device queues.  \n  \nAdditionally, the fix doesn't actually resolve concurrency issues within  \nthe ice driver. It is possible for a VF to initiate a reset just prior  \nto the ice driver removing VFs. This can result in the remove task  \nconcurrently operating while the VF is being reset. This results in  \nsimilar memory corruption and panics purportedly fixed by that commit.  \n  \nFix this concurrency at its root by protecting both the reset and  \nremoval flows using the existing VF cfg_lock. This ensures that we  \ncannot remove the VF while any outstanding critical tasks such as a  \nvirtchnl message or a reset are occurring.  \n  \nThis locking change also fixes the root cause originally fixed by commit  \nc503e63200c6 (\"ice: Stop processing VF messages during teardown\"), so we  \ncan simply revert it.  \n  \nNote that I kept these two changes together because simply reverting the  \noriginal commit alone would leave the driver vulnerable to worse race  \nconditions. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:23.000000Z"}, {"uuid": "9a0795d8-e2f0-425d-b244-35902b227ee7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48940", "type": "seen", "source": "https://t.me/cvedetector/3886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48940 - Linux kernel bpf: Incorrect copy_map_value leads to crash with bpf_spin_lock and bpf_timer\", \n  \"Content\": \"CVE ID : CVE-2022-48940 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Fix crash due to incorrect copy_map_value  \n  \nWhen both bpf_spin_lock and bpf_timer are present in a BPF map value,  \ncopy_map_value needs to skirt both objects when copying a value into and  \nout of the map. However, the current code does not set both s_off and  \nt_off in copy_map_value, which leads to a crash when e.g. bpf_spin_lock  \nis placed in map value with bpf_timer, as bpf_map_update_elem call will  \nbe able to overwrite the other timer object.  \n  \nWhen the issue is not fixed, an overwriting can produce the following  \nsplat:  \n  \n[root@(none) bpf]# ./test_progs -t timer_crash  \n[   15.930339] bpf_testmod: loading out-of-tree module taints kernel.  \n[   16.037849] ==================================================================  \n[   16.038458] BUG: KASAN: user-memory-access in __pv_queued_spin_lock_slowpath+0x32b/0x520  \n[   16.038944] Write of size 8 at addr 0000000000043ec0 by task test_progs/325  \n[   16.039399]  \n[   16.039514] CPU: 0 PID: 325 Comm: test_progs Tainted: G           OE     5.16.0+ #278  \n[   16.039983] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS ArchLinux 1.15.0-1 04/01/2014  \n[   16.040485] Call Trace:  \n[   16.040645]    \n[   16.040805]  dump_stack_lvl+0x59/0x73  \n[   16.041069]  ? __pv_queued_spin_lock_slowpath+0x32b/0x520  \n[   16.041427]  kasan_report.cold+0x116/0x11b  \n[   16.041673]  ? __pv_queued_spin_lock_slowpath+0x32b/0x520  \n[   16.042040]  __pv_queued_spin_lock_slowpath+0x32b/0x520  \n[   16.042328]  ? memcpy+0x39/0x60  \n[   16.042552]  ? pv_hash+0xd0/0xd0  \n[   16.042785]  ? lockdep_hardirqs_off+0x95/0xd0  \n[   16.043079]  __bpf_spin_lock_irqsave+0xdf/0xf0  \n[   16.043366]  ? bpf_get_current_comm+0x50/0x50  \n[   16.043608]  ? jhash+0x11a/0x270  \n[   16.043848]  bpf_timer_cancel+0x34/0xe0  \n[   16.044119]  bpf_prog_c4ea1c0f7449940d_sys_enter+0x7c/0x81  \n[   16.044500]  bpf_trampoline_6442477838_0+0x36/0x1000  \n[   16.044836]  __x64_sys_nanosleep+0x5/0x140  \n[   16.045119]  do_syscall_64+0x59/0x80  \n[   16.045377]  ? lock_is_held_type+0xe4/0x140  \n[   16.045670]  ? irqentry_exit_to_user_mode+0xa/0x40  \n[   16.046001]  ? mark_held_locks+0x24/0x90  \n[   16.046287]  ? asm_exc_page_fault+0x1e/0x30  \n[   16.046569]  ? asm_exc_page_fault+0x8/0x30  \n[   16.046851]  ? lockdep_hardirqs_on+0x7e/0x100  \n[   16.047137]  entry_SYSCALL_64_after_hwframe+0x44/0xae  \n[   16.047405] RIP: 0033:0x7f9e4831718d  \n[   16.047602] Code: b4 0c 00 0f 05 eb a9 66 0f 1f 44 00 00 f3 0f 1e fa 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05  3d 01 f0 ff ff 73 01 c3 48 8b 0d b3 6c 0c 00 f7 d8 64 89 01 48  \n[   16.048764] RSP: 002b:00007fff488086b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000023  \n[   16.049275] RAX: ffffffffffffffda RBX: 00007f9e48683740 RCX: 00007f9e4831718d  \n[   16.049747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00007fff488086d0  \n[   16.050225] RBP: 00007fff488086f0 R08: 00007fff488085d7 R09: 00007f9e4cb594a0  \n[   16.050648] R10: 0000000000000000 R11: 0000000000000206 R12: 00007f9e484cde30  \n[   16.051124] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000  \n[   16.051608]    \n[   16.051762] ================================================================== \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:19.000000Z"}, {"uuid": "eaf2306f-0b06-49dc-aa77-926f225f1f5c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48939", "type": "seen", "source": "https://t.me/cvedetector/3885", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48939 - Linux Kernel bpf Soft Lockup Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48939 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nbpf: Add schedule points in batch ops  \n  \nsyzbot reported various soft lockups caused by bpf batch operations.  \n  \n INFO: task kworker/1:1:27 blocked for more than 140 seconds.  \n INFO: task hung in rcu_barrier  \n  \nNothing prevents batch ops to process huge amount of data,  \nwe need to add schedule points in them.  \n  \nNote that maybe_wait_bpf_programs(map) calls from  \ngeneric_map_delete_batch() can be factorized by moving  \nthe call after the loop.  \n  \nThis will be done later in -next tree once we get this fix merged,  \nunless there is strong opinion doing this optimization sooner. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:19.000000Z"}, {"uuid": "47193d72-8207-44bc-9120-c4e1801ca99e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48942", "type": "seen", "source": "https://t.me/cvedetector/3884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48942 - Linux Kernel Hardware Monitoring Thermal Zone Sensor Registration Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2022-48942 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nhwmon: Handle failure to register sensor with thermal zone correctly  \n  \nIf an attempt is made to a sensor with a thermal zone and it fails,  \nthe call to devm_thermal_zone_of_sensor_register() may return -ENODEV.  \nThis may result in crashes similar to the following.  \n  \nUnable to handle kernel NULL pointer dereference at virtual address 00000000000003cd  \n...  \nInternal error: Oops: 96000021 [#1] PREEMPT SMP  \n...  \npstate: 60400009 (nZCv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--)  \npc : mutex_lock+0x18/0x60  \nlr : thermal_zone_device_update+0x40/0x2e0  \nsp : ffff800014c4fc60  \nx29: ffff800014c4fc60 x28: ffff365ee3f6e000 x27: ffffdde218426790  \nx26: ffff365ee3f6e000 x25: 0000000000000000 x24: ffff365ee3f6e000  \nx23: ffffdde218426870 x22: ffff365ee3f6e000 x21: 00000000000003cd  \nx20: ffff365ee8bf3308 x19: ffffffffffffffed x18: 0000000000000000  \nx17: ffffdde21842689c x16: ffffdde1cb7a0b7c x15: 0000000000000040  \nx14: ffffdde21a4889a0 x13: 0000000000000228 x12: 0000000000000000  \nx11: 0000000000000000 x10: 0000000000000000 x9 : 0000000000000000  \nx8 : 0000000001120000 x7 : 0000000000000001 x6 : 0000000000000000  \nx5 : 0068000878e20f07 x4 : 0000000000000000 x3 : 00000000000003cd  \nx2 : ffff365ee3f6e000 x1 : 0000000000000000 x0 : 00000000000003cd  \nCall trace:  \n mutex_lock+0x18/0x60  \n hwmon_notify_event+0xfc/0x110  \n 0xffffdde1cb7a0a90  \n 0xffffdde1cb7a0b7c  \n irq_thread_fn+0x2c/0xa0  \n irq_thread+0x134/0x240  \n kthread+0x178/0x190  \n ret_from_fork+0x10/0x20  \nCode: d503201f d503201f d2800001 aa0103e4 (c8e47c02)  \n  \nJon Hunter reports that the exact call sequence is:  \n  \nhwmon_notify_event()  \n  --> hwmon_thermal_notify()  \n    --> thermal_zone_device_update()  \n      --> update_temperature()  \n        --> mutex_lock()  \n  \nThe hwmon core needs to handle all errors returned from calls  \nto devm_thermal_zone_of_sensor_register(). If the call fails  \nwith -ENODEV, report that the sensor was not attached to a  \nthermal zone  but continue to register the hwmon device. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:18.000000Z"}, {"uuid": "ca0af634-72ca-4c45-ab14-0bac1cd53b8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48943", "type": "seen", "source": "https://t.me/cvedetector/3883", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48943 - KVM Linux Kernel Guest Ready Event Token Zeroing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48943 \nPublished : Aug. 22, 2024, 4:15 a.m. | 31\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nKVM: x86/mmu: make apf token non-zero to fix bug  \n  \nIn current async pagefault logic, when a page is ready, KVM relies on  \nkvm_arch_can_dequeue_async_page_present() to determine whether to deliver  \na READY event to the Guest. This function test token value of struct  \nkvm_vcpu_pv_apf_data, which must be reset to zero by Guest kernel when a  \nREADY event is finished by Guest. If value is zero meaning that a READY  \nevent is done, so the KVM can deliver another.  \nBut the kvm_arch_setup_async_pf() may produce a valid token with zero  \nvalue, which is confused with previous mention and may lead the loss of  \nthis READY event.  \n  \nThis bug may cause task blocked forever in Guest:  \n INFO: task stress:7532 blocked for more than 1254 seconds.  \n       Not tainted 5.10.0 #16  \n \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.  \n task:stress          state:D stack:    0 pid: 7532 ppid:  1409  \n flags:0x00000080  \n Call Trace:  \n  __schedule+0x1e7/0x650  \n  schedule+0x46/0xb0  \n  kvm_async_pf_task_wait_schedule+0xad/0xe0  \n  ? exit_to_user_mode_prepare+0x60/0x70  \n  __kvm_handle_async_pf+0x4f/0xb0  \n  ? asm_exc_page_fault+0x8/0x30  \n  exc_page_fault+0x6f/0x110  \n  ? asm_exc_page_fault+0x8/0x30  \n  asm_exc_page_fault+0x1e/0x30  \n RIP: 0033:0x402d00  \n RSP: 002b:00007ffd31912500 EFLAGS: 00010206  \n RAX: 0000000000071000 RBX: ffffffffffffffff RCX: 00000000021a32b0  \n RDX: 000000000007d011 RSI: 000000000007d000 RDI: 00000000021262b0  \n RBP: 00000000021262b0 R08: 0000000000000003 R09: 0000000000000086  \n R10: 00000000000000eb R11: 00007fefbdf2baa0 R12: 0000000000000000  \n R13: 0000000000000002 R14: 000000000007d000 R15: 0000000000001000 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T06:49:17.000000Z"}, {"uuid": "f5f2160b-dc62-424e-8140-fb4dc833e22d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48916", "type": "seen", "source": "https://t.me/cvedetector/3870", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48916 - Intel VMD IOMMU Scalable Mode Double List Add Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48916 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \niommu/vt-d: Fix double list_add when enabling VMD in scalable mode  \n  \nWhen enabling VMD and IOMMU scalable mode, the following kernel panic  \ncall trace/kernel log is shown in Eagle Stream platform (Sapphire Rapids  \nCPU) during booting:  \n  \npci 0000:59:00.5: Adding to iommu group 42  \n...  \nvmd 0000:59:00.5: PCI host bridge to bus 10000:80  \npci 10000:80:01.0: [8086:352a] type 01 class 0x060400  \npci 10000:80:01.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit]  \npci 10000:80:01.0: enabling Extended Tags  \npci 10000:80:01.0: PME# supported from D0 D3hot D3cold  \npci 10000:80:01.0: DMAR: Setup RID2PASID failed  \npci 10000:80:01.0: Failed to add to iommu group 42: -16  \npci 10000:80:03.0: [8086:352b] type 01 class 0x060400  \npci 10000:80:03.0: reg 0x10: [mem 0x00000000-0x0001ffff 64bit]  \npci 10000:80:03.0: enabling Extended Tags  \npci 10000:80:03.0: PME# supported from D0 D3hot D3cold  \n------------[ cut here ]------------  \nkernel BUG at lib/list_debug.c:29!  \ninvalid opcode: 0000 [#1] PREEMPT SMP NOPTI  \nCPU: 0 PID: 7 Comm: kworker/0:1 Not tainted 5.17.0-rc3+ #7  \nHardware name: Lenovo ThinkSystem SR650V3/SB27A86647, BIOS ESE101Y-1.00 01/13/2022  \nWorkqueue: events work_for_cpu_fn  \nRIP: 0010:__list_add_valid.cold+0x26/0x3f  \nCode: 9a 4a ab ff 4c 89 c1 48 c7 c7 40 0c d9 9e e8 b9 b1 fe ff 0f  \n      0b 48 89 f2 4c 89 c1 48 89 fe 48 c7 c7 f0 0c d9 9e e8 a2 b1  \n      fe ff  0b 48 89 d1 4c 89 c6 4c 89 ca 48 c7 c7 98 0c d9  \n      9e e8 8b b1 fe  \nRSP: 0000:ff5ad434865b3a40 EFLAGS: 00010246  \nRAX: 0000000000000058 RBX: ff4d61160b74b880 RCX: ff4d61255e1fffa8  \nRDX: 0000000000000000 RSI: 00000000fffeffff RDI: ffffffff9fd34f20  \nRBP: ff4d611d8e245c00 R08: 0000000000000000 R09: ff5ad434865b3888  \nR10: ff5ad434865b3880 R11: ff4d61257fdc6fe8 R12: ff4d61160b74b8a0  \nR13: ff4d61160b74b8a0 R14: ff4d611d8e245c10 R15: ff4d611d8001ba70  \nFS:  0000000000000000(0000) GS:ff4d611d5ea00000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: ff4d611fa1401000 CR3: 0000000aa0210001 CR4: 0000000000771ef0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe07f0 DR7: 0000000000000400  \nPKRU: 55555554  \nCall Trace:  \n   \n intel_pasid_alloc_table+0x9c/0x1d0  \n dmar_insert_one_dev_info+0x423/0x540  \n ? device_to_iommu+0x12d/0x2f0  \n intel_iommu_attach_device+0x116/0x290  \n __iommu_attach_device+0x1a/0x90  \n iommu_group_add_device+0x190/0x2c0  \n __iommu_probe_device+0x13e/0x250  \n iommu_probe_device+0x24/0x150  \n iommu_bus_notifier+0x69/0x90  \n blocking_notifier_call_chain+0x5a/0x80  \n device_add+0x3db/0x7b0  \n ? arch_memremap_can_ram_remap+0x19/0x50  \n ? memremap+0x75/0x140  \n pci_device_add+0x193/0x1d0  \n pci_scan_single_device+0xb9/0xf0  \n pci_scan_slot+0x4c/0x110  \n pci_scan_child_bus_extend+0x3a/0x290  \n vmd_enable_domain.constprop.0+0x63e/0x820  \n vmd_probe+0x163/0x190  \n local_pci_probe+0x42/0x80  \n work_for_cpu_fn+0x13/0x20  \n process_one_work+0x1e2/0x3b0  \n worker_thread+0x1c4/0x3a0  \n ? rescuer_thread+0x370/0x370  \n kthread+0xc7/0xf0  \n ? kthread_complete_and_exit+0x20/0x20  \n ret_from_fork+0x1f/0x30  \n   \nModules linked in:  \n---[ end trace 0000000000000000 ]---  \n...  \nKernel panic - not syncing: Fatal exception  \nKernel Offset: 0x1ca00000 from 0xffffffff81000000 (relocation range: 0xffffffff80000000-0xffffffffbfffffff)  \n---[ end Kernel panic - not syncing: Fatal exception ]---  \n  \nThe following 'lspci' output shows devices '10000:80:*' are subdevices of  \nthe VMD device 0000:59:00.5:  \n  \n  $ lspci  \n  ...  \n  0000:59:00.5 RAID bus controller: Intel Corporation Volume Management Device NVMe RAID Controller (rev 20)  \n  ...  \n  10000:80:01.0 PCI bridge: Intel Corporation Device 352a (rev 03)  \n  10000:80[...]", "creation_timestamp": "2024-08-22T05:08:51.000000Z"}, {"uuid": "0f2ee6ce-fd3b-4ea5-8ff7-e527763495c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48908", "type": "seen", "source": "https://t.me/cvedetector/3869", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48908 - \"Linux Arcnet com20020 Null Pointer Dereference Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48908 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: arcnet: com20020: Fix null-ptr-deref in com20020pci_probe()  \n  \nDuring driver initialization, the pointer of card info, i.e. the  \nvariable 'ci' is required. However, the definition of  \n'com20020pci_id_table' reveals that this field is empty for some  \ndevices, which will cause null pointer dereference when initializing  \nthese devices.  \n  \nThe following log reveals it:  \n  \n[    3.973806] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]  \n[    3.973819] RIP: 0010:com20020pci_probe+0x18d/0x13e0 [com20020_pci]  \n[    3.975181] Call Trace:  \n[    3.976208]  local_pci_probe+0x13f/0x210  \n[    3.977248]  pci_device_probe+0x34c/0x6d0  \n[    3.977255]  ? pci_uevent+0x470/0x470  \n[    3.978265]  really_probe+0x24c/0x8d0  \n[    3.978273]  __driver_probe_device+0x1b3/0x280  \n[    3.979288]  driver_probe_device+0x50/0x370  \n  \nFix this by checking whether the 'ci' is a null pointer first. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:50.000000Z"}, {"uuid": "22cd1cc6-fc6c-4951-b889-33df559401e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48917", "type": "seen", "source": "https://t.me/cvedetector/3868", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48917 - \"Realtek ASoC: Integer Underflow\"\", \n  \"Content\": \"CVE ID : CVE-2022-48917 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nASoC: ops: Shift tested values in snd_soc_put_volsw() by +min  \n  \nWhile the $val/$val2 values passed in from userspace are always >= 0  \nintegers, the limits of the control can be signed integers and the $min  \ncan be non-zero and less than zero. To correctly validate $val/$val2  \nagainst platform_max, add the $min offset to val first. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:12.000000Z"}, {"uuid": "2627c48a-8164-4c39-8115-831ad860740a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48910", "type": "published-proof-of-concept", "source": "https://t.me/cvedetector/3867", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48910 - Apache Linux kernel IPv6 Address Configuration Memory Leak\", \n  \"Content\": \"CVE ID : CVE-2022-48910 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: ipv6: ensure we call ipv6_mc_down() at most once  \n  \nThere are two reasons for addrconf_notify() to be called with NETDEV_DOWN:  \neither the network device is actually going down, or IPv6 was disabled  \non the interface.  \n  \nIf either of them stays down while the other is toggled, we repeatedly  \ncall the code for NETDEV_DOWN, including ipv6_mc_down(), while never  \ncalling the corresponding ipv6_mc_up() in between. This will cause a  \nnew entry in idev->mc_tomb to be allocated for each multicast group  \nthe interface is subscribed to, which in turn leaks one struct ifmcaddr6  \nper nontrivial multicast group the interface is subscribed to.  \n  \nThe following reproducer will leak at least $n objects:  \n  \nip addr add ff2e::4242/32 dev eth0 autojoin  \nsysctl -w net.ipv6.conf.eth0.disable_ipv6=1  \nfor i in $(seq 1 $n); do  \n ip link set up eth0; ip link set down eth0  \ndone  \n  \nJoining groups with IPV6_ADD_MEMBERSHIP (unprivileged) or setting the  \nsysctl net.ipv6.conf.eth0.forwarding to 1 (=> subscribing to ff02::2)  \ncan also be used to create a nontrivial idev->mc_list, which will the  \nleak objects with the right up-down-sequence.  \n  \nBased on both sources for NETDEV_DOWN events the interface IPv6 state  \nshould be considered:  \n  \n - not ready if the network interface is not ready OR IPv6 is disabled  \n   for it  \n - ready if the network interface is ready AND IPv6 is enabled for it  \n  \nThe functions ipv6_mc_up() and ipv6_down() should only be run when this  \nstate changes.  \n  \nImplement this by remembering when the IPv6 state is ready, and only  \nrun ipv6_mc_down() if it actually changed from ready to not ready.  \n  \nThe other direction (not ready -> ready) already works correctly, as:  \n  \n - the interface notification triggered codepath for NETDEV_UP /  \n   NETDEV_CHANGE returns early if ipv6 is disabled, and  \n - the disable_ipv6=0 triggered codepath skips fully initializing the  \n   interface as long as addrconf_link_ready(dev) returns false  \n - calling ipv6_mc_up() repeatedly does not leak anything \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:11.000000Z"}, {"uuid": "7fdf206e-a6de-42b7-ac33-be4aae635ab6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48906", "type": "seen", "source": "https://t.me/cvedetector/3872", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48906 - Linux MPTCP Shift-OutOfBounds Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48906 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmptcp: Correctly set DATA_FIN timeout when number of retransmits is large  \n  \nSyzkaller with UBSAN uncovered a scenario where a large number of  \nDATA_FIN retransmits caused a shift-out-of-bounds in the DATA_FIN  \ntimeout calculation:  \n  \n================================================================================  \nUBSAN: shift-out-of-bounds in net/mptcp/protocol.c:470:29  \nshift exponent 32 is too large for 32-bit type 'unsigned int'  \nCPU: 1 PID: 13059 Comm: kworker/1:0 Not tainted 5.17.0-rc2-00630-g5fbf21c90c60 #1  \nHardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.13.0-1ubuntu1.1 04/01/2014  \nWorkqueue: events mptcp_worker  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106  \n ubsan_epilogue+0xb/0x5a lib/ubsan.c:151  \n __ubsan_handle_shift_out_of_bounds.cold+0xb2/0x20e lib/ubsan.c:330  \n mptcp_set_datafin_timeout net/mptcp/protocol.c:470 [inline]  \n __mptcp_retrans.cold+0x72/0x77 net/mptcp/protocol.c:2445  \n mptcp_worker+0x58a/0xa70 net/mptcp/protocol.c:2528  \n process_one_work+0x9df/0x16d0 kernel/workqueue.c:2307  \n worker_thread+0x95/0xe10 kernel/workqueue.c:2454  \n kthread+0x2f4/0x3b0 kernel/kthread.c:377  \n ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295  \n   \n================================================================================  \n  \nThis change limits the maximum timeout by limiting the size of the  \nshift, which keeps all intermediate values in-bounds. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:53.000000Z"}, {"uuid": "f03a680d-0982-41c4-9176-14385ad4757f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48905", "type": "seen", "source": "https://t.me/cvedetector/3859", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48905 - IBM vNIC Memory Leak (Information Disclosure)\", \n  \"Content\": \"CVE ID : CVE-2022-48905 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nibmvnic: free reset-work-item when flushing  \n  \nFix a tiny memory leak when flushing the reset work queue. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:01.000000Z"}, {"uuid": "8abfa2f3-5ad6-4684-84c1-b020d143c5f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48919", "type": "seen", "source": "https://t.me/cvedetector/3862", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48919 - Microsoft CIFS Double Free Use After Free\", \n  \"Content\": \"CVE ID : CVE-2022-48919 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncifs: fix double free race when mount fails in cifs_get_root()  \n  \nWhen cifs_get_root() fails during cifs_smb3_do_mount() we call  \ndeactivate_locked_super() which eventually will call delayed_free() which  \nwill free the context.  \nIn this situation we should not proceed to enter the out: section in  \ncifs_smb3_do_mount() and free the same resources a second time.  \n  \n[Thu Feb 10 12:59:06 2022] BUG: KASAN: use-after-free in rcu_cblist_dequeue+0x32/0x60  \n[Thu Feb 10 12:59:06 2022] Read of size 8 at addr ffff888364f4d110 by task swapper/1/0  \n  \n[Thu Feb 10 12:59:06 2022] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G           OE     5.17.0-rc3+ #4  \n[Thu Feb 10 12:59:06 2022] Hardware name: Microsoft Corporation Virtual Machine/Virtual Machine, BIOS Hyper-V UEFI Release v4.0 12/17/2019  \n[Thu Feb 10 12:59:06 2022] Call Trace:  \n[Thu Feb 10 12:59:06 2022]    \n[Thu Feb 10 12:59:06 2022]  dump_stack_lvl+0x5d/0x78  \n[Thu Feb 10 12:59:06 2022]  print_address_description.constprop.0+0x24/0x150  \n[Thu Feb 10 12:59:06 2022]  ? rcu_cblist_dequeue+0x32/0x60  \n[Thu Feb 10 12:59:06 2022]  kasan_report.cold+0x7d/0x117  \n[Thu Feb 10 12:59:06 2022]  ? rcu_cblist_dequeue+0x32/0x60  \n[Thu Feb 10 12:59:06 2022]  __asan_load8+0x86/0xa0  \n[Thu Feb 10 12:59:06 2022]  rcu_cblist_dequeue+0x32/0x60  \n[Thu Feb 10 12:59:06 2022]  rcu_core+0x547/0xca0  \n[Thu Feb 10 12:59:06 2022]  ? call_rcu+0x3c0/0x3c0  \n[Thu Feb 10 12:59:06 2022]  ? __this_cpu_preempt_check+0x13/0x20  \n[Thu Feb 10 12:59:06 2022]  ? lock_is_held_type+0xea/0x140  \n[Thu Feb 10 12:59:06 2022]  rcu_core_si+0xe/0x10  \n[Thu Feb 10 12:59:06 2022]  __do_softirq+0x1d4/0x67b  \n[Thu Feb 10 12:59:06 2022]  __irq_exit_rcu+0x100/0x150  \n[Thu Feb 10 12:59:06 2022]  irq_exit_rcu+0xe/0x30  \n[Thu Feb 10 12:59:06 2022]  sysvec_hyperv_stimer0+0x9d/0xc0  \n...  \n[Thu Feb 10 12:59:07 2022] Freed by task 58179:  \n[Thu Feb 10 12:59:07 2022]  kasan_save_stack+0x26/0x50  \n[Thu Feb 10 12:59:07 2022]  kasan_set_track+0x25/0x30  \n[Thu Feb 10 12:59:07 2022]  kasan_set_free_info+0x24/0x40  \n[Thu Feb 10 12:59:07 2022]  ____kasan_slab_free+0x137/0x170  \n[Thu Feb 10 12:59:07 2022]  __kasan_slab_free+0x12/0x20  \n[Thu Feb 10 12:59:07 2022]  slab_free_freelist_hook+0xb3/0x1d0  \n[Thu Feb 10 12:59:07 2022]  kfree+0xcd/0x520  \n[Thu Feb 10 12:59:07 2022]  cifs_smb3_do_mount+0x149/0xbe0 [cifs]  \n[Thu Feb 10 12:59:07 2022]  smb3_get_tree+0x1a0/0x2e0 [cifs]  \n[Thu Feb 10 12:59:07 2022]  vfs_get_tree+0x52/0x140  \n[Thu Feb 10 12:59:07 2022]  path_mount+0x635/0x10c0  \n[Thu Feb 10 12:59:07 2022]  __x64_sys_mount+0x1bf/0x210  \n[Thu Feb 10 12:59:07 2022]  do_syscall_64+0x5c/0xc0  \n[Thu Feb 10 12:59:07 2022]  entry_SYSCALL_64_after_hwframe+0x44/0xae  \n  \n[Thu Feb 10 12:59:07 2022] Last potentially related work creation:  \n[Thu Feb 10 12:59:07 2022]  kasan_save_stack+0x26/0x50  \n[Thu Feb 10 12:59:07 2022]  __kasan_record_aux_stack+0xb6/0xc0  \n[Thu Feb 10 12:59:07 2022]  kasan_record_aux_stack_noalloc+0xb/0x10  \n[Thu Feb 10 12:59:07 2022]  call_rcu+0x76/0x3c0  \n[Thu Feb 10 12:59:07 2022]  cifs_umount+0xce/0xe0 [cifs]  \n[Thu Feb 10 12:59:07 2022]  cifs_kill_sb+0xc8/0xe0 [cifs]  \n[Thu Feb 10 12:59:07 2022]  deactivate_locked_super+0x5d/0xd0  \n[Thu Feb 10 12:59:07 2022]  cifs_smb3_do_mount+0xab9/0xbe0 [cifs]  \n[Thu Feb 10 12:59:07 2022]  smb3_get_tree+0x1a0/0x2e0 [cifs]  \n[Thu Feb 10 12:59:07 2022]  vfs_get_tree+0x52/0x140  \n[Thu Feb 10 12:59:07 2022]  path_mount+0x635/0x10c0  \n[Thu Feb 10 12:59:07 2022]  __x64_sys_mount+0x1bf/0x210  \n[Thu Feb 10 12:59:07 2022]  do_syscall_64+0x5c/0xc0  \n[Thu Feb 10 12:59:07 2022]  entry_SYSCALL_64_after_hwframe+0x44/0xae \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:04.000000Z"}, {"uuid": "e854b969-eb36-489f-815e-df5d8ffebc88", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48914", "type": "seen", "source": "https://t.me/cvedetector/3861", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48914 - Xen Netfront NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2022-48914 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nxen/netfront: destroy queues before real_num_tx_queues is zeroed  \n  \nxennet_destroy_queues() relies on info->netdev->real_num_tx_queues to  \ndelete queues. Since d7dac083414eb5bb99a6d2ed53dc2c1b405224e5  \n(\"net-sysfs: update the queue counts in the unregistration path\"),  \nunregister_netdev() indirectly sets real_num_tx_queues to 0. Those two  \nfacts together means, that xennet_destroy_queues() called from  \nxennet_remove() cannot do its job, because it's called after  \nunregister_netdev(). This results in kfree-ing queues that are still  \nlinked in napi, which ultimately crashes:  \n  \n    BUG: kernel NULL pointer dereference, address: 0000000000000000  \n    #PF: supervisor read access in kernel mode  \n    #PF: error_code(0x0000) - not-present page  \n    PGD 0 P4D 0  \n    Oops: 0000 [#1] PREEMPT SMP PTI  \n    CPU: 1 PID: 52 Comm: xenwatch Tainted: G        W         5.16.10-1.32.fc32.qubes.x86_64+ #226  \n    RIP: 0010:free_netdev+0xa3/0x1a0  \n    Code: ff 48 89 df e8 2e e9 00 00 48 8b 43 50 48 8b 08 48 8d b8 a0 fe ff ff 48 8d a9 a0 fe ff ff 49 39 c4 75 26 eb 47 e8 ed c1 66 ff  8b 85 60 01 00 00 48 8d 95 60 01 00 00 48 89 ef 48 2d 60 01 00  \n    RSP: 0000:ffffc90000bcfd00 EFLAGS: 00010286  \n    RAX: 0000000000000000 RBX: ffff88800edad000 RCX: 0000000000000000  \n    RDX: 0000000000000001 RSI: ffffc90000bcfc30 RDI: 00000000ffffffff  \n    RBP: fffffffffffffea0 R08: 0000000000000000 R09: 0000000000000000  \n    R10: 0000000000000000 R11: 0000000000000001 R12: ffff88800edad050  \n    R13: ffff8880065f8f88 R14: 0000000000000000 R15: ffff8880066c6680  \n    FS:  0000000000000000(0000) GS:ffff8880f3300000(0000) knlGS:0000000000000000  \n    CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \n    CR2: 0000000000000000 CR3: 00000000e998c006 CR4: 00000000003706e0  \n    Call Trace:  \n       \n     xennet_remove+0x13d/0x300 [xen_netfront]  \n     xenbus_dev_remove+0x6d/0xf0  \n     __device_release_driver+0x17a/0x240  \n     device_release_driver+0x24/0x30  \n     bus_remove_device+0xd8/0x140  \n     device_del+0x18b/0x410  \n     ? _raw_spin_unlock+0x16/0x30  \n     ? klist_iter_exit+0x14/0x20  \n     ? xenbus_dev_request_and_reply+0x80/0x80  \n     device_unregister+0x13/0x60  \n     xenbus_dev_changed+0x18e/0x1f0  \n     xenwatch_thread+0xc0/0x1a0  \n     ? do_wait_intr_irq+0xa0/0xa0  \n     kthread+0x16b/0x190  \n     ? set_kthread_struct+0x40/0x40  \n     ret_from_fork+0x22/0x30  \n       \n  \nFix this by calling xennet_destroy_queues() from xennet_uninit(),  \nwhen real_num_tx_queues is still available. This ensures that queues are  \ndestroyed when real_num_tx_queues is set to 0, regardless of how  \nunregister_netdev() was called.  \n  \nOriginally reported at  \n \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:08:03.000000Z"}, {"uuid": "40dcbacf-1d3b-4cda-b710-a6335eee9055", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48921", "type": "seen", "source": "https://t.me/cvedetector/3853", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48921 - Linux Kernel Sched/Fair Null Pointer Dereference Vulnerability in Red Hat Enterprise Linux\", \n  \"Content\": \"CVE ID : CVE-2022-48921 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsched/fair: Fix fault in reweight_entity  \n  \nSyzbot found a GPF in reweight_entity. This has been bisected to  \ncommit 4ef0c5c6b5ba (\"kernel/sched: Fix sched_fork() access an invalid  \nsched_task_group\")  \n  \nThere\u00a0is a race between sched_post_fork() and setpriority(PRIO_PGRP)  \nwithin a thread group that causes a null-ptr-deref\u00a0in  \nreweight_entity() in CFS. The scenario is that the main process spawns  \nnumber of new threads, which then call setpriority(PRIO_PGRP, 0, -20),  \nwait, and exit.  For each of the new threads the copy_process() gets  \ninvoked, which adds the new task_struct and calls sched_post_fork()  \nfor it.  \n  \nIn the above scenario there is a possibility that  \nsetpriority(PRIO_PGRP) and set_one_prio() will be called for a thread  \nin the group that is just being created by copy_process(), and for  \nwhich the sched_post_fork() has not been executed yet. This will  \ntrigger a null pointer dereference in reweight_entity(),\u00a0as it will  \ntry to access the run queue pointer, which hasn't been set.  \n  \nBefore the mentioned change the cfs_rq pointer for the task  has been  \nset in sched_fork(), which is called much earlier in copy_process(),  \nbefore the new task is added to the thread_group.  Now it is done in  \nthe sched_post_fork(), which is called after that.  To fix the issue  \nthe remove the update_load param from the update_load param() function  \nand call reweight_task() only if the task flag doesn't have the  \nTASK_NEW flag set. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:52.000000Z"}, {"uuid": "27c6a5d1-1510-4863-a7d6-34f03605180b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48922", "type": "seen", "source": "https://t.me/cvedetector/3849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48922 - QEMU RISC-V Linux Kernel Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2022-48922 \nPublished : Aug. 22, 2024, 2:15 a.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nriscv: fix oops caused by irqsoff latency tracer  \n  \nThe trace_hardirqs_{on,off}() require the caller to setup frame pointer  \nproperly. This because these two functions use macro 'CALLER_ADDR1' (aka.  \n__builtin_return_address(1)) to acquire caller info. If the $fp is used  \nfor other purpose, the code generated this macro (as below) could trigger  \nmemory access fault.  \n  \n   0xffffffff8011510e :    ld      a1,-16(s0)  \n   0xffffffff80115112 :    ld      s2,-8(a1)  # ] restore_all+0x12/0x6e  \n  \nThis because the $fp(aka. $s0) register is not used as frame pointer in the  \nassembly entry code.  \n  \n resume_kernel:  \n  REG_L s0, TASK_TI_PREEMPT_COUNT(tp)  \n  bnez s0, restore_all  \n  REG_L s0, TASK_TI_FLAGS(tp)  \n                andi s0, s0, _TIF_NEED_RESCHED  \n                beqz s0, restore_all  \n                call preempt_schedule_irq  \n                j restore_all  \n  \nTo fix above issue, here we add one extra level wrapper for function  \ntrace_hardirqs_{on,off}() so they can be safely called by low level entry  \ncode. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Aug 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-08-22T05:07:49.000000Z"}, {"uuid": "f807abe4-c7f2-4ad7-aa8d-aff6fdc91793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48456", "type": "seen", "source": "https://t.me/cibsecurity/73316", "content": "\u203c CVE-2022-48456 \u203c\n\nIn camera driver, there is a possible out of bounds write due to a incorrect bounds check. This could lead to local denial of service with System execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T13:21:56.000000Z"}, {"uuid": "887cf711-2a89-412f-a809-c0ee098947bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48824", "type": "seen", "source": "https://t.me/cvedetector/933", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48824 - Linux Kernel myrs Null Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2022-48824 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nscsi: myrs: Fix crash in error case  \n  \nIn myrs_detect(), cs->disable_intr is NULL when privdata->hw_init() fails  \nwith non-zero. In this case, myrs_cleanup(cs) will call a NULL ptr and  \ncrash the kernel.  \n  \n[    1.105606] myrs 0000:00:03.0: Unknown Initialization Error 5A  \n[    1.105872] myrs 0000:00:03.0: Failed to initialize Controller  \n[    1.106082] BUG: kernel NULL pointer dereference, address: 0000000000000000  \n[    1.110774] Call Trace:  \n[    1.110950]  myrs_cleanup+0xe4/0x150 [myrs]  \n[    1.111135]  myrs_probe.cold+0x91/0x56a [myrs]  \n[    1.111302]  ? DAC960_GEM_intr_handler+0x1f0/0x1f0 [myrs]  \n[    1.111500]  local_pci_probe+0x48/0x90 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:14.000000Z"}, {"uuid": "c9186444-b432-48ff-954c-de454edf8c07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48831", "type": "seen", "source": "https://t.me/cvedetector/932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48831 - Linux Kernel IMA Asymmetric Verification Reference Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48831 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nima: fix reference leak in asymmetric_verify()  \n  \nDon't leak a reference to the key if its algorithm is unknown. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:13.000000Z"}, {"uuid": "04b36a97-ecee-4a4d-9b6c-6fd8c9a03733", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48862", "type": "seen", "source": "https://t.me/cvedetector/952", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48862 - Linux Kernel Vhost IOTLB Overwrite Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48862 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvhost: fix hung thread due to erroneous iotlb entries  \n  \nIn vhost_iotlb_add_range_ctx(), range size can overflow to 0 when  \nstart is 0 and last is ULONG_MAX. One instance where it can happen  \nis when userspace sends an IOTLB message with iova=size=uaddr=0  \n(vhost_process_iotlb_msg). So, an entry with size = 0, start = 0,  \nlast = ULONG_MAX ends up in the iotlb. Next time a packet is sent,  \niotlb_access_ok() loops indefinitely due to that erroneous entry.  \n  \n Call Trace:  \n    \n  iotlb_access_ok+0x21b/0x3e0 drivers/vhost/vhost.c:1340  \n  vq_meta_prefetch+0xbc/0x280 drivers/vhost/vhost.c:1366  \n  vhost_transport_do_send_pkt+0xe0/0xfd0 drivers/vhost/vsock.c:104  \n  vhost_worker+0x23d/0x3d0 drivers/vhost/vhost.c:372  \n  kthread+0x2e9/0x3a0 kernel/kthread.c:377  \n  ret_from_fork+0x1f/0x30 arch/x86/entry/entry_64.S:295  \n    \n  \nReported by syzbot at:  \n   \n  \nTo fix this, do two things:  \n  \n1. Return -EINVAL in vhost_chr_write_iter() when userspace asks to map  \n   a range with size 0.  \n2. Fix vhost_iotlb_add_range_ctx() to handle the range [0, ULONG_MAX]  \n   by splitting it into two entries. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:49.000000Z"}, {"uuid": "d61a0b60-0257-41b7-8d18-9a6e75d3938f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48855", "type": "seen", "source": "https://t.me/cvedetector/969", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48855 - Linux SCTP Stack Kernel Infoleak\", \n  \"Content\": \"CVE ID : CVE-2022-48855 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nsctp: fix kernel-infoleak for SCTP sockets  \n  \nsyzbot reported a kernel infoleak [1] of 4 bytes.  \n  \nAfter analysis, it turned out r->idiag_expires is not initialized  \nif inet_sctp_diag_fill() calls inet_diag_msg_common_fill()  \n  \nMake sure to clear idiag_timer/idiag_retrans/idiag_expires  \nand let inet_diag_msg_sctpasoc_fill() fill them again if needed.  \n  \n[1]  \n  \nBUG: KMSAN: kernel-infoleak in instrument_copy_to_user include/linux/instrumented.h:121 [inline]  \nBUG: KMSAN: kernel-infoleak in copyout lib/iov_iter.c:154 [inline]  \nBUG: KMSAN: kernel-infoleak in _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668  \n instrument_copy_to_user include/linux/instrumented.h:121 [inline]  \n copyout lib/iov_iter.c:154 [inline]  \n _copy_to_iter+0x6ef/0x25a0 lib/iov_iter.c:668  \n copy_to_iter include/linux/uio.h:162 [inline]  \n simple_copy_to_iter+0xf3/0x140 net/core/datagram.c:519  \n __skb_datagram_iter+0x2d5/0x11b0 net/core/datagram.c:425  \n skb_copy_datagram_iter+0xdc/0x270 net/core/datagram.c:533  \n skb_copy_datagram_msg include/linux/skbuff.h:3696 [inline]  \n netlink_recvmsg+0x669/0x1c80 net/netlink/af_netlink.c:1977  \n sock_recvmsg_nosec net/socket.c:948 [inline]  \n sock_recvmsg net/socket.c:966 [inline]  \n __sys_recvfrom+0x795/0xa10 net/socket.c:2097  \n __do_sys_recvfrom net/socket.c:2115 [inline]  \n __se_sys_recvfrom net/socket.c:2111 [inline]  \n __x64_sys_recvfrom+0x19d/0x210 net/socket.c:2111  \n do_syscall_x64 arch/x86/entry/common.c:51 [inline]  \n do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82  \n entry_SYSCALL_64_after_hwframe+0x44/0xae  \n  \nUninit was created at:  \n slab_post_alloc_hook mm/slab.h:737 [inline]  \n slab_alloc_node mm/slub.c:3247 [inline]  \n __kmalloc_node_track_caller+0xe0c/0x1510 mm/slub.c:4975  \n kmalloc_reserve net/core/skbuff.c:354 [inline]  \n __alloc_skb+0x545/0xf90 net/core/skbuff.c:426  \n alloc_skb include/linux/skbuff.h:1158 [inline]  \n netlink_dump+0x3e5/0x16c0 net/netlink/af_netlink.c:2248  \n __netlink_dump_start+0xcf8/0xe90 net/netlink/af_netlink.c:2373  \n netlink_dump_start include/linux/netlink.h:254 [inline]  \n inet_diag_handler_cmd+0x2e7/0x400 net/ipv4/inet_diag.c:1341  \n sock_diag_rcv_msg+0x24a/0x620  \n netlink_rcv_skb+0x40c/0x7e0 net/netlink/af_netlink.c:2494  \n sock_diag_rcv+0x63/0x80 net/core/sock_diag.c:277  \n netlink_unicast_kernel net/netlink/af_netlink.c:1317 [inline]  \n netlink_unicast+0x1093/0x1360 net/netlink/af_netlink.c:1343  \n netlink_sendmsg+0x14d9/0x1720 net/netlink/af_netlink.c:1919  \n sock_sendmsg_nosec net/socket.c:705 [inline]  \n sock_sendmsg net/socket.c:725 [inline]  \n sock_write_iter+0x594/0x690 net/socket.c:1061  \n do_iter_readv_writev+0xa7f/0xc70  \n do_iter_write+0x52c/0x1500 fs/read_write.c:851  \n vfs_writev fs/read_write.c:924 [inline]  \n do_writev+0x645/0xe00 fs/read_write.c:967  \n __do_sys_writev fs/read_write.c:1040 [inline]  \n __se_sys_writev fs/read_write.c:1037 [inline]  \n __x64_sys_writev+0xe5/0x120 fs/read_write.c:1037  \n do_syscall_x64 arch/x86/entry/common.c:51 [inline]  \n do_syscall_64+0x54/0xd0 arch/x86/entry/common.c:82  \n entry_SYSCALL_64_after_hwframe+0x44/0xae  \n  \nBytes 68-71 of 2508 are uninitialized  \nMemory access of size 2508 starts at ffff888114f9b000  \nData copied to user address 00007f7fe09ff2e0  \n  \nCPU: 1 PID: 3478 Comm: syz-executor306 Not tainted 5.17.0-rc4-syzkaller #0  \nHardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:14.000000Z"}, {"uuid": "8af6495a-9121-4e72-a61e-ac88627acba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48858", "type": "seen", "source": "https://t.me/cvedetector/967", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48858 - \"Mellanox mlx5 Linux Kernel Refcount Use After Free Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48858 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet/mlx5: Fix a race on command flush flow  \n  \nFix a refcount use after free warning due to a race on command entry.  \nSuch race occurs when one of the commands releases its last refcount and  \nfrees its index and entry while another process running command flush  \nflow takes refcount to this command entry. The process which handles  \ncommands flush may see this command as needed to be flushed if the other  \nprocess released its refcount but didn't release the index yet. Fix it  \nby adding the needed spin lock.  \n  \nIt fixes the following warning trace:  \n  \nrefcount_t: addition on 0; use-after-free.  \nWARNING: CPU: 11 PID: 540311 at lib/refcount.c:25 refcount_warn_saturate+0x80/0xe0  \n...  \nRIP: 0010:refcount_warn_saturate+0x80/0xe0  \n...  \nCall Trace:  \n   \n mlx5_cmd_trigger_completions+0x293/0x340 [mlx5_core]  \n mlx5_cmd_flush+0x3a/0xf0 [mlx5_core]  \n enter_error_state+0x44/0x80 [mlx5_core]  \n mlx5_fw_fatal_reporter_err_work+0x37/0xe0 [mlx5_core]  \n process_one_work+0x1be/0x390  \n worker_thread+0x4d/0x3d0  \n ? rescuer_thread+0x350/0x350  \n kthread+0x141/0x160  \n ? set_kthread_struct+0x40/0x40  \n ret_from_fork+0x1f/0x30 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:12.000000Z"}, {"uuid": "66450148-08c2-490f-adf6-42c2e5aa4f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48849", "type": "seen", "source": "https://t.me/cvedetector/968", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48849 - AMDgpu Tiling Flag Check Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48849 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/amdgpu: bypass tiling flag check in virtual display case (v2)  \n  \nvkms leverages common amdgpu framebuffer creation, and  \nalso as it does not support FB modifier, there is no need  \nto check tiling flags when initing framebuffer when virtual  \ndisplay is enabled.  \n  \nThis can fix below calltrace:  \n  \namdgpu 0000:00:08.0: GFX9+ requires FB check based on format modifier  \nWARNING: CPU: 0 PID: 1023 at drivers/gpu/drm/amd/amdgpu/amdgpu_display.c:1150 amdgpu_display_framebuffer_init+0x8e7/0xb40 [amdgpu]  \n  \nv2: check adev->enable_virtual_display instead as vkms can be  \n enabled in bare metal as well. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:13.000000Z"}, {"uuid": "25622dcb-c1f1-4bf9-91e8-caa458250bb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48851", "type": "seen", "source": "https://t.me/cvedetector/966", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48851 - VMware ESXi GDM724x Use After Free Out-Of-Bounds Read\", \n  \"Content\": \"CVE ID : CVE-2022-48851 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nstaging: gdm724x: fix use after free in gdm_lte_rx()  \n  \nThe netif_rx_ni() function frees the skb so we can't dereference it to  \nsave the skb->len. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:11.000000Z"}, {"uuid": "0d4fce8d-f4c3-4009-bac3-8ea44e1b2126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48859", "type": "seen", "source": "https://t.me/cvedetector/965", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48859 - Marvell Prestera Linux Kernel Node Pointer Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48859 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: marvell: prestera: Add missing of_node_put() in prestera_switch_set_base_mac_addr  \n  \nThis node pointer is returned by of_find_compatible_node() with  \nrefcount incremented. Calling of_node_put() to aovid the refcount leak. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:10.000000Z"}, {"uuid": "64c4357c-c5a5-436c-a253-a54edcfc880e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48853", "type": "seen", "source": "https://t.me/cvedetector/964", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48853 - Virtio SCSI swiotlb DMA_INFO LEAK\", \n  \"Content\": \"CVE ID : CVE-2022-48853 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nswiotlb: fix info leak with DMA_FROM_DEVICE  \n  \nThe problem I'm addressing was discovered by the LTP test covering  \ncve-2018-1000204.  \n  \nA short description of what happens follows:  \n1) The test case issues a command code 00 (TEST UNIT READY) via the SG_IO  \n   interface with: dxfer_len == 524288, dxdfer_dir == SG_DXFER_FROM_DEV  \n   and a corresponding dxferp. The peculiar thing about this is that TUR  \n   is not reading from the device.  \n2) In sg_start_req() the invocation of blk_rq_map_user() effectively  \n   bounces the user-space buffer. As if the device was to transfer into  \n   it. Since commit a45b599ad808 (\"scsi: sg: allocate with __GFP_ZERO in  \n   sg_build_indirect()\") we make sure this first bounce buffer is  \n   allocated with GFP_ZERO.  \n3) For the rest of the story we keep ignoring that we have a TUR, so the  \n   device won't touch the buffer we prepare as if the we had a  \n   DMA_FROM_DEVICE type of situation. My setup uses a virtio-scsi device  \n   and the  buffer allocated by SG is mapped by the function  \n   virtqueue_add_split() which uses DMA_FROM_DEVICE for the \"in\" sgs (here  \n   scatter-gather and not scsi generics). This mapping involves bouncing  \n   via the swiotlb (we need swiotlb to do virtio in protected guest like  \n   s390 Secure Execution, or AMD SEV).  \n4) When the SCSI TUR is done, we first copy back the content of the second  \n   (that is swiotlb) bounce buffer (which most likely contains some  \n   previous IO data), to the first bounce buffer, which contains all  \n   zeros.  Then we copy back the content of the first bounce buffer to  \n   the user-space buffer.  \n5) The test case detects that the buffer, which it zero-initialized,  \n  ain't all zeros and fails.  \n  \nOne can argue that this is an swiotlb problem, because without swiotlb  \nwe leak all zeros, and the swiotlb should be transparent in a sense that  \nit does not affect the outcome (if all other participants are well  \nbehaved).  \n  \nCopying the content of the original buffer into the swiotlb buffer is  \nthe only way I can think of to make swiotlb transparent in such  \nscenarios. So let's do just that if in doubt, but allow the driver  \nto tell us that the whole mapped buffer is going to be overwritten,  \nin which case we can preserve the old behavior and avoid the performance  \nimpact of the extra bounce. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:06.000000Z"}, {"uuid": "27417eea-9e0b-423d-994a-3936d9fa47f7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48860", "type": "seen", "source": "https://t.me/cvedetector/963", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48860 - Intel Ethernet Vulnerability - Use After Free\", \n  \"Content\": \"CVE ID : CVE-2022-48860 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nethernet: Fix error handling in xemaclite_of_probe  \n  \nThis node pointer is returned by of_parse_phandle() with refcount  \nincremented in this function. Calling of_node_put() to avoid the  \nrefcount leak. As the remove function do. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:05.000000Z"}, {"uuid": "59877639-002a-4e1e-9bf9-1f0a10f61d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48848", "type": "seen", "source": "https://t.me/cvedetector/962", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48848 - Linux Kernel trace-cmd Tracepoint Unregister Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48848 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntracing/osnoise: Do not unregister events twice  \n  \nNicolas reported that using:  \n  \n # trace-cmd record -e all -M 10 -p osnoise --poll  \n  \nResulted in the following kernel warning:  \n  \n ------------[ cut here ]------------  \n WARNING: CPU: 0 PID: 1217 at kernel/tracepoint.c:404 tracepoint_probe_unregister+0x280/0x370  \n [...]  \n CPU: 0 PID: 1217 Comm: trace-cmd Not tainted 5.17.0-rc6-next-20220307-nico+ #19  \n RIP: 0010:tracepoint_probe_unregister+0x280/0x370  \n [...]  \n CR2: 00007ff919b29497 CR3: 0000000109da4005 CR4: 0000000000170ef0  \n Call Trace:  \n    \n  osnoise_workload_stop+0x36/0x90  \n  tracing_set_tracer+0x108/0x260  \n  tracing_set_trace_write+0x94/0xd0  \n  ? __check_object_size.part.0+0x10a/0x150  \n  ? selinux_file_permission+0x104/0x150  \n  vfs_write+0xb5/0x290  \n  ksys_write+0x5f/0xe0  \n  do_syscall_64+0x3b/0x90  \n  entry_SYSCALL_64_after_hwframe+0x44/0xae  \n RIP: 0033:0x7ff919a18127  \n [...]  \n ---[ end trace 0000000000000000 ]---  \n  \nThe warning complains about an attempt to unregister an  \nunregistered tracepoint.  \n  \nThis happens on trace-cmd because it first stops tracing, and  \nthen switches the tracer to nop. Which is equivalent to:  \n  \n  # cd /sys/kernel/tracing/  \n  # echo osnoise > current_tracer  \n  # echo 0 > tracing_on  \n  # echo nop > current_tracer  \n  \nThe osnoise tracer stops the workload when no trace instance  \nis actually collecting data. This can be caused both by  \ndisabling tracing or disabling the tracer itself.  \n  \nTo avoid unregistering events twice, use the existing  \ntrace_osnoise_callback_enabled variable to check if the events  \n(and the workload) are actually active before trying to  \ndeactivate them. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:04.000000Z"}, {"uuid": "35615872-77f2-4b0b-9c6a-30462f3dadb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48856", "type": "seen", "source": "https://t.me/cvedetector/961", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48856 - Linux kernel Gianfar Driver Resource Leak Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48856 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ngianfar: ethtool: Fix refcount leak in gfar_get_ts_info  \n  \nThe of_find_compatible_node() function returns a node pointer with  \nrefcount incremented, We should use of_node_put() on it when done  \nAdd the missing of_node_put() to release the refcount. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:03.000000Z"}, {"uuid": "4405e67b-cf4f-4c47-b9f7-76acff089695", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48850", "type": "seen", "source": "https://t.me/cvedetector/960", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48850 - Here is the title: IBM Mellanox mlx5-core Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48850 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet-sysfs: add check for netdevice being present to speed_show  \n  \nWhen bringing down the netdevice or system shutdown, a panic can be  \ntriggered while accessing the sysfs path because the device is already  \nremoved.  \n  \n    [  755.549084] mlx5_core 0000:12:00.1: Shutdown was called  \n    [  756.404455] mlx5_core 0000:12:00.0: Shutdown was called  \n    ...  \n    [  757.937260] BUG: unable to handle kernel NULL pointer dereference at           (null)  \n    [  758.031397] IP: [] dma_pool_alloc+0x1ab/0x280  \n  \n    crash> bt  \n    ...  \n    PID: 12649  TASK: ffff8924108f2100  CPU: 1   COMMAND: \"amsd\"  \n    ...  \n     #9 [ffff89240e1a38b0] page_fault at ffffffff8f38c778  \n        [exception RIP: dma_pool_alloc+0x1ab]  \n        RIP: ffffffff8ee11acb  RSP: ffff89240e1a3968  RFLAGS: 00010046  \n        RAX: 0000000000000246  RBX: ffff89243d874100  RCX: 0000000000001000  \n        RDX: 0000000000000000  RSI: 0000000000000246  RDI: ffff89243d874090  \n        RBP: ffff89240e1a39c0   R8: 000000000001f080   R9: ffff8905ffc03c00  \n        R10: ffffffffc04680d4  R11: ffffffff8edde9fd  R12: 00000000000080d0  \n        R13: ffff89243d874090  R14: ffff89243d874080  R15: 0000000000000000  \n        ORIG_RAX: ffffffffffffffff  CS: 0010  SS: 0018  \n    #10 [ffff89240e1a39c8] mlx5_alloc_cmd_msg at ffffffffc04680f3 [mlx5_core]  \n    #11 [ffff89240e1a3a18] cmd_exec at ffffffffc046ad62 [mlx5_core]  \n    #12 [ffff89240e1a3ab8] mlx5_cmd_exec at ffffffffc046b4fb [mlx5_core]  \n    #13 [ffff89240e1a3ae8] mlx5_core_access_reg at ffffffffc0475434 [mlx5_core]  \n    #14 [ffff89240e1a3b40] mlx5e_get_fec_caps at ffffffffc04a7348 [mlx5_core]  \n    #15 [ffff89240e1a3bb0] get_fec_supported_advertised at ffffffffc04992bf [mlx5_core]  \n    #16 [ffff89240e1a3c08] mlx5e_get_link_ksettings at ffffffffc049ab36 [mlx5_core]  \n    #17 [ffff89240e1a3ce8] __ethtool_get_link_ksettings at ffffffff8f25db46  \n    #18 [ffff89240e1a3d48] speed_show at ffffffff8f277208  \n    #19 [ffff89240e1a3dd8] dev_attr_show at ffffffff8f0b70e3  \n    #20 [ffff89240e1a3df8] sysfs_kf_seq_show at ffffffff8eedbedf  \n    #21 [ffff89240e1a3e18] kernfs_seq_show at ffffffff8eeda596  \n    #22 [ffff89240e1a3e28] seq_read at ffffffff8ee76d10  \n    #23 [ffff89240e1a3e98] kernfs_fop_read at ffffffff8eedaef5  \n    #24 [ffff89240e1a3ed8] vfs_read at ffffffff8ee4e3ff  \n    #25 [ffff89240e1a3f08] sys_read at ffffffff8ee4f27f  \n    #26 [ffff89240e1a3f50] system_call_fastpath at ffffffff8f395f92  \n  \n    crash> net_device.state ffff89443b0c0000  \n      state = 0x5  (__LINK_STATE_START| __LINK_STATE_NOCARRIER)  \n  \nTo prevent this scenario, we also make sure that the netdevice is present. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:17:02.000000Z"}, {"uuid": "bb97ddd3-e3c3-4ba8-b751-730b8416f3d6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48854", "type": "seen", "source": "https://t.me/cvedetector/959", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48854 - Apache Linux Kernel Use After Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48854 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: arc_emac: Fix use after free in arc_mdio_probe()  \n  \nIf bus->state is equal to MDIOBUS_ALLOCATED, mdiobus_free(bus) will free  \nthe \"bus\". But bus->name is still used in the next line, which will lead  \nto a use after free.  \n  \nWe can fix it by putting the name in a local variable and make the  \nbus->name point to the rodata section \"name\",then use the name in the  \nerror message without referring to bus to avoid the uaf. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:59.000000Z"}, {"uuid": "93a0c7bf-f372-4f98-abce-7a29a1f0e06e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48852", "type": "seen", "source": "https://t.me/cvedetector/958", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48852 - AMD drm Binder Issue\", \n  \"Content\": \"CVE ID : CVE-2022-48852 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/vc4: hdmi: Unregister codec device on unbind  \n  \nOn bind we will register the HDMI codec device but we don't unregister  \nit on unbind, leading to a device leakage. Unregister our device at  \nunbind. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:58.000000Z"}, {"uuid": "f01abc36-d9fb-4c89-ad1f-145d795f0bfe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48857", "type": "seen", "source": "https://t.me/cvedetector/957", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48857 - Linux NFC: port100 Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48857 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nNFC: port100: fix use-after-free in port100_send_complete  \n  \nSyzbot reported UAF in port100_send_complete(). The root case is in  \nmissing usb_kill_urb() calls on error handling path of ->probe function.  \n  \nport100_send_complete() accesses devm allocated memory which will be  \nfreed on probe failure. We should kill this urbs before returning an  \nerror from probe function to prevent reported use-after-free  \n  \nFail log:  \n  \nBUG: KASAN: use-after-free in port100_send_complete+0x16e/0x1a0 drivers/nfc/port100.c:935  \nRead of size 1 at addr ffff88801bb59540 by task ksoftirqd/2/26  \n...  \nCall Trace:  \n   \n __dump_stack lib/dump_stack.c:88 [inline]  \n dump_stack_lvl+0xcd/0x134 lib/dump_stack.c:106  \n print_address_description.constprop.0.cold+0x8d/0x303 mm/kasan/report.c:255  \n __kasan_report mm/kasan/report.c:442 [inline]  \n kasan_report.cold+0x83/0xdf mm/kasan/report.c:459  \n port100_send_complete+0x16e/0x1a0 drivers/nfc/port100.c:935  \n __usb_hcd_giveback_urb+0x2b0/0x5c0 drivers/usb/core/hcd.c:1670  \n  \n...  \n  \nAllocated by task 1255:  \n kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38  \n kasan_set_track mm/kasan/common.c:45 [inline]  \n set_alloc_info mm/kasan/common.c:436 [inline]  \n ____kasan_kmalloc mm/kasan/common.c:515 [inline]  \n ____kasan_kmalloc mm/kasan/common.c:474 [inline]  \n __kasan_kmalloc+0xa6/0xd0 mm/kasan/common.c:524  \n alloc_dr drivers/base/devres.c:116 [inline]  \n devm_kmalloc+0x96/0x1d0 drivers/base/devres.c:823  \n devm_kzalloc include/linux/device.h:209 [inline]  \n port100_probe+0x8a/0x1320 drivers/nfc/port100.c:1502  \n  \nFreed by task 1255:  \n kasan_save_stack+0x1e/0x40 mm/kasan/common.c:38  \n kasan_set_track+0x21/0x30 mm/kasan/common.c:45  \n kasan_set_free_info+0x20/0x30 mm/kasan/generic.c:370  \n ____kasan_slab_free mm/kasan/common.c:366 [inline]  \n ____kasan_slab_free+0xff/0x140 mm/kasan/common.c:328  \n kasan_slab_free include/linux/kasan.h:236 [inline]  \n __cache_free mm/slab.c:3437 [inline]  \n kfree+0xf8/0x2b0 mm/slab.c:3794  \n release_nodes+0x112/0x1a0 drivers/base/devres.c:501  \n devres_release_all+0x114/0x190 drivers/base/devres.c:530  \n really_probe+0x626/0xcc0 drivers/base/dd.c:670 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:57.000000Z"}, {"uuid": "24fb29a4-4891-4e98-8436-1d33b2ef0bbe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48861", "type": "seen", "source": "https://t.me/cvedetector/955", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48861 - \"Linux Kernel vdpa Use-After-Free Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48861 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvdpa: fix use-after-free on vp_vdpa_remove  \n  \nWhen vp_vdpa driver is unbind, vp_vdpa is freed in vdpa_unregister_device  \nand then vp_vdpa->mdev.pci_dev is dereferenced in vp_modern_remove,  \ntriggering use-after-free.  \n  \nCall Trace of unbinding driver free vp_vdpa :  \ndo_syscall_64  \n  vfs_write  \n    kernfs_fop_write_iter  \n      device_release_driver_internal  \n        pci_device_remove  \n          vp_vdpa_remove  \n            vdpa_unregister_device  \n              kobject_release  \n                device_release  \n                  kfree  \n  \nCall Trace of dereference vp_vdpa->mdev.pci_dev:  \nvp_modern_remove  \n  pci_release_selected_regions  \n    pci_release_region  \n      pci_resource_len  \n        pci_resource_end  \n          (dev)->resource[(bar)].end \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:55.000000Z"}, {"uuid": "e55dcdf3-bb1e-4777-8865-e8963494396f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48863", "type": "seen", "source": "https://t.me/cvedetector/954", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48863 - \"mISDN Kernel Memory Leak\"\", \n  \"Content\": \"CVE ID : CVE-2022-48863 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmISDN: Fix memory leak in dsp_pipeline_build()  \n  \ndsp_pipeline_build() allocates dup pointer by kstrdup(cfg),  \nbut then it updates dup variable by strsep(&dup, \"|\").  \nAs a result when it calls kfree(dup), the dup variable contains NULL.  \n  \nFound by Linux Driver Verification project (linuxtesting.org) with SVACE. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:51.000000Z"}, {"uuid": "eb2e7d56-114f-4e02-abc2-c8f04801a6e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48865", "type": "seen", "source": "https://t.me/cvedetector/953", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48865 - Linux Kernel TIPC Null Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48865 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntipc: fix kernel panic when enabling bearer  \n  \nWhen enabling a bearer on a node, a kernel panic is observed:  \n  \n[    4.498085] RIP: 0010:tipc_mon_prep+0x4e/0x130 [tipc]  \n...  \n[    4.520030] Call Trace:  \n[    4.520689]    \n[    4.521236]  tipc_link_build_proto_msg+0x375/0x750 [tipc]  \n[    4.522654]  tipc_link_build_state_msg+0x48/0xc0 [tipc]  \n[    4.524034]  __tipc_node_link_up+0xd7/0x290 [tipc]  \n[    4.525292]  tipc_rcv+0x5da/0x730 [tipc]  \n[    4.526346]  ? __netif_receive_skb_core+0xb7/0xfc0  \n[    4.527601]  tipc_l2_rcv_msg+0x5e/0x90 [tipc]  \n[    4.528737]  __netif_receive_skb_list_core+0x20b/0x260  \n[    4.530068]  netif_receive_skb_list_internal+0x1bf/0x2e0  \n[    4.531450]  ? dev_gro_receive+0x4c2/0x680  \n[    4.532512]  napi_complete_done+0x6f/0x180  \n[    4.533570]  virtnet_poll+0x29c/0x42e [virtio_net]  \n...  \n  \nThe node in question is receiving activate messages in another  \nthread after changing bearer status to allow message sending/  \nreceiving in current thread:  \n  \n         thread 1           |              thread 2  \n         --------           |              --------  \n                            |  \ntipc_enable_bearer()        |  \n  test_and_set_bit_lock()   |  \n    tipc_bearer_xmit_skb()  |  \n                            | tipc_l2_rcv_msg()  \n                            |   tipc_rcv()  \n                            |     __tipc_node_link_up()  \n                            |       tipc_link_build_state_msg()  \n                            |         tipc_link_build_proto_msg()  \n                            |           tipc_mon_prep()  \n                            |           {  \n                            |             ...  \n                            |             // null-pointer dereference  \n                            |             u16 gen = mon->dom_gen;  \n                            |             ...  \n                            |           }  \n  // Not being executed yet |  \n  tipc_mon_create()         |  \n  {                         |  \n    ...                     |  \n    // allocate             |  \n    mon = kzalloc();        |  \n    ...                     |  \n  }                         |  \n  \nMonitoring pointer in thread 2 is dereferenced before monitoring data  \nis allocated in thread 1. This causes kernel panic.  \n  \nThis commit fixes it by allocating the monitoring data before enabling  \nthe bearer to receive messages. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:50.000000Z"}, {"uuid": "972693b5-6b6e-4690-bb0b-44913c69053c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48866", "type": "seen", "source": "https://t.me/cvedetector/951", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48866 - Thrustmaster HID Linux Kernel Slab-Out-Of-Bounds Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48866 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nHID: hid-thrustmaster: fix OOB read in thrustmaster_interrupts  \n  \nSyzbot reported an slab-out-of-bounds Read in thrustmaster_probe() bug.  \nThe root case is in missing validation check of actual number of endpoints.  \n  \nCode should not blindly access usb_host_interface::endpoint array, since  \nit may contain less endpoints than code expects.  \n  \nFix it by adding missing validaion check and print an error if  \nnumber of endpoints do not match expected number \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:48.000000Z"}, {"uuid": "06eb53b8-775e-4211-8244-3f279469545f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48864", "type": "seen", "source": "https://t.me/cvedetector/950", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48864 - \"Melanox VDPA Linux Kernel Unvalidated Queue Pair Configuration Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48864 \nPublished : July 16, 2024, 1:15 p.m. | 37\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nvdpa/mlx5: add validation for VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command  \n  \nWhen control vq receives a VIRTIO_NET_CTRL_MQ_VQ_PAIRS_SET command  \nrequest from the driver, presently there is no validation against the  \nnumber of queue pairs to configure, or even if multiqueue had been  \nnegotiated or not is unverified. This may lead to kernel panic due to  \nuninitialized resource for the queues were there any bogus request  \nsent down by untrusted driver. Tie up the loose ends there. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T16:16:47.000000Z"}, {"uuid": "ad051a66-3a3b-4be9-9117-7e9f7eef85af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48817", "type": "seen", "source": "https://t.me/cvedetector/949", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48817 - \"Cisco DSA MDIO Bus Registration Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48817 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: dsa: ar9331: register the mdiobus under devres  \n  \nAs explained in commits:  \n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")  \n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")  \n  \nmdiobus_free() will panic when called from devm_mdiobus_free() remove on  \n->shutdown) do not apply. But there is one more which applies here.  \n  \nIf the DSA master itself is on a bus that calls ->remove from ->shutdown  \n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link  \nbetween the switch and the DSA master, and device_links_unbind_consumers()  \nwill unbind the ar9331 switch driver on shutdown.  \n  \nSo the same treatment must be applied to all DSA switch drivers, which  \nis: either use devres for both the mdiobus allocation and registration,  \nor don't use devres at all.  \n  \nThe ar9331 driver doesn't have a complex code structure for mdiobus  \nremoval, so just replace of_mdiobus_register with the devres variant in  \norder to be all-devres and ensure that we don't free a still-registered  \nbus. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:38.000000Z"}, {"uuid": "66b5c6e9-ea9a-42f9-bc1d-c362d265f961", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48814", "type": "seen", "source": "https://t.me/cvedetector/948", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48814 - Vulnerability Title: Linux Kernel NetDevice DSA Seville MDIobus Devres Race Condition\", \n  \"Content\": \"CVE ID : CVE-2022-48814 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: dsa: seville: register the mdiobus under devres  \n  \nAs explained in commits:  \n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")  \n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")  \n  \nmdiobus_free() will panic when called from devm_mdiobus_free() remove on ->shutdown) do not apply. But there is one more which  \napplies here.  \n  \nIf the DSA master itself is on a bus that calls ->remove from ->shutdown  \n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link  \nbetween the switch and the DSA master, and device_links_unbind_consumers()  \nwill unbind the seville switch driver on shutdown.  \n  \nSo the same treatment must be applied to all DSA switch drivers, which  \nis: either use devres for both the mdiobus allocation and registration,  \nor don't use devres at all.  \n  \nThe seville driver has a code structure that could accommodate both the  \nmdiobus_unregister and mdiobus_free calls, but it has an external  \ndependency upon mscc_miim_setup() from mdio-mscc-miim.c, which calls  \ndevm_mdiobus_alloc_size() on its behalf. So rather than restructuring  \nthat, and exporting yet one more symbol mscc_miim_teardown(), let's work  \nwith devres and replace of_mdiobus_register with the devres variant.  \nWhen we use all-devres, we can ensure that devres doesn't free a  \nstill-registered bus (it either runs both callbacks, or none). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:37.000000Z"}, {"uuid": "b4332cdf-15ed-4b89-a379-206fb35a880f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48818", "type": "seen", "source": "https://t.me/cvedetector/947", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48818 - Marvell mv88e6xxx MDIO Bus Device Free of Charge Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48818 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: dsa: mv88e6xxx: don't use devres for mdiobus  \n  \nAs explained in commits:  \n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")  \n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")  \n  \nmdiobus_free() will panic when called from devm_mdiobus_free() remove on  \n->shutdown) do not apply. But there is one more which applies here.  \n  \nIf the DSA master itself is on a bus that calls ->remove from ->shutdown  \n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link  \nbetween the switch and the DSA master, and device_links_unbind_consumers()  \nwill unbind the Marvell switch driver on shutdown.  \n  \nsystemd-shutdown[1]: Powering off.  \nmv88e6085 0x0000000008b96000:00 sw_gl0: Link is Down  \nfsl-mc dpbp.9: Removing from iommu group 7  \nfsl-mc dpbp.8: Removing from iommu group 7  \n------------[ cut here ]------------  \nkernel BUG at drivers/net/phy/mdio_bus.c:677!  \nInternal error: Oops - BUG: 0 [#1] PREEMPT SMP  \nModules linked in:  \nCPU: 0 PID: 1 Comm: systemd-shutdow Not tainted 5.16.5-00040-gdc05f73788e5 #15  \npc : mdiobus_free+0x44/0x50  \nlr : devm_mdiobus_free+0x10/0x20  \nCall trace:  \n mdiobus_free+0x44/0x50  \n devm_mdiobus_free+0x10/0x20  \n devres_release_all+0xa0/0x100  \n __device_release_driver+0x190/0x220  \n device_release_driver_internal+0xac/0xb0  \n device_links_unbind_consumers+0xd4/0x100  \n __device_release_driver+0x4c/0x220  \n device_release_driver_internal+0xac/0xb0  \n device_links_unbind_consumers+0xd4/0x100  \n __device_release_driver+0x94/0x220  \n device_release_driver+0x28/0x40  \n bus_remove_device+0x118/0x124  \n device_del+0x174/0x420  \n fsl_mc_device_remove+0x24/0x40  \n __fsl_mc_device_remove+0xc/0x20  \n device_for_each_child+0x58/0xa0  \n dprc_remove+0x90/0xb0  \n fsl_mc_driver_remove+0x20/0x5c  \n __device_release_driver+0x21c/0x220  \n device_release_driver+0x28/0x40  \n bus_remove_device+0x118/0x124  \n device_del+0x174/0x420  \n fsl_mc_bus_remove+0x80/0x100  \n fsl_mc_bus_shutdown+0xc/0x1c  \n platform_shutdown+0x20/0x30  \n device_shutdown+0x154/0x330  \n kernel_power_off+0x34/0x6c  \n __do_sys_reboot+0x15c/0x250  \n __arm64_sys_reboot+0x20/0x30  \n invoke_syscall.constprop.0+0x4c/0xe0  \n do_el0_svc+0x4c/0x150  \n el0_svc+0x24/0xb0  \n el0t_64_sync_handler+0xa8/0xb0  \n el0t_64_sync+0x178/0x17c  \n  \nSo the same treatment must be applied to all DSA switch drivers, which  \nis: either use devres for both the mdiobus allocation and registration,  \nor don't use devres at all.  \n  \nThe Marvell driver already has a good structure for mdiobus removal, so  \njust plug in mdiobus_free and get rid of devres. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:36.000000Z"}, {"uuid": "4d586c60-29a2-4f70-ad43-14e5a0c6cd35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48809", "type": "seen", "source": "https://t.me/cvedetector/946", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48809 - Linux Net SKB Destination Metadata Leak\", \n  \"Content\": \"CVE ID : CVE-2022-48809 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: fix a memleak when uncloning an skb dst and its metadata  \n  \nWhen uncloning an skb dst and its associated metadata, a new  \ndst+metadata is allocated and later replaces the old one in the skb.  \nThis is helpful to have a non-shared dst+metadata attached to a specific  \nskb.  \n  \nThe issue is the uncloned dst+metadata is initialized with a refcount of  \n1, which is increased to 2 before attaching it to the skb. When  \ntun_dst_unclone returns, the dst+metadata is only referenced from a  \nsingle place (the skb) while its refcount is 2. Its refcount will never  \ndrop to 0 (when the skb is consumed), leading to a memory leak.  \n  \nFix this by removing the call to dst_hold in tun_dst_unclone, as the  \ndst+metadata refcount is already 1. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:35.000000Z"}, {"uuid": "e609a5bf-d426-4f4d-bed1-a29c1ee97995", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48819", "type": "seen", "source": "https://t.me/cvedetector/945", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48819 - \"The Linux Kernel TCP MSG_ZEROCOPY Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48819 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ntcp: take care of mixed splice()/sendmsg(MSG_ZEROCOPY) case  \n  \nsyzbot found that mixing sendpage() and sendmsg(MSG_ZEROCOPY)  \ncalls over the same TCP socket would again trigger the  \ninfamous warning in inet_sock_destruct()  \n  \n WARN_ON(sk_forward_alloc_get(sk));  \n  \nWhile Talal took into account a mix of regular copied data  \nand MSG_ZEROCOPY one in the same skb, the sendpage() path  \nhas been forgotten.  \n  \nWe want the charging to happen for sendpage(), because  \npages could be coming from a pipe. What is missing is the  \ndowngrading of pure zerocopy status to make sure  \nsk_forward_alloc will stay synced.  \n  \nAdd tcp_downgrade_zcopy_pure() helper so that we can  \nuse it from the two callers. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:34.000000Z"}, {"uuid": "bccda528-c730-496c-a425-15b3b425bb2e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48813", "type": "seen", "source": "https://t.me/cvedetector/944", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48813 - \"AMD Felix PCI Device MDIO Bus Registration Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2022-48813 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: dsa: felix: don't use devres for mdiobus  \n  \nAs explained in commits:  \n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")  \n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")  \n  \nmdiobus_free() will panic when called from devm_mdiobus_free() remove on ->shutdown) do not apply. But there is one more which  \napplies here.  \n  \nIf the DSA master itself is on a bus that calls ->remove from ->shutdown  \n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link  \nbetween the switch and the DSA master, and device_links_unbind_consumers()  \nwill unbind the felix switch driver on shutdown.  \n  \nSo the same treatment must be applied to all DSA switch drivers, which  \nis: either use devres for both the mdiobus allocation and registration,  \nor don't use devres at all.  \n  \nThe felix driver has the code structure in place for orderly mdiobus  \nremoval, so just replace devm_mdiobus_alloc_size() with the non-devres  \nvariant, and add manual free where necessary, to ensure that we don't  \nlet devres free a still-registered bus. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:30.000000Z"}, {"uuid": "0d50cdd4-2ec0-4f0c-b071-48d0c0086c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48815", "type": "seen", "source": "https://t.me/cvedetector/943", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48815 - Linux Kernel bcm_sf2 MDIobus Vulnerability (Buffer Pointer Corruption)\", \n  \"Content\": \"CVE ID : CVE-2022-48815 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nnet: dsa: bcm_sf2: don't use devres for mdiobus  \n  \nAs explained in commits:  \n74b6d7d13307 (\"net: dsa: realtek: register the MDIO bus under devres\")  \n5135e96a3dd2 (\"net: dsa: don't allocate the slave_mii_bus using devres\")  \n  \nmdiobus_free() will panic when called from devm_mdiobus_free() remove on ->shutdown) do not apply. But there is one more which  \napplies here.  \n  \nIf the DSA master itself is on a bus that calls ->remove from ->shutdown  \n(like dpaa2-eth, which is on the fsl-mc bus), there is a device link  \nbetween the switch and the DSA master, and device_links_unbind_consumers()  \nwill unbind the bcm_sf2 switch driver on shutdown.  \n  \nSo the same treatment must be applied to all DSA switch drivers, which  \nis: either use devres for both the mdiobus allocation and registration,  \nor don't use devres at all.  \n  \nThe bcm_sf2 driver has the code structure in place for orderly mdiobus  \nremoval, so just replace devm_mdiobus_alloc() with the non-devres  \nvariant, and add manual free where necessary, to ensure that we don't  \nlet devres free a still-registered bus. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:29.000000Z"}, {"uuid": "2ffefab5-35f8-4ff0-bbdc-cf45e3c6d667", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48811", "type": "seen", "source": "https://t.me/cvedetector/942", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48811 - IBM Nic NULL Pointer Dereference\", \n  \"Content\": \"CVE ID : CVE-2022-48811 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nibmvnic: don't release napi in __ibmvnic_open()  \n  \nIf __ibmvnic_open() encounters an error such as when setting link state,  \nit calls release_resources() which frees the napi structures needlessly.  \nInstead, have __ibmvnic_open() only clean up the work it did so far (i.e.  \ndisable napi and irqs) and leave the rest to the callers.  \n  \nIf caller of __ibmvnic_open() is ibmvnic_open(), it should release the  \nresources immediately. If the caller is do_reset() or do_hard_reset(),  \nthey will release the resources on the next reset.  \n  \nThis fixes following crash that occurred when running the drmgr command  \nseveral times to add/remove a vnic interface:  \n  \n [102056] ibmvnic 30000003 env3: Disabling rx_scrq[6] irq  \n [102056] ibmvnic 30000003 env3: Disabling rx_scrq[7] irq  \n [102056] ibmvnic 30000003 env3: Replenished 8 pools  \n Kernel attempted to read user page (10) - exploit attempt? (uid: 0)  \n BUG: Kernel NULL pointer dereference on read at 0x00000010  \n Faulting instruction address: 0xc000000000a3c840  \n Oops: Kernel access of bad area, sig: 11 [#1]  \n LE PAGE_SIZE=64K MMU=Radix SMP NR_CPUS=2048 NUMA pSeries  \n ...  \n CPU: 9 PID: 102056 Comm: kworker/9:2 Kdump: loaded Not tainted 5.16.0-rc5-autotest-g6441998e2e37 #1  \n Workqueue: events_long __ibmvnic_reset [ibmvnic]  \n NIP:  c000000000a3c840 LR: c0080000029b5378 CTR: c000000000a3c820  \n REGS: c0000000548e37e0 TRAP: 0300   Not tainted  (5.16.0-rc5-autotest-g6441998e2e37)  \n MSR:  8000000000009033   CR: 28248484  XER: 00000004  \n CFAR: c0080000029bdd24 DAR: 0000000000000010 DSISR: 40000000 IRQMASK: 0  \n GPR00: c0080000029b55d0 c0000000548e3a80 c0000000028f0200 0000000000000000  \n ...  \n NIP [c000000000a3c840] napi_enable+0x20/0xc0  \n LR [c0080000029b5378] __ibmvnic_open+0xf0/0x430 [ibmvnic]  \n Call Trace:  \n [c0000000548e3a80] [0000000000000006] 0x6 (unreliable)  \n [c0000000548e3ab0] [c0080000029b55d0] __ibmvnic_open+0x348/0x430 [ibmvnic]  \n [c0000000548e3b40] [c0080000029bcc28] __ibmvnic_reset+0x500/0xdf0 [ibmvnic]  \n [c0000000548e3c60] [c000000000176228] process_one_work+0x288/0x570  \n [c0000000548e3d00] [c000000000176588] worker_thread+0x78/0x660  \n [c0000000548e3da0] [c0000000001822f0] kthread+0x1c0/0x1d0  \n [c0000000548e3e10] [c00000000000cf64] ret_from_kernel_thread+0x5c/0x64  \n Instruction dump:  \n 7d2948f8 792307e0 4e800020 60000000 3c4c01eb 384239e0 f821ffd1 39430010  \n 38a0fff6 e92d1100 f9210028 39200000  f9010020 60420000 e9210020  \n ---[ end trace 5f8033b08fd27706 ]--- \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:28.000000Z"}, {"uuid": "88a252f8-feaf-4295-b8ea-5ed0d73ee76d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48832", "type": "seen", "source": "https://t.me/cvedetector/941", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48832 - Linux Kernel Audit Openat2 Uninitialized Pointer Dereference Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48832 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \naudit: don't deref the syscall args when checking the openat2 open_how::flags  \n  \nAs reported by Jeff, dereferencing the openat2 syscall argument in  \naudit_match_perm() to obtain the open_how::flags can result in an  \noops/page-fault.  This patch fixes this by using the open_how struct  \nthat we store in the audit_context with audit_openat2_how().  \n  \nIndependent of this patch, Richard Guy Briggs posted a similar patch  \nto the audit mailing list roughly 40 minutes after this patch was  \nposted. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:27.000000Z"}, {"uuid": "d20e12bc-c1a4-497c-859b-c2df006dda19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48821", "type": "seen", "source": "https://t.me/cvedetector/940", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48821 - Linux Kernel - Use-After-Free in fastrpc\", \n  \"Content\": \"CVE ID : CVE-2022-48821 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nmisc: fastrpc: avoid double fput() on failed usercopy  \n  \nIf the copy back to userland fails for the FASTRPC_IOCTL_ALLOC_DMA_BUFF  \nioctl(), we shouldn't assume that 'buf->dmabuf' is still valid. In fact,  \ndma_buf_fd() called fd_install() before, i.e. \"consumed\" one reference,  \nleaving us with none.  \n  \nCalling dma_buf_put() will therefore put a reference we no longer own,  \nleading to a valid file descritor table entry for an already released  \n'file' object which is a straight use-after-free.  \n  \nSimply avoid calling dma_buf_put() and rely on the process exit code to  \ndo the necessary cleanup, if needed, i.e. if the file descriptor is  \nstill valid. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:26.000000Z"}, {"uuid": "a5c4971a-9895-4ebe-bebf-21696a4da83c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48823", "type": "seen", "source": "https://t.me/cvedetector/939", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48823 - QEDF Linux SCSI Driver Refcount Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48823 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nscsi: qedf: Fix refcount issue when LOGO is received during TMF  \n  \nHung task call trace was seen during LOGO processing.  \n  \n[  974.309060] [0000:00:00.0]:[qedf_eh_device_reset:868]: 1:0:2:0: LUN RESET Issued...  \n[  974.309065] [0000:00:00.0]:[qedf_initiate_tmf:2422]: tm_flags 0x10 sc_cmd 00000000c16b930f op = 0x2a target_id = 0x2 lun=0  \n[  974.309178] [0000:00:00.0]:[qedf_initiate_tmf:2431]: portid=016900 tm_flags =LUN RESET  \n[  974.309222] [0000:00:00.0]:[qedf_initiate_tmf:2438]: orig io_req = 00000000ec78df8f xid = 0x180 ref_cnt = 1.  \n[  974.309625] host1: rport 016900: Received LOGO request while in state Ready  \n[  974.309627] host1: rport 016900: Delete port  \n[  974.309642] host1: rport 016900: work event 3  \n[  974.309644] host1: rport 016900: lld callback ev 3  \n[  974.313243] [0000:61:00.2]:[qedf_execute_tmf:2383]:1: fcport is uploading, not executing flush.  \n[  974.313295] [0000:61:00.2]:[qedf_execute_tmf:2400]:1: task mgmt command success...  \n[  984.031088] INFO: task jbd2/dm-15-8:7645 blocked for more than 120 seconds.  \n[  984.031136]       Not tainted 4.18.0-305.el8.x86_64 #1  \n  \n[  984.031166] \"echo 0 > /proc/sys/kernel/hung_task_timeout_secs\" disables this message.  \n[  984.031209] jbd2/dm-15-8    D    0  7645      2 0x80004080  \n[  984.031212] Call Trace:  \n[  984.031222]  __schedule+0x2c4/0x700  \n[  984.031230]  ? unfreeze_partials.isra.83+0x16e/0x1a0  \n[  984.031233]  ? bit_wait_timeout+0x90/0x90  \n[  984.031235]  schedule+0x38/0xa0  \n[  984.031238]  io_schedule+0x12/0x40  \n[  984.031240]  bit_wait_io+0xd/0x50  \n[  984.031243]  __wait_on_bit+0x6c/0x80  \n[  984.031248]  ? free_buffer_head+0x21/0x50  \n[  984.031251]  out_of_line_wait_on_bit+0x91/0xb0  \n[  984.031257]  ? init_wait_var_entry+0x50/0x50  \n[  984.031268]  jbd2_journal_commit_transaction+0x112e/0x19f0 [jbd2]  \n[  984.031280]  kjournald2+0xbd/0x270 [jbd2]  \n[  984.031284]  ? finish_wait+0x80/0x80  \n[  984.031291]  ? commit_timeout+0x10/0x10 [jbd2]  \n[  984.031294]  kthread+0x116/0x130  \n[  984.031300]  ? kthread_flush_work_fn+0x10/0x10  \n[  984.031305]  ret_from_fork+0x1f/0x40  \n  \nThere was a ref count issue when LOGO is received during TMF. This leads to  \none of the I/Os hanging with the driver. Fix the ref count. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:22.000000Z"}, {"uuid": "541366a9-625b-42bb-bb1b-b82e1cfa7680", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48828", "type": "seen", "source": "https://t.me/cvedetector/938", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48828 - \"Linux NFSd Signed Integer Underflow\"\", \n  \"Content\": \"CVE ID : CVE-2022-48828 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nNFSD: Fix ia_size underflow  \n  \niattr::ia_size is a loff_t, which is a signed 64-bit type. NFSv3 and  \nNFSv4 both define file size as an unsigned 64-bit type. Thus there  \nis a range of valid file size values an NFS client can send that is  \nalready larger than Linux can handle.  \n  \nCurrently decode_fattr4() dumps a full u64 value into ia_size. If  \nthat value happens to be larger than S64_MAX, then ia_size  \nunderflows. I'm about to fix up the NFSv3 behavior as well, so let's  \ncatch the underflow in the common code path: nfsd_setattr(). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:22.000000Z"}, {"uuid": "85d89362-273e-4e13-a623-1df6a5f85d97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48825", "type": "seen", "source": "https://t.me/cvedetector/937", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48825 - Dell PowerEdge MX740c QEDF Linux Kernel Use After Free\", \n  \"Content\": \"CVE ID : CVE-2022-48825 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nscsi: qedf: Add stag_work to all the vports  \n  \nCall trace seen when creating NPIV ports, only 32 out of 64 show online.  \nstag work was not initialized for vport, hence initialize the stag work.  \n  \nWARNING: CPU: 8 PID: 645 at kernel/workqueue.c:1635 __queue_delayed_work+0x68/0x80  \nCPU: 8 PID: 645 Comm: kworker/8:1 Kdump: loaded Tainted: G IOE    --------- --  \n 4.18.0-348.el8.x86_64 #1  \nHardware name: Dell Inc. PowerEdge MX740c/0177V9, BIOS 2.12.2 07/09/2021  \nWorkqueue: events fc_lport_timeout [libfc]  \nRIP: 0010:__queue_delayed_work+0x68/0x80  \nCode: 89 b2 88 00 00 00 44 89 82 90 00 00 00 48 01 c8 48 89 42 50 41 81  \nf8 00 20 00 00 75 1d e9 60 24 07 00 44 89 c7 e9 98 f6 ff ff  0b eb  \nc5 0f 0b eb a1 0f 0b eb a7 0f 0b eb ac 44 89 c6 e9 40 23  \nRSP: 0018:ffffae514bc3be40 EFLAGS: 00010006  \nRAX: ffff8d25d6143750 RBX: 0000000000000202 RCX: 0000000000000002  \nRDX: ffff8d2e31383748 RSI: ffff8d25c000d600 RDI: ffff8d2e31383788  \nRBP: ffff8d2e31380de0 R08: 0000000000002000 R09: ffff8d2e31383750  \nR10: ffffffffc0c957e0 R11: ffff8d2624800000 R12: ffff8d2e31380a58  \nR13: ffff8d2d915eb000 R14: ffff8d25c499b5c0 R15: ffff8d2e31380e18  \nFS:  0000000000000000(0000) GS:ffff8d2d1fb00000(0000) knlGS:0000000000000000  \nCS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033  \nCR2: 000055fd0484b8b8 CR3: 00000008ffc10006 CR4: 00000000007706e0  \nDR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000  \nDR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400  \nPKRU: 55555554  \nCall Trace:  \n  queue_delayed_work_on+0x36/0x40  \n  qedf_elsct_send+0x57/0x60 [qedf]  \n  fc_lport_enter_flogi+0x90/0xc0 [libfc]  \n  fc_lport_timeout+0xb7/0x140 [libfc]  \n  process_one_work+0x1a7/0x360  \n  ? create_worker+0x1a0/0x1a0  \n  worker_thread+0x30/0x390  \n  ? create_worker+0x1a0/0x1a0  \n  kthread+0x116/0x130  \n  ? kthread_flush_work_fn+0x10/0x10  \n  ret_from_fork+0x35/0x40  \n ---[ end trace 008f00f722f2c2ff ]--  \n  \nInitialize stag work for all the vports. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:21.000000Z"}, {"uuid": "32ffb80b-091d-4ce6-a0ad-068d3cf6fbb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48829", "type": "seen", "source": "https://t.me/cvedetector/936", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48829 - NFS on Linux Kernel Large File Size Handling Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2022-48829 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nNFSD: Fix NFSv3 SETATTR/CREATE's handling of large file sizes  \n  \niattr::ia_size is a loff_t, so these NFSv3 procedures must be  \ncareful to deal with incoming client size values that are larger  \nthan s64_max without corrupting the value.  \n  \nSilently capping the value results in storing a different value  \nthan the client passed in which is unexpected behavior, so remove  \nthe min_t() check in decode_sattr3().  \n  \nNote that RFC 1813 permits only the WRITE procedure to return  \nNFS3ERR_FBIG. We believe that NFSv3 reference implementations  \nalso return NFS3ERR_FBIG when ia_size is too large. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:20.000000Z"}, {"uuid": "001adbd4-09de-4f82-b5b5-c828479bbb5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48827", "type": "seen", "source": "https://t.me/cvedetector/935", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48827 - NFS Linux Kernel Long Offset Read Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48827 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nNFSD: Fix the behavior of READ near OFFSET_MAX  \n  \nDan Aloni reports:  \n> Due to commit 8cfb9015280d (\"NFS: Always provide aligned buffers to  \n> the RPC read layers\") on the client, a read of 0xfff is aligned up  \n> to server rsize of 0x1000.  \n>  \n> As a result, in a test where the server has a file of size  \n> 0x7fffffffffffffff, and the client tries to read from the offset  \n> 0x7ffffffffffff000, the read causes loff_t overflow in the server  \n> and it returns an NFS code of EINVAL to the client. The client as  \n> a result indefinitely retries the request.  \n  \nThe Linux NFS client does not handle NFS?ERR_INVAL, even though all  \nNFS specifications permit servers to return that status code for a  \nREAD.  \n  \nInstead of NFS?ERR_INVAL, have out-of-range READ requests succeed  \nand return a short result. Set the EOF flag in the result to prevent  \nthe client from retrying the READ request. This behavior appears to  \nbe consistent with Solaris NFS servers.  \n  \nNote that NFSv3 and NFSv4 use u64 offset values on the wire. These  \nmust be converted to loff_t internally before use -- an implicit  \ntype cast is not adequate for this purpose. Otherwise VFS checks  \nagainst sb->s_maxbytes do not work properly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:19.000000Z"}, {"uuid": "079bf4b3-c1a5-4c07-b24c-795a13a2ba91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48830", "type": "seen", "source": "https://t.me/cvedetector/934", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48830 - Linux CAN isotp Race Condition Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48830 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ncan: isotp: fix potential CAN frame reception race in isotp_rcv()  \n  \nWhen receiving a CAN frame the current code logic does not consider  \nconcurrently receiving processes which do not show up in real world  \nusage.  \n  \nZiyang Xuan writes:  \n  \nThe following syz problem is one of the scenarios. so->rx.len is  \nchanged by isotp_rcv_ff() during isotp_rcv_cf(), so->rx.len equals  \n0 before alloc_skb() and equals 4096 after alloc_skb(). That will  \ntrigger skb_over_panic() in skb_put().  \n  \n=======================================================  \nCPU: 1 PID: 19 Comm: ksoftirqd/1 Not tainted 5.16.0-rc8-syzkaller #0  \nRIP: 0010:skb_panic+0x16c/0x16e net/core/skbuff.c:113  \nCall Trace:  \n   \n skb_over_panic net/core/skbuff.c:118 [inline]  \n skb_put.cold+0x24/0x24 net/core/skbuff.c:1990  \n isotp_rcv_cf net/can/isotp.c:570 [inline]  \n isotp_rcv+0xa38/0x1e30 net/can/isotp.c:668  \n deliver net/can/af_can.c:574 [inline]  \n can_rcv_filter+0x445/0x8d0 net/can/af_can.c:635  \n can_receive+0x31d/0x580 net/can/af_can.c:665  \n can_rcv+0x120/0x1c0 net/can/af_can.c:696  \n __netif_receive_skb_one_core+0x114/0x180 net/core/dev.c:5465  \n __netif_receive_skb+0x24/0x1b0 net/core/dev.c:5579  \n  \nTherefore we make sure the state changes and data structures stay  \nconsistent at CAN frame reception time by adding a spin_lock in  \nisotp_rcv(). This fixes the issue reported by syzkaller but does not  \naffect real world operation. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:15.000000Z"}, {"uuid": "54e5c03c-c348-45ff-8a70-4845d7bada22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48822", "type": "seen", "source": "https://t.me/cvedetector/931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48822 - Linux usb fs Use-After-Free Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2022-48822 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \nusb: f_fs: Fix use-after-free for epfile  \n  \nConsider a case where ffs_func_eps_disable is called from  \nffs_func_disable as part of composition switch and at the  \nsame time ffs_epfile_release get called from userspace.  \nffs_epfile_release will free up the read buffer and call  \nffs_data_closed which in turn destroys ffs->epfiles and  \nmark it as NULL. While this was happening the driver has  \nalready initialized the local epfile in ffs_func_eps_disable  \nwhich is now freed and waiting to acquire the spinlock. Once  \nspinlock is acquired the driver proceeds with the stale value  \nof epfile and tries to free the already freed read buffer  \ncausing use-after-free.  \n  \nFollowing is the illustration of the race:  \n  \n      CPU1                                  CPU2  \n  \n   ffs_func_eps_disable  \n   epfiles (local copy)  \n     ffs_epfile_release  \n     ffs_data_closed  \n     if (last file closed)  \n     ffs_data_reset  \n     ffs_data_clear  \n     ffs_epfiles_destroy  \nspin_lock  \ndereference epfiles  \n  \nFix this races by taking epfiles local copy & assigning it under  \nspinlock and if epfiles(local) is null then update it in ffs->epfiles  \nthen finally destroy it.  \nExtending the scope further from the race, protecting the ep related  \nstructures, and concurrent accesses. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:12.000000Z"}, {"uuid": "30cf731e-1d2c-4c6d-b252-c738b264a05e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48826", "type": "seen", "source": "https://t.me/cvedetector/930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2022-48826 - In the Linux kernel, the following vulnerability h\", \n  \"Content\": \"CVE ID : CVE-2022-48826 \nPublished : July 16, 2024, 12:15 p.m. | 43\u00a0minutes ago \nDescription : In the Linux kernel, the following vulnerability has been resolved:  \n  \ndrm/vc4: Fix deadlock on DSI device attach error  \n  \nDSI device attach to DSI host will be done with host device's lock  \nheld.  \n  \nUn-registering host in \"device attach\" error path (ex: probe retry)  \nwill result in deadlock with below call trace and non operational  \nDSI display.  \n  \nStartup Call trace:  \n[   35.043036]  rt_mutex_slowlock.constprop.21+0x184/0x1b8  \n[   35.043048]  mutex_lock_nested+0x7c/0xc8  \n[   35.043060]  device_del+0x4c/0x3e8  \n[   35.043075]  device_unregister+0x20/0x40  \n[   35.043082]  mipi_dsi_remove_device_fn+0x18/0x28  \n[   35.043093]  device_for_each_child+0x68/0xb0  \n[   35.043105]  mipi_dsi_host_unregister+0x40/0x90  \n[   35.043115]  vc4_dsi_host_attach+0xf0/0x120 [vc4]  \n[   35.043199]  mipi_dsi_attach+0x30/0x48  \n[   35.043209]  tc358762_probe+0x128/0x164 [tc358762]  \n[   35.043225]  mipi_dsi_drv_probe+0x28/0x38  \n[   35.043234]  really_probe+0xc0/0x318  \n[   35.043244]  __driver_probe_device+0x80/0xe8  \n[   35.043254]  driver_probe_device+0xb8/0x118  \n[   35.043263]  __device_attach_driver+0x98/0xe8  \n[   35.043273]  bus_for_each_drv+0x84/0xd8  \n[   35.043281]  __device_attach+0xf0/0x150  \n[   35.043290]  device_initial_probe+0x1c/0x28  \n[   35.043300]  bus_probe_device+0xa4/0xb0  \n[   35.043308]  deferred_probe_work_func+0xa0/0xe0  \n[   35.043318]  process_one_work+0x254/0x700  \n[   35.043330]  worker_thread+0x4c/0x448  \n[   35.043339]  kthread+0x19c/0x1a8  \n[   35.043348]  ret_from_fork+0x10/0x20  \n  \nShutdown Call trace:  \n[  365.565417] Call trace:  \n[  365.565423]  __switch_to+0x148/0x200  \n[  365.565452]  __schedule+0x340/0x9c8  \n[  365.565467]  schedule+0x48/0x110  \n[  365.565479]  schedule_timeout+0x3b0/0x448  \n[  365.565496]  wait_for_completion+0xac/0x138  \n[  365.565509]  __flush_work+0x218/0x4e0  \n[  365.565523]  flush_work+0x1c/0x28  \n[  365.565536]  wait_for_device_probe+0x68/0x158  \n[  365.565550]  device_shutdown+0x24/0x348  \n[  365.565561]  kernel_restart_prepare+0x40/0x50  \n[  365.565578]  kernel_restart+0x20/0x70  \n[  365.565591]  __do_sys_reboot+0x10c/0x220  \n[  365.565605]  __arm64_sys_reboot+0x2c/0x38  \n[  365.565619]  invoke_syscall+0x4c/0x110  \n[  365.565634]  el0_svc_common.constprop.3+0xfc/0x120  \n[  365.565648]  do_el0_svc+0x2c/0x90  \n[  365.565661]  el0_svc+0x4c/0xf0  \n[  365.565671]  el0t_64_sync_handler+0x90/0xb8  \n[  365.565682]  el0t_64_sync+0x180/0x184 \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"16 Jul 2024\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2024-07-16T15:26:11.000000Z"}, {"uuid": "0bdfcb4f-1ce1-430c-897f-80265b007742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48610", "type": "seen", "source": "Telegram/aIDgoo-5E-0EsGwsPss6gkU4z6kI-LmaLObfDRlwkJ9SXKNH", "content": "", "creation_timestamp": "2025-03-11T04:41:14.000000Z"}, {"uuid": "0e1b49f5-f39a-4c2e-a711-4bc465c98df9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48455", "type": "seen", "source": "https://t.me/cibsecurity/73320", "content": "\u203c CVE-2022-48455 \u203c\n\nIn wifi service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T13:22:04.000000Z"}, {"uuid": "06ec9bfc-028e-43f3-98f7-c906d94a35a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48457", "type": "seen", "source": "https://t.me/cibsecurity/73317", "content": "\u203c CVE-2022-48457 \u203c\n\nIn TeleService, there is a possible system crash due to improper input validation. This could lead to local denial of service with no additional execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T13:21:57.000000Z"}, {"uuid": "0fa3a23c-7690-48cd-a1b5-db07dfd40cf7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48461", "type": "seen", "source": "https://t.me/cibsecurity/73314", "content": "\u203c CVE-2022-48461 \u203c\n\nIn sensor driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T13:21:54.000000Z"}, {"uuid": "92f926bb-1218-4d0f-9d99-1c8ba708881e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48460", "type": "seen", "source": "https://t.me/cibsecurity/73307", "content": "\u203c CVE-2022-48460 \u203c\n\nIn setting service, there is a possible undefined behavior due to incorrect error handling. This could lead to local denial of service with no additional execution privileges needed\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-11-01T13:21:42.000000Z"}, {"uuid": "730e6d18-41c7-4c66-a19f-231b75809020", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48346", "type": "seen", "source": "Telegram/ZW-wbV_maKhx2pQYq5SsRyiSTDiAzSVoYu7TE5ZhSVPTwPE2", "content": "", "creation_timestamp": "2025-02-19T22:21:30.000000Z"}, {"uuid": "f0570343-d3d3-4c19-a88b-11b4b2a4d818", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48020", "type": "seen", "source": "Telegram/oWQKbji_cpT2naBkVVIuTQWCwFe9wNWJgJdQd6bV14SfgiO7", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"}, {"uuid": "a5b6aaff-3439-4124-9147-65ffb946a22a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "Telegram/I5NXyMjytHIYu-yIRizuBywJYFS7aYMm5NxfIk522dlINd0p", "content": "", "creation_timestamp": "2025-02-06T02:44:19.000000Z"}, {"uuid": "1fb9036a-a75e-434a-93cf-48687ae32172", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48226", "type": "seen", "source": "Telegram/qPER9ZCBUsix4WeJSMocRHVi7_eXXn-nL4-k_yzj2-9ugorO", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"}, {"uuid": "db632f9f-ecfe-4ea1-a82c-c7b09a47dcdc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48227", "type": "seen", "source": "Telegram/G3ps6Oi5GkAfm_LG-_ayoFHNdpe9oPsmycr2HOH3H4eH0SDo", "content": "", "creation_timestamp": "2025-02-14T10:09:23.000000Z"}, {"uuid": "d1ec7b12-9f46-465f-8147-593269e9d526", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48625", "type": "seen", "source": "https://t.me/arpsyndicate/3696", "content": "#ExploitObserverAlert\n\nCVE-2022-48625\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2022-48625. Yealink Config Encrypt Tool add RSA before 1.2 has a built-in RSA key pair, and thus there is a risk of decryption by an adversary.\n\nFIRST-EPSS: 0.000430000", "creation_timestamp": "2024-02-21T06:48:57.000000Z"}, {"uuid": "97c4d1a3-7817-4ab2-91af-4bc575e94fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48624", "type": "seen", "source": "https://t.me/arpsyndicate/3558", "content": "#ExploitObserverAlert\n\nCVE-2022-48624\n\nDESCRIPTION: Exploit Observer has 1 entries in 1 file formats related to CVE-2022-48624. close_altfile in filename.c in less before 606 omits shell_quote calls for LESSCLOSE.\n\nFIRST-EPSS: 0.000450000", "creation_timestamp": "2024-02-20T05:31:55.000000Z"}, {"uuid": "6e2d4d41-2e0a-4caa-9c95-f189f4ba598b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48476", "type": "seen", "source": "https://t.me/arpsyndicate/3086", "content": "#ExploitObserverAlert\n\nCVE-2022-48476\n\nDESCRIPTION: Exploit Observer has 3 entries in 3 file formats related to CVE-2022-48476. In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible\n\nFIRST-EPSS: 0.000900000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2024-01-26T21:56:40.000000Z"}, {"uuid": "460e628b-aef2-4651-adad-fbfdc81b46c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48303", "type": "seen", "source": "https://t.me/arpsyndicate/2029", "content": "#ExploitObserverAlert\n\nCVE-2022-48303\n\nDESCRIPTION: Exploit Observer has 8 entries related to CVE-2022-48303. GNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.\n\nFIRST-EPSS: 0.000440000\nNVD-IS: 3.6\nNVD-ES: 1.8", "creation_timestamp": "2023-12-18T17:09:42.000000Z"}, {"uuid": "a4d7d966-ea12-4e59-bd81-eee6f1c58ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48116", "type": "seen", "source": "https://t.me/arpsyndicate/2724", "content": "#ExploitObserverAlert\n\nCVE-2022-48116\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2022-48116. AyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php.\n\nFIRST-EPSS: 0.001420000\nNVD-IS: 5.9\nNVD-ES: 1.2", "creation_timestamp": "2024-01-09T07:14:30.000000Z"}, {"uuid": "8e701a5e-81f9-4fd1-ba21-eb4adce4c8ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48363", "type": "seen", "source": "https://t.me/arpsyndicate/513", "content": "#ExploitObserverAlert\n\nCVE-2022-48363\n\nDESCRIPTION: Exploit Observer has 5 entries related to CVE-2022-48363. In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-11-23T21:58:35.000000Z"}, {"uuid": "84ac3a3b-d775-4ce5-9908-75fd40909ecd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://t.me/arpsyndicate/97", "content": "#ExploitObserverAlert\n\nCVE-2022-48503\n\nDESCRIPTION: Exploit Observer has 7 entries related to CVE-2022-48503. The issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.\n\nFIRST-EPSS: 0.000850000\nNVD-IS: 5.9\nNVD-ES: 2.8", "creation_timestamp": "2023-11-11T19:04:38.000000Z"}, {"uuid": "e205df10-d50e-41d3-b5cb-7cf61319495b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/arpsyndicate/44", "content": "#ExploitObserverAlert\n\nCVE-2022-4886\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2022-4886. Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.\n\nFIRST-EPSS: 0.000750000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2023-11-10T20:00:56.000000Z"}, {"uuid": "aeb75a3f-bdf3-4989-80be-c704bdb99b26", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/arpsyndicate/40", "content": "#ExploitObserverAlert\n\nCVE-2022-4886\n\nDESCRIPTION: Exploit Observer has 3 entries related to CVE-2022-4886. Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.\n\nFIRST-EPSS: 0.000750000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2023-11-10T14:06:57.000000Z"}, {"uuid": "c861e7c1-4477-4a02-9022-9a20e64c5317", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48149", "type": "seen", "source": "https://t.me/arpsyndicate/49", "content": "#ExploitObserverAlert\n\nCVE-2022-48149\n\nDESCRIPTION: Exploit Observer has 1 entries related to CVE-2022-48149. Online Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.\n\nFIRST-EPSS: 0.000760000\nNVD-IS: 5.9\nNVD-ES: 3.9", "creation_timestamp": "2023-11-10T20:36:27.000000Z"}, {"uuid": "aa3b15bc-80ee-4ec9-a67d-e92d17a4169e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48363", "type": "seen", "source": "https://t.me/arpsyndicate/1610", "content": "#ExploitObserverAlert\n\nCVE-2022-48363\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-48363. In MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.\n\nFIRST-EPSS: 0.000520000\nNVD-IS: 3.6\nNVD-ES: 3.9", "creation_timestamp": "2023-12-10T11:55:01.000000Z"}, {"uuid": "f36c45e5-bf90-4fab-b1e1-20210fe806c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/arpsyndicate/675", "content": "#ExploitObserverAlert\n\nCVE-2022-4886\n\nDESCRIPTION: Exploit Observer has 6 entries related to CVE-2022-4886. Ingress-nginx `path` sanitization can be bypassed with `log_format` directive.\n\nFIRST-EPSS: 0.000750000\nNVD-IS: 3.6\nNVD-ES: 2.8", "creation_timestamp": "2023-11-29T05:49:54.000000Z"}, {"uuid": "e9f2316d-a8ac-49b9-886c-96d448057410", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "Telegram/MCOtq6YNws1wIQDmkmW4fj5yPvTPQ5hjf1qfUTkU-awDNw", "content": "", "creation_timestamp": "2023-10-30T08:13:06.000000Z"}, {"uuid": "0d1fad62-140b-4b03-8bc4-c1ca4038b1e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "exploited", "source": "Telegram/HHHLpj5UJ-Hchza2jGNrPuJutW81PjjfEkaVA0hvlVbZDA", "content": "", "creation_timestamp": "2024-02-01T06:24:18.000000Z"}, {"uuid": "ec5f88db-886b-46b5-9d1e-6b6017204c61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48612", "type": "seen", "source": "https://t.me/cibsecurity/72299", "content": "\u203c CVE-2022-48612 \u203c\n\nA Universal Cross Site Scripting (UXSS) vulnerability in ClassLink OneClick Extension through 10.7 allows remote attackers to inject JavaScript into any webpage, because a regular expression (validating whether a URL is controlled by ClassLink) is not present in all applicable places.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-16T07:41:23.000000Z"}, {"uuid": "a071879f-65f9-4e07-89aa-494e3cb99446", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/KomunitiSiber/999", "content": "Urgent: New Security Flaws Discovered in NGINX Ingress Controller for Kubernetes\nhttps://thehackernews.com/2023/10/urgent-new-security-flaws-discovered-in.html\n\nThree unpatched high-severity security flaws have been disclosed in the\u00a0NGINX Ingress controller\u00a0for Kubernetes that could be weaponized by a threat actor to steal secret credentials from the cluster.\nThe vulnerabilities are as follows -\u00a0\n\nCVE-2022-4886\u00a0(CVSS score: 8.8) -\u00a0Ingress-nginx\u00a0path sanitization can be bypassed to obtain the credentials of the ingress-nginx controller\nCVE-2023-5043\u00a0(", "creation_timestamp": "2023-10-30T09:02:14.000000Z"}, {"uuid": "1c03677b-15c1-4010-bca5-6c31ab3dea71", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "exploited", "source": "https://t.me/KomunitiSiber/1425", "content": "CISA Warns of Active Exploitation of Critical Vulnerability in iOS, iPadOS, and macOS\nhttps://thehackernews.com/2024/02/cisa-warns-of-active-exploitation-of.html\n\nThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday\u00a0added\u00a0a high-severity flaw impacting iOS, iPadOS, macOS, tvOS, and watchOS to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.\nThe vulnerability, tracked as\u00a0CVE-2022-48618\u00a0(CVSS score: 7.8), concerns a bug in the kernel component.\n\"An attacker with", "creation_timestamp": "2024-02-01T07:14:12.000000Z"}, {"uuid": "ab5d4234-5909-4457-9f43-e96422c46df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48870", "type": "published-proof-of-concept", "source": "https://t.me/BABATATASASA/3436", "content": "\u200b\u200bCVE-2022-25765 \n\npdfkit Exploit Reverse Shell\n\npdfkit <0.8.6 command injection shell. The package pdfkit from 0.0.0 are vulnerable to Command Injection where the URL is not properly sanitized. (Tested on ver 0.8.6) - CVE-2022-25765\n\nhttps://github.com/CyberArchitect1/CVE-2022-25765-pdfkit-Exploit-Reverse-Shell\n\n\u200b\u200bCVE-2022-45025\n\nCommand injection via PDF import in Markdown Preview Enhanced (VSCode, Atom)\n\nhttps://github.com/yuriisanin/CVE-2022-45025\n\n\u200b\u200bCVE-2022-36537\n\nZK Framework - Exposure of Sensitive Information to an Unauthorized Actor\n\nhttps://github.com/agnihackers/CVE-2022-36537-EXPLOIT\n\n\u200b\u200bCVE-2022-39066\n\nSQL Injection Vulnerability in ZTE MF286R\n\nhttps://github.com/v0lp3/CVE-2022-39066\n\n\u200b\u200bCVE-2022-46381\n\nYou can scan this vulnerability on your company's subdomains using the nuclei scanner with the template specified in this repo \"CVE-2022-46381.yaml\"\n\nhttps://github.com/omarhashem123/Security-Research/tree/main/CVE-2022-46381\n\n\u200b\u200bCVE-2022-45771 - Pwndoc LFI to RCE\n\nPwndoc local file inclusion to remote code execution of Node.js code on the server.\n\nhttps://github.com/p0dalirius/CVE-2022-45771-Pwndoc-LFI-to-RCE\n\n\u200b\u200bCVE-2022-46169\n\nCacti remote_agent.php Unauthenticated Command Injection.\n\nhttps://github.com/0xf4n9x/CVE-2022-46169\n\n\u200b\u200bCVE-2022-45451\n\nPoC for CVE-2022-45451 Acronis Arbitrary File Read\n\nhttps://github.com/alfarom256/CVE-2022-45451\n\nCVE-2022-28672\n\nThis bug was Use after Free caused by improper handling of javascript object memory references.\n\nhttps://github.com/hacksysteam/CVE-2022-28672\n\nUse after Free - RCE Exploit: https://hacksys.io/blogs/foxit-reader-uaf-rce-jit-spraying-cve-2022-28672\n\n\u200b\u200bCVE-2003-0358\n\nBuffer overflow in (1) nethack 3.4.0 and earlier, and (2) falconseye 1.9.3 and earlier, which is based on nethack, allows local users to gain privileges > via a long -s command line option.\n\nhttps://github.com/snowcra5h/CVE-2003-0358\n\n\u200b\u200bCVE-2022-39253\n\nDocker host file read\n\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc\n\n\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n\u200b\u200bCVE-2022-2602\n\nPoC Kernel Privilege Escalation Linux\n\nhttps://github.com/kiks7/CVE-2022-2602-Kernel-Exploit\n\n\u200b\u200bEvilWfshbr\n\nCVE-2022-42046 Proof of Concept of wfshbr64.sys local privilege escalation\n\nhttps://github.com/kkent030315/CVE-2022-42046\n\n\u200b\u200bCVE-2022-2602\n\nThis repository contains exploits for CVE-2022-2602. There are two versions of it:\n\n\u25ab\ufe0f Exploit using userfaultfd technique.\n\u25ab\ufe0f Exploit using inode locking technique.\n\nhttps://github.com/LukeGix/CVE-2022-2602\n\n#cve #poc \n@pfkgit", "creation_timestamp": "2023-01-28T19:14:38.000000Z"}, {"uuid": "6fdc0357-8b35-40e7-adb8-998379f9f55b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48194", "type": "published-proof-of-concept", "source": "https://t.me/dilagrafie/2886", "content": "Tools - Hackers Factory\n\n\u200b\u200bMobSF\n\nMobile Security Framework is an automated, all-in-one mobile application (Android/iOS/Windows) pen-testing, malware analysis and security assessment framework capable of performing static and dynamic analysis.\n\nhttps://github.com/MobSF/Mobile-Security-Framework-MobSF\n\n\u200b\u200bvBulletin Exploits\n\nCVE-2023-25135: Pre-authentication RCE.\n\nhttps://github.com/ambionics/vbulletin-exploits\n\nDetails:\nhttps://www.ambionics.io/blog/vbulletin-unserializable-but-unreachable\n\n\u200b\u200bInternet of Vulnerable Things\n\nThe results of my small term paper on the topic of the Internet of Vulnerable Things and the exploit for CVE-2022-48194.\n\nhttps://github.com/otsmr/internet-of-vulnerable-things\n\n\u200b\u200bOSTIF\n\nSecurity Work and Manual Reviews facilitated by Open Source Technology Improvement Fund, aka OSTIF\n\nhttps://github.com/ostif-org/OSTIF\n\n\u200b\u200bSocial Media #OSINT\n\nhttps://github.com/cqcore/Social-Media-OSINT\n\n\u200b\u200bWhatWaf\n\nWhatWaf is an advanced firewall detection tool who's goal is to give you the idea of \"There's a WAF?\". WhatWaf works by detecting a firewall on a web application, and attempting to detect a bypass (or two) for said firewall, on the specified target.\n\nhttps://github.com/Ekultek/WhatWaf\n\n\u200b\u200bESP32Marauder\n\nA suite of WiFi/Bluetooth offensive and defensive tools for the #ESP32\n\nhttps://github.com/justcallmekoko/ESP32Marauder\n\n\u200b\u200bWarpgate\n\nA smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps.\n\n\u2022 Set it up in your DMZ, add user accounts and easily assign them to specific hosts and URLs within the network.\n\u2022 Warpgate will record every session for you to view (live) and replay later through a built-in admin web UI.\n\u2022 Written in 100% safe Rust.\n\nhttps://github.com/warp-tech/warpgate\n\n\u200b\u200bWAFW00F\n\nAllows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.\n\nhttps://github.com/EnableSecurity/wafw00f\n\n\u200b\u200bTiny-XSS-Payloads\n\nA collection of tiny XSS Payloads that can be used in different contexts.\n\nhttps://github.com/terjanq/Tiny-XSS-Payloads\n\nWeb:\nhttps://tinyxss.terjanq.me\n\n\u200b\u200bD/Invoke\n\nDynamically invoke arbitrary unmanaged code from managed code without P/Invoke.\n\nhttps://github.com/rasta-mouse/DInvoke\n\nDetails:\nhttps://offensivedefence.co.uk/posts/dinvoke-105\n\n\u200b\u200bCloudGPT\n\nVulnerability scanner for AWS customer managed policies using #ChatGPT\n\nhttps://github.com/ustayready/cloudgpt\n\n\u200b\u200bVX-API\n\nCollection of various malicious functionality to aid in malware development.\n\nhttps://github.com/vxunderground/VX-API\n\n\u200b\u200bBitdrain \n\nRemote p2p bandwidth/cpu overage attack against bitcoin, dogecoin, etc.\n\nhttps://github.com/visualbasic6/drain\n\n\u200b\u200bMaltego Web2Screenshot Transforms\n\nThe #Maltego Web2Screenshot Transforms allow you to capture screenshots from both websites and URLs in a secure and anonymous manner.\n\nI developed these transforms to enhance my operational security (OPSEC) by avoiding exposing my public or VPN's IP address. With these Transforms, you can generate high-quality screenshots while keeping your identity and location hidden.\n\nhttps://github.com/TURROKS/Maltego_Web2Screenshot\n\n\u200b\u200bGEF \n\nGDB Enhanced Features a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux.\n\nhttps://github.com/hugsy/gef\n\n\u200b\u200bCortex XDR Config Extractor\n\nWith this tool its possible to parse the Database Lock Files of the Cortex XDR Agent by Palo Alto Networks and extract Agent Settings, the Hash and Salt of the Uninstall Password, as well as possible Exclusions.\n\nhttps://github.com/Laokoon-SecurITy/Cortex-XDR-Config-Extractor\n\n\u200b\u200bBounty Meter\n\nCommand-line utility tool designed for bug bounty hunters to define their bounty target for a year, maintain and keep record of their bounties on a monthly basis, and track their progress throughout the year. With Bounty Meter, you can add and subtract bounties, view your total bounties earned this year, and display an interactive stats card to visualize your progress.\n\nhttps://github.com/720922/bountymeter\n\n#infosec #cybersec", "creation_timestamp": "2023-04-17T20:56:38.000000Z"}, {"uuid": "e84824df-4a5b-4aea-8445-4566065c0963", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48182", "type": "seen", "source": "https://t.me/cibsecurity/71869", "content": "\u203c CVE-2022-48182 \u203c\n\nA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T00:16:13.000000Z"}, {"uuid": "a7bf5af4-f48d-4d01-bbbf-3d02570f2a77", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48183", "type": "seen", "source": "https://t.me/cibsecurity/71866", "content": "\u203c CVE-2022-48183 \u203c\n\nA vulnerability was reported in ThinkPad T14s Gen 3 and X13 Gen3 that could cause the BIOS tamper detection mechanism to not trigger under specific circumstances which could allow unauthorized access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-10T00:16:07.000000Z"}, {"uuid": "24d3521d-b367-448d-98b7-80bbe82d78b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4874", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/3959", "content": "\u0412 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 TP-Link \u0438 NetComm \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nCVE-2022-4498 \u0438 CVE-2022-4499 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 TP-Link WR710N-V1-151022 \u0438 Archer-C5-V2-160201 SOHO.\n\n\u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Microsoft \u0414\u0436\u0435\u0439\u043c\u0441\u0443 \u0425\u0430\u043b\u043b\u0443.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 HTTP.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 RCE.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2022-4499 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f HTTPD \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0437\u043d\u0430\u0442\u044c \u043a\u0430\u0436\u0434\u044b\u0439 \u0431\u0430\u0439\u0442 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\nTP-Link \u0431\u044b\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e\u0431 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0435\u0449\u0435 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430, \u043d\u043e \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b NetComm NF20MESH, NF20 \u0438 NL1902.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2022-4873 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f - CVE-2022-4874, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443.\n\n\u041e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u044b\u0435 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0435\u0442\u044f\u043c \u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 NetComm \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0411\u0440\u0435\u043d\u0434\u0430\u043d \u0421\u043a\u0430\u0440\u0432\u0435\u043b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.", "creation_timestamp": "2023-01-19T13:10:07.000000Z"}, {"uuid": "d255417e-2ecb-4ccc-ba13-3bb8dfaa1c3b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/true_secator/5023", "content": "\u0412 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0434\u043b\u044f Kubernetes \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u0435\u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0434\u043b\u044f \u043a\u0440\u0430\u0436\u0438 \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0445 \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0438\u0437 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0438\u0445:\n- CVE-2022-4886\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 8,8): \u043e\u0431\u0445\u043e\u0434 \u043e\u0447\u0438\u0441\u0442\u043a\u0438 \u043f\u0443\u0442\u0438 Ingress-nginx\u00a0\u0434\u043b\u044f \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 Ingress-nginx;\n- CVE-2023-5043\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,6): \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u0438 Ingress-nginx \u0432\u044b\u0437\u044b\u0432\u0430\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0439 \u043a\u043e\u043c\u0430\u043d\u0434\u044b.\n- CVE-2023-5044\u00a0(\u043e\u0446\u0435\u043d\u043a\u0430 CVSS: 7,6): \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430 \u0447\u0435\u0440\u0435\u0437 \u0430\u043d\u043d\u043e\u0442\u0430\u0446\u0438\u044e nginx.ingress.kubernetes[.io]/permanent-redirect.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043c\u043e\u0436\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0443\u043a\u0440\u0430\u0441\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0438\u0437 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430.\n\nCVE-2022-4886 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0432 \u043f\u043e\u043b\u0435 \u00abspec.rules[].http.paths[].path\u00bb \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u0438\u043c\u0435\u044e\u0449\u0435\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f \u043a Ingress, \u0441\u043a\u0430\u0447\u0438\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 API Kubernetes \u0438\u0437 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430 \u0432\u0445\u043e\u0434\u044f\u0449\u0435\u0433\u043e \u0442\u0440\u0430\u0444\u0438\u043a\u0430.\n\n\u0412\u00a0\u043e\u0431\u044a\u0435\u043a\u0442\u0435 Ingress\u00a0\u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440 \u043c\u043e\u0436\u0435\u0442 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c, \u043a\u0430\u043a\u043e\u0439 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u043f\u0443\u0442\u044c HTTP \u043d\u0430\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u0442\u0441\u044f \u043d\u0430 \u043a\u0430\u043a\u043e\u0439 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u043f\u0443\u0442\u044c.\n\n\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0435 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0435 \u043d\u0435 \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u0442 \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0434\u043e\u0441\u0442\u043e\u0432\u0435\u0440\u043d\u043e\u0441\u0442\u044c \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0433\u043e \u043f\u0443\u0442\u0438 \u0438 \u043c\u043e\u0436\u0435\u0442 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0442\u044c \u043d\u0430 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0438\u0439 \u0444\u0430\u0439\u043b, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0441\u043e\u0434\u0435\u0440\u0436\u0438\u0442 \u0442\u043e\u043a\u0435\u043d \u0443\u0447\u0435\u0442\u043d\u043e\u0439 \u0437\u0430\u043f\u0438\u0441\u0438 \u0441\u043b\u0443\u0436\u0431\u044b \u0434\u043b\u044f \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u043a\u043b\u0438\u0435\u043d\u0442\u0430 \u043d\u0430 \u0441\u0435\u0440\u0432\u0435\u0440\u0435 API.\n\n\u0412 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u041f\u041e \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043c\u0435\u0440\u044b \u043f\u043e \u0441\u043c\u044f\u0433\u0447\u0435\u043d\u0438\u044e \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0439, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0432\u043a\u043b\u044e\u0447\u0430\u044e\u0442 \u0432 \u0441\u0435\u0431\u044f \u0430\u043a\u0442\u0438\u0432\u0430\u0446\u0438\u044e \u043e\u043f\u0446\u0438\u0438 \u00abstrict-validate-path-type\u00bb \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0443 \u0444\u043b\u0430\u0433\u0430 --enable-annotation-validation, \u0447\u0442\u043e\u0431\u044b \u043f\u0440\u0435\u0434\u043e\u0442\u0432\u0440\u0430\u0442\u0438\u0442\u044c \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u0435 \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u0432 Ingress \u0441 \u043d\u0435\u0434\u043e\u043f\u0443\u0441\u0442\u0438\u043c\u044b\u043c\u0438 \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u0438 \u0432\u0432\u0435\u0441\u0442\u0438 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043e\u0433\u0440\u0430\u043d\u0438\u0447\u0435\u043d\u0438\u044f.\n\n\u0412 ARMO \u0437\u0430\u044f\u0432\u0438\u043b\u0438, \u0447\u0442\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 NGINX \u0434\u043e \u0432\u0435\u0440\u0441\u0438\u0438 1.19, \u043d\u0430\u0440\u044f\u0434\u0443 \u0441 \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u043e\u0439 \u0441\u0442\u0440\u043e\u043a\u0438 \u00ab--enable-annotation-validation\u00bb, \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u0435\u0442 CVE-2023-5043 \u0438 CVE-2023-5044.", "creation_timestamp": "2023-10-30T17:00:07.000000Z"}, {"uuid": "cf0084eb-39d9-43a1-acee-81e0b6da7161", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4873", "type": "published-proof-of-concept", "source": "https://t.me/true_secator/3959", "content": "\u0412 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 TP-Link \u0438 NetComm \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b RCE-\u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438.\n\nCVE-2022-4498 \u0438 CVE-2022-4499 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 TP-Link WR710N-V1-151022 \u0438 Archer-C5-V2-160201 SOHO.\n\n\u041e\u043d\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u043c Microsoft \u0414\u0436\u0435\u0439\u043c\u0441\u0443 \u0425\u0430\u043b\u043b\u0443.\n\n\u041e\u0448\u0438\u0431\u043a\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u0434, \u0432\u044b\u0437\u044b\u0432\u0430\u0442\u044c \u0441\u0431\u043e\u0438 \u0432 \u0440\u0430\u0431\u043e\u0442\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0438\u043b\u0438 \u0440\u0430\u0441\u043a\u0440\u044b\u0432\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0432\u0445\u043e\u0434\u0430.\n\n\u041f\u0435\u0440\u0432\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u0443\u0447\u0438, \u0432\u044b\u0437\u0432\u0430\u043d\u043d\u043e\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u043c\u0438 \u043f\u0430\u043a\u0435\u0442\u0430\u043c\u0438 \u0432 \u0440\u0435\u0436\u0438\u043c\u0435 \u0431\u0430\u0437\u043e\u0432\u043e\u0439 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 HTTP.\n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u043e\u0448\u0438\u0431\u043a\u0443, \u0447\u0442\u043e\u0431\u044b \u0432\u044b\u0437\u0432\u0430\u0442\u044c DoS \u0438\u043b\u0438 RCE.\n\n\u0412\u0442\u043e\u0440\u0430\u044f CVE-2022-4499 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0442\u0435\u043c, \u0447\u0442\u043e \u0444\u0443\u043d\u043a\u0446\u0438\u044f HTTPD \u043f\u043e\u0434\u0432\u0435\u0440\u0436\u0435\u043d\u0430 \u0430\u0442\u0430\u043a\u0435 \u043f\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0438\u043c \u043a\u0430\u043d\u0430\u043b\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443 \u0443\u0437\u043d\u0430\u0442\u044c \u043a\u0430\u0436\u0434\u044b\u0439 \u0431\u0430\u0439\u0442 \u0441\u0442\u0440\u043e\u043a\u0438 \u0438\u043c\u0435\u043d\u0438 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u043f\u0430\u0440\u043e\u043b\u044f.\n\nTP-Link \u0431\u044b\u043b\u0430 \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0430 \u043e\u0431 \u044d\u0442\u0438\u0445 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0430\u0445 \u0435\u0449\u0435 \u0432 \u043d\u043e\u044f\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430, \u043d\u043e \u043e\u0431\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043e\u0441\u0442\u0430\u044e\u0442\u0441\u044f \u043d\u0435\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u043c\u0438.\n\n\u0414\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0442 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b NetComm NF20MESH, NF20 \u0438 NL1902.\n\n\u041f\u0435\u0440\u0432\u0430\u044f CVE-2022-4873 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u0441\u0431\u043e\u044e \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u044f.\n\n\u0412\u0442\u043e\u0440\u0430\u044f - CVE-2022-4874, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u043e\u0431\u0445\u043e\u0434 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438, \u0432\u0435\u0434\u0443\u0449\u0438\u0439 \u043a \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u043c\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u0443 \u043a \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0443.\n\n\u041e\u0431\u044a\u0435\u0434\u0438\u043d\u0435\u043d\u043d\u044b\u0435 \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0443, \u043d\u0435 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0435\u043c\u0443 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043b\u0438\u043d\u043d\u043e\u0441\u0442\u0438, \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434. \n\n\u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043d\u0430\u0447\u0430\u043b\u0430 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043d\u0435\u0441\u0430\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u043c \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c, \u0430 \u0437\u0430\u0442\u0435\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0438 \u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u0434\u0440\u0443\u0433\u0438\u043c \u0441\u0435\u0442\u044f\u043c \u0438\u043b\u0438 \u043f\u043e\u0441\u0442\u0430\u0432\u0438\u0442\u044c \u043f\u043e\u0434 \u0443\u0433\u0440\u043e\u0437\u0443 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c, \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0434\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e\u0441\u0442\u044c \u0434\u0430\u043d\u043d\u044b\u0445, \u043f\u0435\u0440\u0435\u0434\u0430\u0432\u0430\u0435\u043c\u044b\u0445 \u0438\u0437 \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438.\n\n\u0412 \u0434\u0435\u043a\u0430\u0431\u0440\u0435 2022 \u0433\u043e\u0434\u0430 NetComm \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430\u00a0\u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043a\u0438.\n\n\u041f\u043e\u0437\u0436\u0435 \u0432 \u044f\u043d\u0432\u0430\u0440\u0435 2023 \u0433\u043e\u0434\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0439 \u0438\u0445 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c \u0411\u0440\u0435\u043d\u0434\u0430\u043d \u0421\u043a\u0430\u0440\u0432\u0435\u043b\u043b \u043e\u043f\u0443\u0431\u043b\u0438\u043a\u043e\u0432\u0430\u043b\u00a0\u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438, \u0430 \u0442\u0430\u043a\u0436\u0435 PoC-\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442.", "creation_timestamp": "2023-01-19T13:10:07.000000Z"}, {"uuid": "c50e95d7-a5f8-4e7f-9f9f-03d07817ef30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48870", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1939", "content": "\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n#cve", "creation_timestamp": "2022-12-22T17:02:37.000000Z"}, {"uuid": "fb0c0e51-3a53-4576-b69a-066a2214ae36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48870", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1934", "content": "\u200b\u200bCVE-2022-48870\n\nmaccms admin+ xss attacks\n\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n#cve", "creation_timestamp": "2022-12-22T15:38:37.000000Z"}, {"uuid": "6372aa7e-837e-4f22-918d-d22c542737cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48870", "type": "published-proof-of-concept", "source": "https://t.me/crackcodes/1927", "content": "#exploit\n1. CVE-2022-48870:\nmaccms admin+ xss attacks\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n2. CVE-2022-39253:\nDocker host file read\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc", "creation_timestamp": "2022-12-22T06:51:17.000000Z"}, {"uuid": "99f8fd82-cb74-489c-aa6e-3e468cd9a0fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48630", "type": "seen", "source": "https://t.me/ctinow/200211", "content": "https://ift.tt/GfrBxiL\nCVE-2022-48630", "creation_timestamp": "2024-03-05T13:28:10.000000Z"}, {"uuid": "ee454f68-0c11-42aa-bcc0-23af939d6feb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48629", "type": "seen", "source": "https://t.me/ctinow/200210", "content": "https://ift.tt/ElO3K06\nCVE-2022-48629", "creation_timestamp": "2024-03-05T13:28:08.000000Z"}, {"uuid": "b3f7c868-7f3b-4d4c-94e1-0c0984554cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48630", "type": "seen", "source": "https://t.me/ctinow/200225", "content": "https://ift.tt/GfrBxiL\nCVE-2022-48630", "creation_timestamp": "2024-03-05T13:28:29.000000Z"}, {"uuid": "27575e03-da7e-43db-a31d-501fbb3f4cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48629", "type": "seen", "source": "https://t.me/ctinow/200224", "content": "https://ift.tt/ElO3K06\nCVE-2022-48629", "creation_timestamp": "2024-03-05T13:28:25.000000Z"}, {"uuid": "1e89c22f-be4d-43c8-9064-b03bb359b842", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48628", "type": "seen", "source": "https://t.me/ctinow/198627", "content": "https://ift.tt/bVgPJdk\nCVE-2022-48628", "creation_timestamp": "2024-03-03T09:36:24.000000Z"}, {"uuid": "68473d6b-8d1b-4d43-b4d0-9fb7c3cf96bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48627", "type": "seen", "source": "https://t.me/ctinow/198641", "content": "https://ift.tt/XFwgTSE\nCVE-2022-48627", "creation_timestamp": "2024-03-03T10:11:21.000000Z"}, {"uuid": "6239932e-7aed-4446-82a2-b01a722c3d04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/ctinow/202623", "content": "https://ift.tt/xhTKwyR\nCVE-2022-4886 Ingress nginx Vulnerability in NetApp Products", "creation_timestamp": "2024-03-07T18:32:21.000000Z"}, {"uuid": "2037f5aa-84bc-43a3-8e9d-2dff78a4168b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/cibsecurity/72908", "content": "\u203c CVE-2022-4886 \u203c\n\nIngress-nginx `path` sanitization can be bypassed with `log_format` directive.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-26T00:39:16.000000Z"}, {"uuid": "52e85e72-007f-4161-a035-430e32a3e15e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48629", "type": "seen", "source": "https://t.me/ctinow/200595", "content": "https://ift.tt/46gRUeK\nCVE-2022-48629", "creation_timestamp": "2024-03-05T19:16:10.000000Z"}, {"uuid": "ec308083-c5ae-498c-b5ca-8d557efe6d83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48630", "type": "seen", "source": "https://t.me/ctinow/200594", "content": "https://ift.tt/AlcsJxF\nCVE-2022-48630", "creation_timestamp": "2024-03-05T19:16:09.000000Z"}, {"uuid": "688c6a40-8f41-4b84-a42a-6793c32619ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48626", "type": "seen", "source": "https://t.me/ctinow/193293", "content": "https://ift.tt/zxT2UFv\nCVE-2022-48626", "creation_timestamp": "2024-02-26T13:02:14.000000Z"}, {"uuid": "891a5c7c-8d77-4a5c-8caf-bc806d654603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48624", "type": "seen", "source": "https://t.me/ctinow/188322", "content": "https://ift.tt/Fg4HwNx\nCVE-2022-48624", "creation_timestamp": "2024-02-20T10:31:52.000000Z"}, {"uuid": "fec4fc81-349e-4c1b-b21a-37e930350ac4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48621", "type": "seen", "source": "https://t.me/ctinow/187161", "content": "https://ift.tt/olDBWFr\nCVE-2022-48621", "creation_timestamp": "2024-02-18T08:26:30.000000Z"}, {"uuid": "5b143719-972d-474c-887e-fceceb98a730", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48621", "type": "seen", "source": "https://t.me/ctinow/187155", "content": "https://ift.tt/olDBWFr\nCVE-2022-48621", "creation_timestamp": "2024-02-18T08:26:23.000000Z"}, {"uuid": "10a5e689-fc52-436f-8ac6-753294353f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48625", "type": "seen", "source": "https://t.me/ctinow/188017", "content": "https://ift.tt/GFLM9uk\nCVE-2022-48625", "creation_timestamp": "2024-02-20T01:26:32.000000Z"}, {"uuid": "e4c6bd6d-870d-479f-8535-c673862a1b68", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48625", "type": "seen", "source": "https://t.me/ctinow/188013", "content": "https://ift.tt/GFLM9uk\nCVE-2022-48625", "creation_timestamp": "2024-02-20T01:21:34.000000Z"}, {"uuid": "f44f8c33-749c-4901-8b0d-f02d0f8429b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48328", "type": "seen", "source": "https://t.me/ctinow/186679", "content": "https://ift.tt/ZMFIijk\nCVE-2022-48328 Exploit", "creation_timestamp": "2024-02-16T23:16:52.000000Z"}, {"uuid": "25892689-2c20-4dd1-b430-2a0ed5537830", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48624", "type": "seen", "source": "https://t.me/ctinow/187420", "content": "https://ift.tt/P7p5qCs\nCVE-2022-48624", "creation_timestamp": "2024-02-19T02:31:42.000000Z"}, {"uuid": "f6f23f18-0258-4d5c-a391-a671b52602f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48624", "type": "seen", "source": "https://t.me/ctinow/187419", "content": "https://ift.tt/P7p5qCs\nCVE-2022-48624", "creation_timestamp": "2024-02-19T02:26:51.000000Z"}, {"uuid": "8817d601-4b82-4b53-a141-ab441f6be5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48474", "type": "seen", "source": "https://t.me/cibsecurity/70245", "content": "\u203c CVE-2022-48474 \u203c\n\nControl de Ciber, in its 1.650 version, is affected by a Denial of Service condition through the version function. Sending a malicious request could cause the server to check if an unrecognized component is up to date, causing a memory failure error that shuts down the process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:44.000000Z"}, {"uuid": "b215cd5e-eb3f-4f87-9185-19396a7fd6e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48622", "type": "seen", "source": "https://t.me/ctinow/187553", "content": "https://ift.tt/03wIoHb\nCVE-2022-48622 | GNOME gdk-pixbuf up to 2.42.10 ANI Decoder io-ani.c gdk_pixbuf_set_option heap-based overflow (Issue 202)", "creation_timestamp": "2024-02-19T10:21:42.000000Z"}, {"uuid": "37b21ff1-dce7-4c66-a08c-0e8655cbc5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48612", "type": "seen", "source": "https://t.me/ctinow/186874", "content": "https://ift.tt/0NxGKwT\nCVE-2023-45889 | ClassLink OneClick Extension up to 10.8 Incomplete Fix CVE-2022-48612 cross site scripting", "creation_timestamp": "2024-02-17T11:36:39.000000Z"}, {"uuid": "64175c11-1aa4-448b-9a60-587e67bcda33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48220", "type": "seen", "source": "https://t.me/ctinow/185150", "content": "https://ift.tt/39C6E8f\nCVE-2022-48220", "creation_timestamp": "2024-02-15T00:31:51.000000Z"}, {"uuid": "94bd0cd0-ab84-44cf-bd85-86abc522a8b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48219", "type": "seen", "source": "https://t.me/ctinow/185149", "content": "https://ift.tt/0Flb1Cj\nCVE-2022-48219", "creation_timestamp": "2024-02-15T00:31:50.000000Z"}, {"uuid": "5389dbe4-51d5-404a-aa8c-6f0e3565280e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://t.me/ctinow/180718", "content": "https://ift.tt/Dvtk189\nCVE-2022-48174 | Oracle Communications Cloud Native Core Network Function Cloud Native Environment OSO out-of-bounds write", "creation_timestamp": "2024-02-07T14:46:51.000000Z"}, {"uuid": "471eaf43-3430-4c0d-b4a0-ca979b1a1bf5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48623", "type": "seen", "source": "https://t.me/ctinow/183614", "content": "https://ift.tt/pgIy2q7\nCVE-2022-48623", "creation_timestamp": "2024-02-13T06:21:58.000000Z"}, {"uuid": "97d9da8d-f8fd-4079-a7a1-f75f11002a0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48620", "type": "seen", "source": "https://t.me/ctinow/177941", "content": "https://ift.tt/hb6iQHs\nCVE-2022-48620 | uev up to 2.4.0 epoll_wait maxevents buffer overflow (Issue 27)", "creation_timestamp": "2024-02-02T07:36:40.000000Z"}, {"uuid": "ed163965-4bca-4a08-82b7-b5f89aec1f96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48622", "type": "seen", "source": "https://t.me/ctinow/178227", "content": "https://ift.tt/YnGzf64\nCVE-2022-48622 Exploit", "creation_timestamp": "2024-02-02T19:16:58.000000Z"}, {"uuid": "d575a13f-6fe0-4ebe-8390-70b3f51c3c18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48622", "type": "seen", "source": "https://t.me/ctinow/176484", "content": "https://ift.tt/gOjfEkw\nCVE-2022-48622", "creation_timestamp": "2024-01-31T05:37:04.000000Z"}, {"uuid": "542b2594-2de2-473a-b0bd-4d9c5e69b56d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "https://t.me/ctinow/177091", "content": "https://ift.tt/pU6P3GO\nCVE-2022-48618 Exploitation", "creation_timestamp": "2024-01-31T21:17:14.000000Z"}, {"uuid": "a92f5620-9ccb-4a3c-b7ba-582dc8a08e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48577", "type": "seen", "source": "https://t.me/ctinow/169786", "content": "https://ift.tt/Wzbf13F\nCVE-2022-48577 | Apple macOS APFS Privilege Escalation", "creation_timestamp": "2024-01-18T15:47:11.000000Z"}, {"uuid": "82c58463-a60b-4447-aca4-e1265b6332f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48504", "type": "seen", "source": "https://t.me/ctinow/169889", "content": "https://ift.tt/Iq2YP67\nCVE-2022-48504 | Apple macOS Find My Privilege Escalation", "creation_timestamp": "2024-01-18T19:26:48.000000Z"}, {"uuid": "8e48e228-3a94-4549-8e24-54c3f0a31442", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "https://t.me/ctinow/174596", "content": "https://ift.tt/ubcR64G\nCVE-2022-48618 | Apple macOS improper authentication", "creation_timestamp": "2024-01-27T03:06:22.000000Z"}, {"uuid": "afd6fff8-d320-46da-90ff-64ef63b50524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "https://t.me/ctinow/174595", "content": "https://ift.tt/BzqUenE\nCVE-2022-48618 | Apple tvOS improper authentication", "creation_timestamp": "2024-01-27T03:06:21.000000Z"}, {"uuid": "f8c57696-dca7-4cf1-a9bb-8d5a80eb9425", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "https://t.me/ctinow/174590", "content": "https://ift.tt/tA2f6xF\nCVE-2022-48618 | Apple iOS/iPadOS improper authentication", "creation_timestamp": "2024-01-27T02:31:56.000000Z"}, {"uuid": "52070f9b-64ab-45a1-a67d-2b8aa3838ca3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "https://t.me/ctinow/174594", "content": "https://ift.tt/I9u6QWo\nCVE-2022-48618 | Apple watchOS improper authentication", "creation_timestamp": "2024-01-27T03:06:20.000000Z"}, {"uuid": "179e82e8-393e-4a71-aa07-4c49cb799a42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48622", "type": "seen", "source": "https://t.me/ctinow/174107", "content": "https://ift.tt/WqdFXAS\nCVE-2022-48622", "creation_timestamp": "2024-01-26T10:31:20.000000Z"}, {"uuid": "f4bea0be-3259-4b74-82d3-5f5c3561a88f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48620", "type": "seen", "source": "https://t.me/ctinow/167068", "content": "https://ift.tt/s5EQWZb\nCVE-2022-48620", "creation_timestamp": "2024-01-12T05:26:21.000000Z"}, {"uuid": "fd9c1d88-9087-494d-9d03-89f27ae0efef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48619", "type": "seen", "source": "https://t.me/ctinow/167052", "content": "https://ift.tt/jaKW6wy\nCVE-2022-48619", "creation_timestamp": "2024-01-12T04:21:29.000000Z"}, {"uuid": "f1235932-6715-4e11-9ea6-23af86861817", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48614", "type": "seen", "source": "https://t.me/ctinow/161296", "content": "https://ift.tt/HJoIAX1\nCVE-2022-48614 | Semantic MediaWiki up to 4.0.1 Special:Ask cross site scripting (Issue 5262)", "creation_timestamp": "2024-01-01T12:36:50.000000Z"}, {"uuid": "93f32071-2668-4706-b085-f16daca8aaae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48619", "type": "seen", "source": "https://t.me/ctinow/167106", "content": "https://ift.tt/TwJivta\nCVE-2022-48619", "creation_timestamp": "2024-01-12T07:41:35.000000Z"}, {"uuid": "c18f208d-2b91-4ae8-9b41-ddb5dc7b706b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48321", "type": "seen", "source": "https://t.me/ctinow/164843", "content": "https://ift.tt/1QJ3mo9\nCVE-2022-48321 Exploit", "creation_timestamp": "2024-01-09T08:16:08.000000Z"}, {"uuid": "963145a0-2a55-4836-8a7d-b84c3093c05f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "seen", "source": "https://t.me/ctinow/165252", "content": "https://ift.tt/rmC6qal\nCVE-2022-48618", "creation_timestamp": "2024-01-09T19:26:26.000000Z"}, {"uuid": "fafef2bb-ee80-4aa8-8be4-ef49a8684e93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48616", "type": "seen", "source": "https://t.me/ctinow/161632", "content": "https://ift.tt/HR6fweq\nCVE-2022-48616 | Huawei AR6000 os command injection", "creation_timestamp": "2024-01-02T10:06:52.000000Z"}, {"uuid": "a0596a31-06ab-493b-9102-25a2fbd455e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48475", "type": "seen", "source": "https://t.me/cibsecurity/70254", "content": "\u203c CVE-2022-48475 \u203c\n\nBuffer Overflow vulnerability in Control de Ciber version 1.650, in the printing function. Sending a modified request by the attacker could cause a Buffer Overflow when the adminitrator tries to accept or delete the print query created by the request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:52.000000Z"}, {"uuid": "c414acf8-3261-4ecc-b33c-06da9e641959", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4896", "type": "seen", "source": "https://t.me/cibsecurity/70252", "content": "\u203c CVE-2022-4896 \u203c\n\nCyber Control, in its 1.650 version, is affected by a vulnerability\u00c2\u00a0in the generation on the server of pop-up windows with the messages \"PNTMEDIDAS\", \"PEDIR\", \"HAYDISCOA\" or \"SPOOLER\". A complete denial of service can be achieved by sending multiple requests simultaneously on a core.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-12T12:22:51.000000Z"}, {"uuid": "0ebd0467-1d6f-4bf9-9d7e-fe955e0a9ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48464", "type": "seen", "source": "https://t.me/ctinow/158433", "content": "https://ift.tt/M7sSQiU\nCVE-2022-48464 | Unisoc S8000 Wifi Service out-of-bounds write", "creation_timestamp": "2023-12-22T15:23:34.000000Z"}, {"uuid": "da0c04f6-8bbc-4704-a0bc-a60045480793", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48462", "type": "seen", "source": "https://t.me/ctinow/158432", "content": "https://ift.tt/9tYsNuQ\nCVE-2022-48462 | Unisoc S8000 Wifi Service out-of-bounds write", "creation_timestamp": "2023-12-22T15:23:33.000000Z"}, {"uuid": "2bfb6032-0f30-4b97-9db1-6d9872e950c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48565", "type": "seen", "source": "https://t.me/cibsecurity/68996", "content": "\u203c CVE-2022-48565 \u203c\n\nAn XML External Entity (XXE) issue was discovered in Python through 3.9.1. The plistlib module no longer accepts entity declarations in XML plist files to avoid XML vulnerabilities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:24:56.000000Z"}, {"uuid": "e6e92c52-d340-45f6-bd94-68841a06bb36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48522", "type": "seen", "source": "https://t.me/cibsecurity/68995", "content": "\u203c CVE-2022-48522 \u203c\n\nIn Perl 5.34.0, function S_find_uninit_var in sv.c has a stack-based crash that can lead to remote code execution or local privilege escalation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:24:54.000000Z"}, {"uuid": "0d858c9f-072f-4e3a-ad0c-4f08b80e3d05", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48065", "type": "seen", "source": "https://t.me/cibsecurity/68964", "content": "\u203c CVE-2022-48065 \u203c\n\nGNU Binutils before 2.40 was discovered to contain a memory leak vulnerability var the function find_abstract_instance in dwarf2.c.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:18:09.000000Z"}, {"uuid": "918efee9-e154-4b44-9a09-e65c42eabf6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48538", "type": "seen", "source": "https://t.me/cibsecurity/69021", "content": "\u203c CVE-2022-48538 \u203c\n\nIn Cacti 1.2.19, there is an authentication bypass in the web login functionality because of improper validation in the PHP code: cacti_ldap_auth() allows a zero as the password.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:28:07.000000Z"}, {"uuid": "e08b6d44-3c38-44c2-b1e6-6c359bbfe0c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48570", "type": "seen", "source": "https://t.me/cibsecurity/68934", "content": "\u203c CVE-2022-48570 \u203c\n\nCrypto++ through 8.4 contains a timing side channel in ECDSA signature generation. Function FixedSizeAllocatorWithCleanup could write to memory outside of the allocation if the allocated memory was not 16-byte aligned. NOTE: this issue exists because the CVE-2019-14318 fix was intentionally removed for functionality reasons.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:11:51.000000Z"}, {"uuid": "10da094d-641f-4c6d-9d71-c5b2928bcc14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48547", "type": "seen", "source": "https://t.me/cibsecurity/68979", "content": "\u203c CVE-2022-48547 \u203c\n\nA reflected cross-site scripting (XSS) vulnerability in Cacti 0.8.7g and earlier allows unauthenticated remote attackers to inject arbitrary web script or HTML in the \"ref\" parameter at auth_changepassword.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:21:59.000000Z"}, {"uuid": "0853b7ab-8995-40b2-91e6-2d99fc40a5d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48571", "type": "seen", "source": "https://t.me/cibsecurity/68955", "content": "\u203c CVE-2022-48571 \u203c\n\nmemcached 1.6.7 allows a Denial of Service via multi-packet uploads in UDP.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-22T22:17:57.000000Z"}, {"uuid": "baeb4c09-1a03-45bf-a021-7534b0eb4b1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48605", "type": "seen", "source": "https://t.me/cibsecurity/70984", "content": "\u203c CVE-2022-48605 \u203c\n\nInput verification vulnerability in the fingerprint module. Successful exploitation of this vulnerability will affect confidentiality, integrity, and availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-09-29T18:05:25.000000Z"}, {"uuid": "7f1d8347-227f-4acd-8c33-a0658304e2db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48517", "type": "seen", "source": "https://t.me/cibsecurity/66076", "content": "\u203c CVE-2022-48517 \u203c\n\nUnauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:59.000000Z"}, {"uuid": "0fcce97f-bf2e-4621-a31e-50774f0bf70c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48520", "type": "seen", "source": "https://t.me/cibsecurity/66075", "content": "\u203c CVE-2022-48520 \u203c\n\nUnauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:58.000000Z"}, {"uuid": "c4bb8152-64be-4d14-8e0c-a0cb5e3a996e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48508", "type": "seen", "source": "https://t.me/cibsecurity/66074", "content": "\u203c CVE-2022-48508 \u203c\n\nInappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:57.000000Z"}, {"uuid": "9b9f7004-0597-4388-ad2c-e99ca7f9e435", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48519", "type": "seen", "source": "https://t.me/cibsecurity/66080", "content": "\u203c CVE-2022-48519 \u203c\n\nUnauthorized access vulnerability in the SystemUI module. Successful exploitation of this vulnerability may affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:26:06.000000Z"}, {"uuid": "e9c6c3ef-e5d1-41b8-9a62-9c84bf88fbab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4894", "type": "seen", "source": "https://t.me/cibsecurity/68693", "content": "\u203c CVE-2022-4894 \u203c\n\nCertain HP and Samsung Printer software packages may potentially be vulnerable to elevation of privilege due to Uncontrolled Search Path Element.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-17T00:36:46.000000Z"}, {"uuid": "d1a5c1d7-f52e-4712-b6ec-bc7466dc0ad5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48599", "type": "seen", "source": "https://t.me/cibsecurity/68125", "content": "\u203c CVE-2022-48599 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153reporter events type\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:30.000000Z"}, {"uuid": "9e45639d-9e4e-4bbb-9eb0-da6b5f3b10a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48598", "type": "seen", "source": "https://t.me/cibsecurity/68122", "content": "\u203c CVE-2022-48598 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153reporter events type date\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:24.000000Z"}, {"uuid": "fc4b2016-93ce-4afc-86d9-2b808e345897", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "seen", "source": "https://t.me/cibsecurity/68521", "content": "\u203c CVE-2022-48503 \u203c\n\nThe issue was addressed with improved bounds checks. This issue is fixed in tvOS 15.6, watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5, Safari 15.6. Processing web content may lead to arbitrary code execution.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-15T02:25:44.000000Z"}, {"uuid": "5f0397ff-eff0-4772-8c71-98aa7ecb9482", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48509", "type": "seen", "source": "https://t.me/cibsecurity/66078", "content": "\u203c CVE-2022-48509 \u203c\n\nRace condition vulnerability due to multi-thread access to mutually exclusive resources in Huawei Share. Successful exploitation of this vulnerability may cause the program to exit abnormally.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:26:04.000000Z"}, {"uuid": "f115f494-2828-4f98-b0e3-4d72fc6f85f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48592", "type": "seen", "source": "https://t.me/cibsecurity/68126", "content": "\u203c CVE-2022-48592 \u203c\n\nA SQL injection vulnerability exists in the vendor_country parameter of the \u00e2\u20ac\u0153vendor print report\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:31.000000Z"}, {"uuid": "3934d662-1c8c-4298-9c76-d4c077c802a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48589", "type": "seen", "source": "https://t.me/cibsecurity/68116", "content": "\u203c CVE-2022-48589 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153reporting job editor\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:16.000000Z"}, {"uuid": "a13085b3-c643-467b-97c6-30359ba18c24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48591", "type": "seen", "source": "https://t.me/cibsecurity/68120", "content": "\u203c CVE-2022-48591 \u203c\n\nA SQL injection vulnerability exists in the vendor_state parameter of the \u00e2\u20ac\u0153vendor print report\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:23.000000Z"}, {"uuid": "ee56e501-f685-41e3-84cb-627597f4acd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48595", "type": "seen", "source": "https://t.me/cibsecurity/68119", "content": "\u203c CVE-2022-48595 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153ticket template watchers\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:22.000000Z"}, {"uuid": "fb9f5a08-1954-46b3-81c8-e9457d110f31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48593", "type": "seen", "source": "https://t.me/cibsecurity/68118", "content": "\u203c CVE-2022-48593 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153topology data service\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:18.000000Z"}, {"uuid": "75e46b6a-28ef-412e-885b-0008b51faf11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48596", "type": "seen", "source": "https://t.me/cibsecurity/68114", "content": "\u203c CVE-2022-48596 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153ticket queue watchers\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:14.000000Z"}, {"uuid": "966b5935-ce96-4537-bd1b-1d48821e4f73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48585", "type": "seen", "source": "https://t.me/cibsecurity/68112", "content": "\u203c CVE-2022-48585 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153admin brand portal\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:09.000000Z"}, {"uuid": "d2a890b3-dfe2-411b-a2cc-c226ebac7409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48580", "type": "seen", "source": "https://t.me/cibsecurity/68121", "content": "\u203c CVE-2022-48580 \u203c\n\nA command injection vulnerability exists in the ARP ping device tool feature of the ScienceLogic SL1 that takes unsanitized user controlled input and passes it directly to a shell command. This allows for\u00c2\u00a0the injection of arbitrary commands to the underlying operating system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:24.000000Z"}, {"uuid": "87722cb1-d770-41ec-ab6a-1d4973b67742", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48587", "type": "seen", "source": "https://t.me/cibsecurity/68111", "content": "\u203c CVE-2022-48587 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153schedule editor\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:08.000000Z"}, {"uuid": "ec5675a5-c4c7-43c7-87d1-9d1ad931fc64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48600", "type": "seen", "source": "https://t.me/cibsecurity/68110", "content": "\u203c CVE-2022-48600 \u203c\n\nA SQL injection vulnerability exists in the \u00e2\u20ac\u0153notes view\u00e2\u20ac\ufffd feature of the ScienceLogic SL1 that takes unsanitized user?controlled input and passes it directly to a SQL query. This allows for the injection of arbitrary SQL before being executed against the database.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-08-09T22:15:07.000000Z"}, {"uuid": "5114efc8-1c01-4240-a1b8-a92cd2277f02", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48518", "type": "seen", "source": "https://t.me/cibsecurity/66064", "content": "\u203c CVE-2022-48518 \u203c\n\nVulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerability may cause malicious apps to start upon power-on by spoofing the package names of apps in the startup trustlist, which affects system performance.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:42.000000Z"}, {"uuid": "9cce5636-f63d-4df7-ae80-93732984dbed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48514", "type": "seen", "source": "https://t.me/cibsecurity/66063", "content": "\u203c CVE-2022-48514 \u203c\n\nThe Sepolicy module has inappropriate permission control on the use of Netlink.Successful exploitation of this vulnerability may affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:41.000000Z"}, {"uuid": "fa222766-2e1e-45d6-bac4-6099ca346372", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48507", "type": "seen", "source": "https://t.me/cibsecurity/66070", "content": "\u203c CVE-2022-48507 \u203c\n\nVulnerability of identity verification being bypassed in the storage module. Successful exploitation of this vulnerability may affect service confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:50.000000Z"}, {"uuid": "b3144eb1-0815-451f-9bcc-da36487386f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48516", "type": "seen", "source": "https://t.me/cibsecurity/66079", "content": "\u203c CVE-2022-48516 \u203c\n\nVulnerability that a unique value can be obtained by a third-party app in the DSoftBus module. Successful exploitation of this vulnerability will affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:26:05.000000Z"}, {"uuid": "ec1bd1ab-9a65-44cc-8b51-750c8be6e314", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48510", "type": "seen", "source": "https://t.me/cibsecurity/66072", "content": "\u203c CVE-2022-48510 \u203c\n\nInput verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:52.000000Z"}, {"uuid": "5673417e-0d04-4d2f-b912-310dfcf640a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48515", "type": "seen", "source": "https://t.me/cibsecurity/66068", "content": "\u203c CVE-2022-48515 \u203c\n\nVulnerability of inappropriate permission control in Nearby. Successful exploitation of this vulnerability may affect service confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:49.000000Z"}, {"uuid": "466616e4-d4d2-44bf-af05-0b30bc6b5ad7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48512", "type": "seen", "source": "https://t.me/cibsecurity/66066", "content": "\u203c CVE-2022-48512 \u203c\n\nUse After Free (UAF) vulnerability in the Vdecoderservice service. Successful exploitation of this vulnerability may cause the image decoding feature to perform abnormally.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-06T16:25:44.000000Z"}, {"uuid": "1fc2a6a7-ca70-4775-aa1f-906992d6a147", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4888", "type": "seen", "source": "https://t.me/cibsecurity/67443", "content": "\u203c CVE-2022-4888 \u203c\n\nThe Checkout Fields Manager WordPress plugin before 1.0.2, Abandoned Cart Recovery WordPress plugin before 1.2.5, Custom Fields for WooCommerce WordPress plugin before 1.0.4, Custom Order Number WordPress plugin through 1.0.1, Custom Registration Forms Builder WordPress plugin before 1.0.2, Advanced Free Gifts WordPress plugin before 1.0.2, Gift Registry for WooCommerce WordPress plugin through 1.0.1, Image Watermark for WooCommerce WordPress plugin before 1.0.1, Order Approval for WooCommerce WordPress plugin before 1.1.0, Order Tracking for WooCommerce WordPress plugin before 1.0.2, Price Calculator for WooCommerce WordPress plugin through 1.0.3, Product Dynamic Pricing and Discounts WordPress plugin through 1.0.6, Product Labels and Stickers WordPress plugin through 1.0.1 have flawed CSRF checks in various places, which could allow attackers to make logged in users perform unwanted actions\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-31T14:37:39.000000Z"}, {"uuid": "b8c37e0c-30c9-460d-99a6-7d6471da2c8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48489", "type": "seen", "source": "https://t.me/cibsecurity/65347", "content": "\u203c CVE-2022-48489 \u203c\n\nConfiguration defects in the secure OS module.Successful exploitation of this vulnerability will affect availability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-19T20:25:38.000000Z"}, {"uuid": "b97be57b-ac87-4dff-8ee4-9439ec9abf4f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48441", "type": "seen", "source": "https://t.me/cibsecurity/64998", "content": "\u203c CVE-2022-48441 \u203c\n\nIn dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-06T12:29:09.000000Z"}, {"uuid": "a058d204-33a9-42cd-9db4-6930f967e91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48181", "type": "seen", "source": "https://t.me/cibsecurity/64994", "content": "\u203c CVE-2022-48181 \u203c\n\nAn ErrorMessage driver stack-based buffer overflow vulnerability in BIOS of some ThinkPad models could allow an attacker with local access to elevate their privileges and execute arbitrary code.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-06T02:28:56.000000Z"}, {"uuid": "cc77648f-5601-48a8-8c28-8518ba522107", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48450", "type": "seen", "source": "https://t.me/cibsecurity/66512", "content": "\u203c CVE-2022-48450 \u203c\n\nIn bluetooth service, there is a possible missing params check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T12:48:37.000000Z"}, {"uuid": "0c7e4e4b-e283-41b5-aca4-755bb7215e8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48521", "type": "seen", "source": "https://t.me/cibsecurity/66451", "content": "\u203c CVE-2022-48521 \u203c\n\nAn issue was discovered in OpenDKIM through 2.10.3, and 2.11.x through 2.11.0-Beta2. It fails to keep track of ordinal numbers when removing fake Authentication-Results header fields, which allows a remote attacker to craft an e-mail message with a fake sender address such that programs that rely on Authentication-Results from OpenDKIM will treat the message as having a valid DKIM signature when in fact it has none.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-07-12T00:29:50.000000Z"}, {"uuid": "f6dbb99d-0479-49a8-bfcd-02512622c1e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48505", "type": "seen", "source": "https://t.me/cibsecurity/65602", "content": "\u203c CVE-2022-48505 \u203c\n\nThis issue was addressed with improved data protection. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-28T07:17:38.000000Z"}, {"uuid": "055a5d02-021e-404f-8adf-712a136c9de6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48334", "type": "seen", "source": "https://t.me/cibsecurity/65525", "content": "\u203c CVE-2022-48334 \u203c\n\nWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys total_len+file_name_len integer overflow and resultant buffer overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T20:58:05.000000Z"}, {"uuid": "e0d649e4-5bd9-47dc-8ca9-bcc7094edf61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48332", "type": "seen", "source": "https://t.me/cibsecurity/65523", "content": "\u203c CVE-2022-48332 \u203c\n\nWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys file_name_len integer overflow and resultant buffer overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T20:55:07.000000Z"}, {"uuid": "c8687cf9-fd38-4882-92b4-47d9ac540e62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48335", "type": "seen", "source": "https://t.me/cibsecurity/65522", "content": "\u203c CVE-2022-48335 \u203c\n\nWidevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagVerifyProvisioning integer overflow and resultant buffer overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T20:55:06.000000Z"}, {"uuid": "dc00c048-9fcc-4192-8939-8ecd6ae291d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48336", "type": "seen", "source": "https://t.me/cibsecurity/65521", "content": "\u203c CVE-2022-48336 \u203c\n\nWidevine Trusted Application (TA) 5.0.0 through 7.1.1 has a PRDiagParseAndStoreData integer overflow and resultant buffer overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T20:55:05.000000Z"}, {"uuid": "b4a90b32-a154-4beb-af3a-01092509124a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48333", "type": "seen", "source": "https://t.me/cibsecurity/65520", "content": "\u203c CVE-2022-48333 \u203c\n\nWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_verify_keys prefix_len+feature_name_len integer overflow and resultant buffer overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T20:55:04.000000Z"}, {"uuid": "f9982bdb-3d32-4eeb-9389-6505b34755a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48331", "type": "seen", "source": "https://t.me/cibsecurity/65517", "content": "\u203c CVE-2022-48331 \u203c\n\nWidevine Trusted Application (TA) 5.0.0 through 5.1.1 has a drm_save_keys feature_name_len integer overflow and resultant buffer overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-06-26T20:52:03.000000Z"}, {"uuid": "17a1a989-b594-4133-907a-84d96875b822", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48481", "type": "seen", "source": "https://t.me/cibsecurity/63037", "content": "\u203c CVE-2022-48481 \u203c\n\nIn JetBrains Toolbox App before 1.28 a DYLIB injection on macOS was possible\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-28T14:27:13.000000Z"}, {"uuid": "65a7ef68-be3b-4a14-99b0-6a36b2b33c6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48476", "type": "seen", "source": "https://t.me/cibsecurity/62688", "content": "\u203c CVE-2022-48476 \u203c\n\nIn JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T16:19:12.000000Z"}, {"uuid": "64be5316-b34f-4542-8c01-aac0bf2fdf5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48477", "type": "seen", "source": "https://t.me/cibsecurity/62687", "content": "\u203c CVE-2022-48477 \u203c\n\nIn JetBrains Hub before 2023.1.15725 SSRF protection in Auth Module integration was missing\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-24T16:19:11.000000Z"}, {"uuid": "27a27231-29ef-4f3e-9361-7b545f646d4d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48150", "type": "seen", "source": "https://t.me/cibsecurity/62613", "content": "\u203c CVE-2022-48150 \u203c\n\nShopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-21T18:31:54.000000Z"}, {"uuid": "b41b5309-6b75-4504-9790-a5c82635292c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48178", "type": "seen", "source": "https://t.me/cibsecurity/62217", "content": "\u203c CVE-2022-48178 \u203c\n\nX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Create Action function, aka an index.php/actions/update URI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T07:26:38.000000Z"}, {"uuid": "b902f559-a0e4-4302-8049-d6c0395ea9a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48177", "type": "seen", "source": "https://t.me/cibsecurity/62210", "content": "\u203c CVE-2022-48177 \u203c\n\nX2CRM Open Source Sales CRM 6.6 and 6.9 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the adin/importModels Import Records Model field (model parameter). This vulnerability allows attackers to create malicious JavaScript that will be executed by the victim user's browser.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-15T07:26:28.000000Z"}, {"uuid": "eea41097-a498-4679-9a41-78d0a8733690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48468", "type": "seen", "source": "https://t.me/cibsecurity/62098", "content": "\u203c CVE-2022-48468 \u203c\n\nprotobuf-c before 1.4.1 has an unsigned integer overflow in parse_required_member.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-14T00:25:34.000000Z"}, {"uuid": "5f57c74d-14e9-45f8-b9d9-96875d24f976", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48437", "type": "seen", "source": "https://t.me/cibsecurity/61961", "content": "\u203c CVE-2022-48437 \u203c\n\nAn issue was discovered in x509/x509_verify.c in LibreSSL before 3.6.1, and in OpenBSD before 7.2 errata 001. x509_verify_ctx_add_chain does not store errors that occur during leaf certificate verification, and therefore an incorrect error is returned. This behavior occurs when there is an installed verification callback that instructs the verifier to continue upon detecting an invalid certificate.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-12T12:23:59.000000Z"}, {"uuid": "81f7df37-33b2-4125-879d-2ed9b77f435d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4827", "type": "seen", "source": "https://t.me/cibsecurity/61764", "content": "\u203c CVE-2022-4827 \u203c\n\nThe WP Tiles WordPress plugin through 1.1.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-10T18:36:06.000000Z"}, {"uuid": "eb38930c-a0d0-44e3-81b4-2edef384641e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48377", "type": "seen", "source": "https://t.me/cibsecurity/63557", "content": "\u203c CVE-2022-48377 \u203c\n\nIn dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:09.000000Z"}, {"uuid": "96501d6c-0f14-4369-b612-7cec5fc166af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48383", "type": "seen", "source": "https://t.me/cibsecurity/63555", "content": "\u203c CVE-2022-48383 \u203c\n\n.In srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:08.000000Z"}, {"uuid": "f299b88a-a815-41e4-9ab9-2167b4c64d50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48247", "type": "seen", "source": "https://t.me/cibsecurity/63554", "content": "\u203c CVE-2022-48247 \u203c\n\nIn audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:07.000000Z"}, {"uuid": "302d7ef5-5155-422f-8905-498165960486", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48250", "type": "seen", "source": "https://t.me/cibsecurity/63553", "content": "\u203c CVE-2022-48250 \u203c\n\nIn audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:06.000000Z"}, {"uuid": "405b4c11-5f71-45c3-a3cf-0a875b7e557d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48374", "type": "seen", "source": "https://t.me/cibsecurity/63572", "content": "\u203c CVE-2022-48374 \u203c\n\nIn tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:32.000000Z"}, {"uuid": "d1fe1f3d-f065-4003-9d3d-77024441e073", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48370", "type": "seen", "source": "https://t.me/cibsecurity/63571", "content": "\u203c CVE-2022-48370 \u203c\n\nIn dialer service, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:31.000000Z"}, {"uuid": "e7354eaf-f650-4328-9b6f-1ef2cfc6b865", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48389", "type": "seen", "source": "https://t.me/cibsecurity/63570", "content": "\u203c CVE-2022-48389 \u203c\n\nIn modem control device, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:30.000000Z"}, {"uuid": "12d3f2fc-ce9f-45eb-86eb-5c88f4614041", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48384", "type": "seen", "source": "https://t.me/cibsecurity/63567", "content": "\u203c CVE-2022-48384 \u203c\n\nIn srtd service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:24.000000Z"}, {"uuid": "b256082b-c08f-4b19-aadc-21183a43c632", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48376", "type": "seen", "source": "https://t.me/cibsecurity/63562", "content": "\u203c CVE-2022-48376 \u203c\n\nIn dialer service, there is a possible missing permission check. This could lead to local denial of service with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:17.000000Z"}, {"uuid": "2c1084aa-71d3-4a16-9aef-8281ebc73591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48385", "type": "seen", "source": "https://t.me/cibsecurity/63563", "content": "\u203c CVE-2022-48385 \u203c\n\nIn cp_dump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:21.000000Z"}, {"uuid": "19c7802b-5853-4df8-b669-2fe6d146de4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48388", "type": "seen", "source": "https://t.me/cibsecurity/63561", "content": "\u203c CVE-2022-48388 \u203c\n\nIn powerEx service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:16.000000Z"}, {"uuid": "568f97b3-4fb2-409c-aefd-18193e25948c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48248", "type": "seen", "source": "https://t.me/cibsecurity/63560", "content": "\u203c CVE-2022-48248 \u203c\n\nIn audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:15.000000Z"}, {"uuid": "c2201996-094f-4d60-b1c2-71f1dac4e419", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48373", "type": "seen", "source": "https://t.me/cibsecurity/63559", "content": "\u203c CVE-2022-48373 \u203c\n\nIn tee service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:14.000000Z"}, {"uuid": "32c9a981-b434-40d6-aa76-0486ff59bf16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48386", "type": "seen", "source": "https://t.me/cibsecurity/63558", "content": "\u203c CVE-2022-48386 \u203c\n\nthe apipe driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:43:13.000000Z"}, {"uuid": "a76d7172-de4e-42cd-866f-b112ef2fa522", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4899", "type": "seen", "source": "https://t.me/cibsecurity/61286", "content": "\u203c CVE-2022-4899 \u203c\n\nA vulnerability was found in zstd v1.4.10, where an attacker can supply empty string as an argument to the command line tool to cause buffer overrun.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-01T00:22:24.000000Z"}, {"uuid": "220d6a83-d35c-4dca-ba31-92912d483dfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48243", "type": "seen", "source": "https://t.me/cibsecurity/63546", "content": "\u203c CVE-2022-48243 \u203c\n\nIn audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:27.000000Z"}, {"uuid": "21fcecf9-32d6-4446-9f68-add3e2da3780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48244", "type": "seen", "source": "https://t.me/cibsecurity/63545", "content": "\u203c CVE-2022-48244 \u203c\n\nIn audio service, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:26.000000Z"}, {"uuid": "a5f31e77-f9e4-43f0-9486-bd4bba7eea17", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48239", "type": "seen", "source": "https://t.me/cibsecurity/63537", "content": "\u203c CVE-2022-48239 \u203c\n\nIn camera driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:13.000000Z"}, {"uuid": "0fefa997-d165-41ce-94a3-de7c5f25fc6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48235", "type": "seen", "source": "https://t.me/cibsecurity/63535", "content": "\u203c CVE-2022-48235 \u203c\n\nIn MP3 encoder, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-05-09T07:38:11.000000Z"}, {"uuid": "0e442e9b-7345-4863-83a8-f1c5b6751320", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48432", "type": "seen", "source": "https://t.me/cibsecurity/61004", "content": "\u203c CVE-2022-48432 \u203c\n\nIn JetBrains IntelliJ IDEA before 2023.1 the bundled version of Chromium wasn't sandboxed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T16:15:21.000000Z"}, {"uuid": "1a1c0004-843f-4052-9abf-298057e91a0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48431", "type": "seen", "source": "https://t.me/cibsecurity/61003", "content": "\u203c CVE-2022-48431 \u203c\n\nIn JetBrains IntelliJ IDEA before 2023.1 in some cases, Gradle and Maven projects could be imported without the \u00e2\u20ac\u0153Trust Project\u00e2\u20ac\ufffd confirmation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T16:15:20.000000Z"}, {"uuid": "77006ab8-f2b4-49a4-b4e3-ddc3388cf0e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48433", "type": "seen", "source": "https://t.me/cibsecurity/61010", "content": "\u203c CVE-2022-48433 \u203c\n\nIn JetBrains IntelliJ IDEA before 2023.1 the NTLM hash could leak through an API method used in the IntelliJ IDEA built-in web server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T16:15:31.000000Z"}, {"uuid": "6c96b3d4-aba8-4ac6-8230-f451a1e8e6bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48434", "type": "seen", "source": "https://t.me/cibsecurity/61027", "content": "\u203c CVE-2022-48434 \u203c\n\nlibavcodec/pthread_frame.c in FFmpeg before 5.1.2, as used in VLC and other products, leaves stale hwaccel state in worker threads, which allows attackers to trigger a use-after-free and execute arbitrary code in some circumstances (e.g., hardware re-initialization upon a mid-video SPS change when Direct3D11 is used).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T20:15:41.000000Z"}, {"uuid": "0ec3fa99-7a73-4b58-9adf-6b3e6eff6a32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48430", "type": "seen", "source": "https://t.me/cibsecurity/61009", "content": "\u203c CVE-2022-48430 \u203c\n\nIn JetBrains IntelliJ IDEA before 2023.1 file content could be disclosed via an external stylesheet path in Markdown preview.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-29T16:15:30.000000Z"}, {"uuid": "b08908cc-cff5-4752-89f2-56b1c6c9a5a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48291", "type": "seen", "source": "https://t.me/cibsecurity/60845", "content": "\u203c CVE-2022-48291 \u203c\n\nThe Bluetooth module has an authentication bypass vulnerability in the pairing process. Successful exploitation of this vulnerability may affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:26:15.000000Z"}, {"uuid": "636a0e72-5972-4fb5-a41b-8398cf264b35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48354", "type": "seen", "source": "https://t.me/cibsecurity/60843", "content": "\u203c CVE-2022-48354 \u203c\n\nThe Bluetooth module has a heap out-of-bounds write vulnerability. Successful exploitation of this vulnerability can cause the Bluetooth process to crash.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:26:13.000000Z"}, {"uuid": "4e2c58e7-e0ca-4cb9-abb1-70db776c8e45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48356", "type": "seen", "source": "https://t.me/cibsecurity/60842", "content": "\u203c CVE-2022-48356 \u203c\n\nThe facial recognition module has a vulnerability in input parameter verification. Successful exploitation of this vulnerability may cause failed facial recognition.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:26:12.000000Z"}, {"uuid": "246a49e7-9cfe-4cd9-a709-ea727c7f2741", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48361", "type": "seen", "source": "https://t.me/cibsecurity/60841", "content": "\u203c CVE-2022-48361 \u203c\n\nThe Always On Display (AOD) has a path traversal vulnerability in theme files. Successful exploitation of this vulnerability may cause a failure in reading AOD theme resources.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:26:10.000000Z"}, {"uuid": "40f786b7-0fa2-4732-acd5-2565919a9057", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48358", "type": "seen", "source": "https://t.me/cibsecurity/60859", "content": "\u203c CVE-2022-48358 \u203c\n\nThe BatteryHealthActivity has a redirection vulnerability. Successful exploitation of this vulnerability by a malicious app can cause service exceptions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:26:33.000000Z"}, {"uuid": "435661bf-9075-4ee2-b5d1-904acda37771", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48426", "type": "seen", "source": "https://t.me/cibsecurity/60810", "content": "\u203c CVE-2022-48426 \u203c\n\nIn JetBrains TeamCity before 2022.10.3 stored XSS in Perforce connection settings was possible\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:11.000000Z"}, {"uuid": "2e88cdd3-1502-41de-b5c9-48ad06d74c5e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48346", "type": "seen", "source": "https://t.me/cibsecurity/60867", "content": "\u203c CVE-2022-48346 \u203c\n\nThe HwContacts module has a logic bypass vulnerability. Successful exploitation of this vulnerability may affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:32:21.000000Z"}, {"uuid": "4338433c-7e56-4dd2-b750-ab898bc7d0e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48357", "type": "seen", "source": "https://t.me/cibsecurity/60861", "content": "\u203c CVE-2022-48357 \u203c\n\nSome products have the double fetch vulnerability. Successful exploitation of this vulnerability may cause denial of service (DoS) attacks to the kernel.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:32:13.000000Z"}, {"uuid": "f3ee3ff8-4ceb-4c35-b5b9-05b4fe5c416c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48347", "type": "seen", "source": "https://t.me/cibsecurity/60858", "content": "\u203c CVE-2022-48347 \u203c\n\nThe MediaProvider module has a vulnerability in permission verification. Successful exploitation of this vulnerability may affect confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-28T02:26:32.000000Z"}, {"uuid": "5b5aa584-6e5b-41ad-9934-9d8c6e3d4f12", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48429", "type": "seen", "source": "https://t.me/cibsecurity/60817", "content": "\u203c CVE-2022-48429 \u203c\n\nIn JetBrains Hub before 2022.3.15573, 2022.2.15572, 2022.1.15583 reflected XSS in dashboards was possible\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-27T20:50:18.000000Z"}, {"uuid": "be177496-73e6-4c13-98da-eafbd7acbadb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48424", "type": "seen", "source": "https://t.me/cibsecurity/60289", "content": "\u203c CVE-2022-48424 \u203c\n\nIn the Linux kernel before 6.1.3, fs/ntfs3/inode.c does not validate the attribute name offset. An unhandled page fault may occur.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-19T07:02:59.000000Z"}, {"uuid": "5ca959bb-a892-4079-a6d9-b3e1f0eefcaa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48082", "type": "seen", "source": "https://t.me/cibsecurity/57417", "content": "\u203c CVE-2022-48082 \u203c\n\nEasyone CRM v5.50.02 was discovered to contain a SQL Injection vulnerability via the text parameter at /Services/Misc.asmx/SearchTag.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:08.000000Z"}, {"uuid": "34d33775-c899-4fa3-b948-82f83aa1207f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48111", "type": "seen", "source": "https://t.me/cibsecurity/59790", "content": "\u203c CVE-2022-48111 \u203c\n\nA cross-site scripting (XSS) vulnerability in the check_login function of SIPE s.r.l WI400 between version 8 and 11 included allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the f parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-10T18:21:09.000000Z"}, {"uuid": "82b32c16-9717-4158-84f3-4079d9601bae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48364", "type": "seen", "source": "https://t.me/cibsecurity/59480", "content": "\u203c CVE-2022-48364 \u203c\n\nThe undo_mark_statuses_as_sensitive method in app/services/approve_appeal_service.rb in Mastodon 3.5.x before 3.5.3 does not use the server's representative account, resulting in moderator identity disclosure when a moderator approves the appeal of a user whose status update was marked as sensitive.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-06T16:12:54.000000Z"}, {"uuid": "8b418504-e783-4b3a-9fbe-846bcc2b285a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4895", "type": "seen", "source": "https://t.me/cibsecurity/59084", "content": "\u203c CVE-2022-4895 \u203c\n\nImproper Certificate Validation vulnerability in Hitachi Infrastructure Analytics Advisor on Linux (Analytics probe component), Hitachi Ops Center Analyzer on Linux (Analyzer probe component) allows Man in the Middle Attack.This issue affects Hitachi Infrastructure Analytics Advisor: from 2.0.0-00 through 4.4.0-00; Hitachi Ops Center Analyzer: from 10.0.0-00 before 10.9.1-00.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-28T07:27:20.000000Z"}, {"uuid": "4682d0de-3c77-448e-8d0b-1fd0860645a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48260", "type": "seen", "source": "https://t.me/cibsecurity/59029", "content": "\u203c CVE-2022-48260 \u203c\n\nThere is a buffer overflow vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to device service exceptions.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-27T20:41:06.000000Z"}, {"uuid": "2a1246ce-a169-4a2a-9686-0e41142ee829", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48310", "type": "seen", "source": "https://t.me/cibsecurity/59273", "content": "\u203c CVE-2022-48310 \u203c\n\nAn information disclosure vulnerability allows sensitive key material to be included in technical support archives in Sophos Connect versions older than 2.2.90.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T22:33:51.000000Z"}, {"uuid": "d8ce7282-2a06-4058-a608-be9eb0f63d98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48309", "type": "seen", "source": "https://t.me/cibsecurity/59272", "content": "\u203c CVE-2022-48309 \u203c\n\nA CSRF vulnerability allows malicious websites to retrieve logs and technical support archives in Sophos Connect versions older than 2.2.90.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T22:33:51.000000Z"}, {"uuid": "605cd343-609b-4607-9aa9-87341824eee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48227", "type": "seen", "source": "https://t.me/cibsecurity/61410", "content": "\u203c CVE-2022-48227 \u203c\n\nAn issue was discovered in Acuant AsureID Sentinel before 5.2.149. It allows elevation of privileges because it opens Notepad after the installation of AssureID, Identify x64, and Identify x86, aka CORE-7361.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-04-04T20:37:42.000000Z"}, {"uuid": "86c1846e-4145-4b13-b8c9-a7723e1d3f99", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48079", "type": "seen", "source": "https://t.me/cibsecurity/57427", "content": "\u203c CVE-2022-48079 \u203c\n\nMonnai aaPanel host system v1.5 contains an access control issue which allows attackers to escalate privileges and execute arbitrary code via uploading a crafted PHP file to the virtual host directory of the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:19.000000Z"}, {"uuid": "4a231f49-73ba-45ba-857a-ec263ef81bb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48114", "type": "seen", "source": "https://t.me/cibsecurity/57426", "content": "\u203c CVE-2022-48114 \u203c\n\nRuoYi up to v4.7.5 was discovered to contain a SQL injection vulnerability via the component /tool/gen/createTable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:18.000000Z"}, {"uuid": "c47f719b-6951-403f-bfe2-24845c513f04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48130", "type": "seen", "source": "https://t.me/cibsecurity/57423", "content": "\u203c CVE-2022-48130 \u203c\n\nTenda W20E v15.11.0.6 was discovered to contain multiple stack overflows in the function formSetStaticRoute via the parameters staticRouteNet, staticRouteMask, staticRouteGateway, staticRouteWAN.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:15.000000Z"}, {"uuid": "ca10a16c-645b-49be-bb25-227052211f58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48140", "type": "seen", "source": "https://t.me/cibsecurity/57422", "content": "\u203c CVE-2022-48140 \u203c\n\nDedeCMS v5.7.97 was discovered to contain a cross-site scripting (XSS) vulnerability in the component /file_manage_view.php?fmdo=edit&filename.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:14.000000Z"}, {"uuid": "7c548451-e2ca-4000-8870-a08818e260e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48094", "type": "seen", "source": "https://t.me/cibsecurity/57314", "content": "\u203c CVE-2022-48094 \u203c\n\nlmxcms v1.41 was discovered to contain an arbitrary file read vulnerability via TemplateAction.class.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T18:14:08.000000Z"}, {"uuid": "37c5a01a-86ca-4fdf-86f6-ef50b88aa1dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48074", "type": "seen", "source": "https://t.me/cibsecurity/57444", "content": "\u203c CVE-2022-48074 \u203c\n\nAn issue in NoMachine before v8.2.3 allows attackers to execute arbitrary commands via a crafted .nxs file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T12:20:35.000000Z"}, {"uuid": "436947fd-cee8-4ba1-9a4a-9aacbe1115fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48023", "type": "seen", "source": "https://t.me/cibsecurity/57438", "content": "\u203c CVE-2022-48023 \u203c\n\nInsufficient privilege verification in Zammad v5.3.0 allows an authenticated attacker to perform changes on the tags of their customer tickets using the Zammad API. This is now corrected in v5.3.1 so that only agents with write permissions may change ticket tags.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:28.000000Z"}, {"uuid": "fbd4c051-3b34-4890-8a1e-51103496ee0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48022", "type": "seen", "source": "https://t.me/cibsecurity/57435", "content": "\u203c CVE-2022-48022 \u203c\n\nAn issue in the component /api/v1/mentions of Zammad v5.3.0 allows authenticated attackers with agent permissions to view information about tickets they are not authorized to see.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:25.000000Z"}, {"uuid": "3765e2ac-62c4-4683-a4b4-0666055a7d09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48021", "type": "seen", "source": "https://t.me/cibsecurity/57430", "content": "\u203c CVE-2022-48021 \u203c\n\nA vulnerability in Zammad v5.3.0 allows attackers to execute arbitrary code or escalate privileges via a crafted message sent to the server.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T07:25:17.000000Z"}, {"uuid": "461521dd-667f-4243-a2d5-7c7bc9a81b61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48113", "type": "seen", "source": "https://t.me/cibsecurity/57415", "content": "\u203c CVE-2022-48113 \u203c\n\nA vulnerability in TOTOLINK N200RE_v5 firmware V9.3.5u.6139 allows unauthenticated attackers to access the telnet service via a crafted POST request. Attackers are also able to leverage this vulnerability to login as root via hardcoded credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-03T00:15:06.000000Z"}, {"uuid": "2fc029f4-9e18-49f2-9bfd-68f00ef203f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48093", "type": "seen", "source": "https://t.me/cibsecurity/57311", "content": "\u203c CVE-2022-48093 \u203c\n\nSeacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-01T18:14:05.000000Z"}, {"uuid": "019cd12b-2137-4110-b62b-25d35d74a0d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4891", "type": "seen", "source": "https://t.me/cibsecurity/56609", "content": "\u203c CVE-2022-4891 \u203c\n\nA vulnerability has been found in Sisimai up to 4.25.14p11 and classified as problematic. This vulnerability affects the function to_plain of the file lib/sisimai/string.rb. The manipulation leads to inefficient regular expression complexity. The exploit has been disclosed to the public and may be used. Upgrading to version 4.25.14p12 is able to address this issue. The name of the patch is 51fe2e6521c9c02b421b383943dc9e4bbbe65d4e. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218452.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-17T22:15:23.000000Z"}, {"uuid": "00fe2cb8-768c-4f4a-a73d-71c3e706bbfc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4864", "type": "seen", "source": "https://t.me/cibsecurity/55653", "content": "\u203c CVE-2022-4864 \u203c\n\nArgument Injection in GitHub repository froxlor/froxlor prior to 2.0.0-beta1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-31T02:14:17.000000Z"}, {"uuid": "093a39cd-2152-4a3f-bdf8-5b987c3ec32e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48328", "type": "seen", "source": "https://t.me/cibsecurity/58512", "content": "\u203c CVE-2022-48328 \u203c\n\napp/Controller/Component/IndexFilterComponent.php in MISP before 2.4.167 mishandles ordered_url_params and additional_delimiters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T10:45:42.000000Z"}, {"uuid": "0b0946a2-e5c7-49f1-9a45-1c5d6e2b53bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48259", "type": "seen", "source": "https://t.me/cibsecurity/59036", "content": "\u203c CVE-2022-48259 \u203c\n\nThere is a system command injection vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could allow attackers to gain higher privileges.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-27T20:41:14.000000Z"}, {"uuid": "87715c2f-538d-4f47-8b4a-7e2e0b66838d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48230", "type": "seen", "source": "https://t.me/cibsecurity/58995", "content": "\u203c CVE-2022-48230 \u203c\n\nThere is a misinterpretation of input vulnerability in BiSheng-WNM FW 3.0.0.325. Successful exploitation could lead to DoS.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-27T20:31:57.000000Z"}, {"uuid": "bcf66d26-8a82-4eaa-8ab5-570071f31762", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48363", "type": "seen", "source": "https://t.me/cibsecurity/58915", "content": "\u203c CVE-2022-48363 \u203c\n\nIn MPD before 0.23.8, as used on Automotive Grade Linux and other platforms, the PipeWire output plugin mishandles a Drain call in certain situations involving truncated files. Eventually there is an assertion failure in libmpdclient because libqtappfw passes in a NULL pointer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-10-11T15:58:20.000000Z"}, {"uuid": "29cde779-f9bf-457a-a045-99de27a8ad98", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48362", "type": "seen", "source": "https://t.me/cibsecurity/58903", "content": "\u203c CVE-2022-48362 \u203c\n\nZoho ManageEngine Desktop Central and Desktop Central MSP before 10.1.2137.2 allow directory traversal via computerName to AgentLogUploadServlet. A remote, authenticated attacker could upload arbitrary code that would be executed when Desktop Central is restarted. (The attacker could authenticate by exploiting CVE-2021-44515.)\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-26T14:27:46.000000Z"}, {"uuid": "b0f839bb-e6e7-491d-847b-65b070f8b0e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48345", "type": "seen", "source": "https://t.me/cibsecurity/58856", "content": "\u203c CVE-2022-48345 \u203c\n\nsanitize-url (aka @braintree/sanitize-url) before 6.0.2 allows XSS via HTML entities.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-24T12:49:17.000000Z"}, {"uuid": "4174b958-aa19-4fd5-9f05-157624174f30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48340", "type": "seen", "source": "https://t.me/cibsecurity/58558", "content": "\u203c CVE-2022-48340 \u203c\n\nIn Gluster GlusterFS 11.0, there is an xlators/cluster/dht/src/dht-common.c dht_setxattr_mds_cbk use-after-free.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T07:29:40.000000Z"}, {"uuid": "80ec15cf-594e-47df-8615-d5ace7b0d9a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48319", "type": "seen", "source": "https://t.me/cibsecurity/58533", "content": "\u203c CVE-2022-48319 \u203c\n\nSensitive host secret disclosed in cmk-update-agent.log file in Tribe29's Checkmk <= 2.1.0p13, Checkmk <= 2.0.0p29, and all versions of Checkmk 1.6.0 (EOL) allows an attacker to gain access to the host secret through the unprotected agent updater log file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:15:57.000000Z"}, {"uuid": "0628231d-9929-4a98-9b46-1103814064bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48321", "type": "seen", "source": "https://t.me/cibsecurity/58530", "content": "\u203c CVE-2022-48321 \u203c\n\nLimited Server-Side Request Forgery (SSRF) in agent-receiver in Tribe29's Checkmk <= 2.1.0p11 allows an attacker to communicate with local network restricted endpoints by use of the host registration API.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:15:55.000000Z"}, {"uuid": "cd2a50a1-ee05-429d-ae5b-708dc4cbc00e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48149", "type": "seen", "source": "https://t.me/cibsecurity/58765", "content": "\u203c CVE-2022-48149 \u203c\n\nOnline Student Admission System in PHP Free Source Code 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T02:28:58.000000Z"}, {"uuid": "78ee0cdb-4f78-4129-928b-30a2730e00b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48344", "type": "seen", "source": "https://t.me/cibsecurity/58782", "content": "\u203c CVE-2022-48344 \u203c\n\nIn JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the group creation process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:25.000000Z"}, {"uuid": "4895755f-39e8-4eaf-abe5-77d1777ca369", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48343", "type": "seen", "source": "https://t.me/cibsecurity/58779", "content": "\u203c CVE-2022-48343 \u203c\n\nIn JetBrains TeamCity before 2022.10.2 there was an XSS vulnerability in the user creation process.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:19.000000Z"}, {"uuid": "6a27951e-8d00-4977-8c3b-584c5d99e65f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48342", "type": "seen", "source": "https://t.me/cibsecurity/58784", "content": "\u203c CVE-2022-48342 \u203c\n\nIn JetBrains TeamCity before 2022.10.2 jVMTI was enabled by default on agents.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T18:18:27.000000Z"}, {"uuid": "b7407b82-c6ec-4b9f-8e18-725244df1460", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48341", "type": "seen", "source": "https://t.me/cibsecurity/58773", "content": "\u203c CVE-2022-48341 \u203c\n\nThingsBoard 3.4.1 could allow a remote authenticated attacker to achieve Vertical Privilege Escalation. A Tenant Administrator can obtain System Administrator dashboard access by modifying the scope via the scopes parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-23T12:18:14.000000Z"}, {"uuid": "5b5ee6d9-4514-42ae-92aa-b49d87c5577a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48282", "type": "seen", "source": "https://t.me/cibsecurity/58637", "content": "\u203c CVE-2022-48282 \u203c\n\nUnder very specific circumstances (see Required configuration section below), a privileged user is able to cause arbitrary code to be executed which may cause further disruption to services. This is specific to applications written in C#. This affects all MongoDB .NET/C# Driver versions prior to and including v2.18.0\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T22:16:50.000000Z"}, {"uuid": "7d19f1c2-61f7-49e8-ba27-f7aa78bdd551", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4897", "type": "seen", "source": "https://t.me/cibsecurity/58589", "content": "\u203c CVE-2022-4897 \u203c\n\nThe BackupBuddy WordPress plugin before 8.8.3 does not sanitise and escape some parameters before outputting them back in various places, leading to Reflected Cross-Site Scripting\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T12:21:53.000000Z"}, {"uuid": "b6ea12b4-71b3-4150-bc51-20ca6052d60e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48329", "type": "seen", "source": "https://t.me/cibsecurity/58513", "content": "\u203c CVE-2022-48329 \u203c\n\nMISP before 2.4.166 unsafely allows users to use the order parameter, related to app/Model/Attribute.php, app/Model/GalaxyCluster.php, app/Model/Workflow.php, and app/Plugin/Assets/models/behaviors/LogableBehavior.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T07:28:48.000000Z"}, {"uuid": "8c4190d4-ec19-41a2-bf6a-8c4102b08a7b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48318", "type": "seen", "source": "https://t.me/cibsecurity/58541", "content": "\u203c CVE-2022-48318 \u203c\n\nNo authorisation controls in the RestAPI documentation for Tribe29's Checkmk <= 2.1.0p13 and Checkmk <= 2.0.0p29 which may lead to unintended information disclosure through automatically generated user specific tags within Rest API documentation.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:16:11.000000Z"}, {"uuid": "dcbf4608-fc5b-4b4d-b24a-86b1981860c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48317", "type": "seen", "source": "https://t.me/cibsecurity/58539", "content": "\u203c CVE-2022-48317 \u203c\n\nExpired sessions were not securely terminated in the RestAPI for Tribe29's Checkmk <= 2.1.0p10 and Checkmk <= 2.0.0p28 allowing an attacker to use expired session tokens when communicating with the RestAPI.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:16:05.000000Z"}, {"uuid": "c217d824-bc83-4448-8814-78f920c9f1b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48320", "type": "seen", "source": "https://t.me/cibsecurity/58538", "content": "\u203c CVE-2022-48320 \u203c\n\nCross-site Request Forgery (CSRF) in Tribe29's Checkmk <= 2.1.0p17, Checkmk <= 2.0.0p31, and all versions of Checkmk 1.6.0 (EOL) allow an attacker to add new visual elements to multiple pages.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-20T20:16:04.000000Z"}, {"uuid": "21deaed1-ac53-43c7-9a7f-4f10a2535571", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48339", "type": "seen", "source": "https://t.me/cibsecurity/58549", "content": "\u203c CVE-2022-48339 \u203c\n\nAn issue was discovered in GNU Emacs through 28.2. htmlfontify.el has a command injection vulnerability. In the hfy-istext-command function, the parameter file and parameter srcdir come from external input, and parameters are not escaped. If a file name or directory name contains shell metacharacters, code may be executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T02:16:14.000000Z"}, {"uuid": "2f1fcc21-0eb5-40e8-b7fe-0bcf2c6358e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48338", "type": "seen", "source": "https://t.me/cibsecurity/58547", "content": "\u203c CVE-2022-48338 \u203c\n\nAn issue was discovered in GNU Emacs through 28.2. In ruby-mode.el, the ruby-find-library-file function has a local command injection vulnerability. The ruby-find-library-file function is an interactive function, and bound to C-c C-f. Inside the function, the external command gem is called through shell-command-to-string, but the feature-name parameters are not escaped. Thus, malicious Ruby source files may cause commands to be executed.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-21T02:16:12.000000Z"}, {"uuid": "4083da7b-8f7c-4032-b436-4862c5fcab89", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48337", "type": "seen", "source": "https://t.me/cibsecurity/58546", "content": "\u203c CVE-2022-48337 \u203c\n\nGNU Emacs through 28.2 allows attackers to execute commands via shell metacharacters in the name of a source-code file, because lib-src/etags.c uses the system C library function in its implementation of the etags program. For example, a victim may use the \"etags -u *\" command (suggested in the etags documentation) in a situation where the current working directory has contents that depend on untrusted input.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-22T00:53:09.000000Z"}, {"uuid": "8178263e-4cf5-4d42-b9b1-5b827359f843", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4890", "type": "seen", "source": "https://t.me/cibsecurity/56531", "content": "\u203c CVE-2022-4890 \u203c\n\nA vulnerability, which was classified as critical, has been found in abhilash1985 PredictApp. This issue affects some unknown processing of the file config/initializers/new_framework_defaults_7_0.rb of the component Cookie Handler. The manipulation leads to deserialization. The attack may be initiated remotely. The name of the patch is b067372f3ee26fe1b657121f0f41883ff4461a06. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218387.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-16T16:25:11.000000Z"}, {"uuid": "1598f820-b7dd-4cea-9aa5-42020afcb546", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48253", "type": "seen", "source": "https://t.me/cibsecurity/56334", "content": "\u203c CVE-2022-48253 \u203c\n\nnhttpd in Nostromo before 2.1 is vulnerable to a path traversal that may allow an attacker to execute arbitrary commands on the remote server. The vulnerability occurs when the homedirs option is used.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T07:29:13.000000Z"}, {"uuid": "83852fc2-d992-47f4-83b3-8d438d0cacce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48115", "type": "seen", "source": "https://t.me/cibsecurity/58491", "content": "\u203c CVE-2022-48115 \u203c\n\nThe dropdown menu in jspreadsheet before v4.6.0 was discovered to be vulnerable to cross-site scripting (XSS).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-18T00:13:47.000000Z"}, {"uuid": "c7625807-385c-4f78-bc8d-9832b001e1aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48327", "type": "seen", "source": "https://t.me/cibsecurity/58418", "content": "\u203c CVE-2022-48327 \u203c\n\nMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) dataInicial, (2) dataFinal, (3) tipocliente, (4) format, (5) precoInicial, (6) precoFinal, (7) estoqueInicial, (8) estoqueFinal, (9) de_id, (10) ate_id, (11) clientes_id, (12) origem, (13) cliente, (14) responsavel, (15) status, (16) tipo, (17) situacao in file application/controllers/Relatorios.php; (18) preco, (19) nome, (20) descricao, (21) idServicos, (22) id in file application/controllers/Servicos.php; (23) senha, (24) permissoes_id, (25) idUsuarios, (26) situacao, (27) nome, (28) rg, (29) cpf, (30) cep, (31) rua, (32) numero, (33) bairro, (34) cidade, (35) estado, (36) email, (37) telefone, (38) celular in file application/controllers/Usuarios.php; (39) dataVenda, (40) observacoes, (41) observacoes_cliente, (42) clientes_id, (43) usuarios_id, (44) idVendas, (45) id, (46) idVendasProduto, (47) preco, (48) quantidade, (49) idProduto, (50) produto, (51) desconto, (52) tipoDesconto, (53) resultado, (54) vendas_id, (55) vencimento, (56) recebimento, (57) valor, (58) recebido, (59) formaPgto, (60) tipo in file application/controllers/Vendas.php; (61) situacao, (62) periodo, (63) vencimento_de, (64) vencimento_ate, (65) tipo, (66) status, (67) cliente in file application/views/financeiro/lancamentos.php; (68) year in file application/views/mapos/painel.php; (69) pesquisa in file application/views/os/os.php; (70) etiquetaCode in file application/views/relatorios/imprimir/imprimirEtiquetas.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:18:51.000000Z"}, {"uuid": "0c46c5ed-035c-49a3-b132-34df82d73cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48324", "type": "seen", "source": "https://t.me/cibsecurity/58415", "content": "\u203c CVE-2022-48324 \u203c\n\nMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) pesquisa, (2) data, (3) data2, (4) nome, (5) descricao, (6) idDocumentos, (7) id in file application/controllers/Arquivos.php; (8) senha, (9) nomeCliente, (10) contato, (11) documento, (12) telefone, (13) celular, (14) email, (15) rua, (16) numero, (17) complemento, (18) bairro, (19) cidade, (20) estado, (21) cep, (22) idClientes, (23) id in file application/controllers/Clientes.php; (24) id, (25) tipo, (26) forma_pagamento, (27) gateway_de_pagamento, (28) excluir_id, (29) confirma_id, (30) cancela_id in file application/controllers/Cobrancas.php; (31) vencimento_de, (32) vencimento_ate, (33) cliente, (34) tipo, (35) status, (36) valor_desconto, (37) desconto, (38) periodo, (39) per_page, (40) urlAtual, (41) vencimento, (42) recebimento, (43) valor, (44) recebido, (45) formaPgto, (46) desconto_parc, (47) entrada, (48) qtdparcelas_parc, (49) valor_parc, (50) dia_pgto, (51) dia_base_pgto, (52) comissao, (53) descricao_parc, (54) cliente_parc, (55) observacoes_parc, (56) formaPgto_parc, (57) tipo_parc, (58) pagamento, (59) pago, (60) valor_desconto_editar, (61) descricao, (62) fornecedor, (63) observacoes, (64) id in file application/controllers/Financeiro.php; (65) refGarantia, (66) textoGarantia, (67) idGarantias in file application/controllers/Garantias.php; (68) email, (69) senha in file application/controllers/Login.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:18:48.000000Z"}, {"uuid": "363aca1b-ccb9-41d7-95e7-56f0ed45c145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48326", "type": "seen", "source": "https://t.me/cibsecurity/58409", "content": "\u203c CVE-2022-48326 \u203c\n\nMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) nome, (2) aCliente, (3) eCliente, (4) dCliente, (5) vCliente, (6) aProduto, (7) eProduto, (8) dProduto, (9) vProduto, (10) aServico, (11) eServico, (12) dServico, (13) vServico, (14) aOs, (15) eOs, (16) dOs, (17) vOs, (18) aVenda, (19) eVenda, (20) dVenda, (21) vVenda, (22) aGarantia, (23) eGarantia, (24) dGarantia, (25) vGarantia, (26) aArquivo, (27) eArquivo, (28) dArquivo, (29) vArquivo, (30) aPagamento, (31) ePagamento, (32) dPagamento, (33) vPagamento, (34) aLancamento, (35) eLancamento, (36) dLancamento, (37) vLancamento, (38) cUsuario, (39) cEmitente, (40) cPermissao, (41) cBackup, (42) cAuditoria, (43) cEmail, (44) cSistema, (45) rCliente, (46) rProduto, (47) rServico, (48) rOs, (49) rVenda, (50) rFinanceiro, (51) aCobranca, (52) eCobranca, (53) dCobranca, (54) vCobranca, (55) situacao, (56) idPermissao, (57) id in file application/controllers/Permissoes.php; (58) precoCompra, (59) precoVenda, (60) descricao, (61) unidade, (62) estoque, (63) estoqueMinimo, (64) idProdutos, (65) id, (66) estoqueAtual in file application/controllers/Produtos.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:18:39.000000Z"}, {"uuid": "071ffcf0-e872-4da2-8470-33f5bdf6213b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48325", "type": "seen", "source": "https://t.me/cibsecurity/58391", "content": "\u203c CVE-2022-48325 \u203c\n\nMultiple Cross Site Scripting (XSS) vulnerabilities in Mapos 4.39.0 allow attackers to execute arbitrary code. Affects the following parameters: (1) year, (2) oldSenha, (3) novaSenha, (4) termo, (5) nome, (6) cnpj, (7) ie, (8) cep, (9) logradouro, (10) numero, (11) bairro, (12) cidade, (13) uf, (14) telefone, (15) email, (16) id, (17) app_name, (18) per_page, (19) app_theme, (20) os_notification, (21) email_automatico, (22) control_estoque, (23) notifica_whats, (24) control_baixa, (25) control_editos, (26) control_edit_vendas, (27) control_datatable, (28) pix_key, (29) os_status_list, (30) control_2vias, (31) status, (32) start, (33) end in file application/controllers/Mapos.php; (34) token, (35) senha, (36) email, (37) nomeCliente, (38) documento, (39) telefone, (40) celular, (41) rua, (42) numero, (43) complemento, (44) bairro, (45) cidade, (46) estado, (47) cep, (48) idClientes, (49) descricaoProduto, (50) defeito in file application/controllers/Mine.php; (51) pesquisa, (52) status, (53) data, (54) data2, (55) dataInicial, (56) dataFinal, (57) termoGarantia, (58) garantias_id, (59) clientes_id, (60) usuarios_id, (61) idOs, (62) garantia, (63) descricaoProduto, (64) defeito, (65) observacoes, (66) laudoTecnico, (67) id, (68) preco, (69) quantidade, (70) idProduto, (71) idOsProduto, (72) produto, (73) idServico, (74) idOsServico, (75) desconto, (76) tipoDesconto, (77) resultado, (78) vencimento, (79) recebimento, (80) os_id, (81) valor, (82) recebido, (83) formaPgto, (84) tipo, (85) anotacao, (86) idAnotacao in file application/controllers/Os.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-17T00:12:38.000000Z"}, {"uuid": "1edabd81-4371-4d60-9099-849f8a48c13d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48258", "type": "seen", "source": "https://t.me/cibsecurity/56473", "content": "\u203c CVE-2022-48258 \u203c\n\nIn Eternal Terminal 6.2.1, etserver and etclient have world-readable logfiles.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T07:31:02.000000Z"}, {"uuid": "7631925b-c1ad-433b-b2ad-50afc3361fb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4842", "type": "seen", "source": "https://t.me/cibsecurity/56447", "content": "\u203c CVE-2022-4842 \u203c\n\nA flaw NULL Pointer Dereference in the Linux kernel NTFS3 driver function attr_punch_hole() was found. A local user could use this flaw to crash the system.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T22:30:42.000000Z"}, {"uuid": "5f646a3b-8de2-4ffb-abf7-b8ac2f313ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48256", "type": "seen", "source": "https://t.me/cibsecurity/56477", "content": "\u203c CVE-2022-48256 \u203c\n\nTechnitium DNS Server before 10.0 allows a self-CNAME denial-of-service attack in which a CNAME loop causes an answer to contain hundreds of records.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-13T07:31:06.000000Z"}, {"uuid": "1e029f9a-05ea-4f80-828d-1d092529ac79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4874", "type": "seen", "source": "https://t.me/cibsecurity/56380", "content": "\u203c CVE-2022-4874 \u203c\n\nAuthentication bypass in Netcomm router models NF20MESH, NF20, and NL1902 allows an unauthenticated user to access content. In order to serve static content, the application performs a check for the existence of specific characters in the URL (.css, .png etc). If it exists, it performs a \"fake login\" to give the request an active session to load the file and not redirect to the login page.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-12T00:30:34.000000Z"}, {"uuid": "0e4ac5bc-6410-46a7-b8f0-4e22311419da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4885", "type": "seen", "source": "https://t.me/cibsecurity/56359", "content": "\u203c CVE-2022-4885 \u203c\n\nA vulnerability has been found in sviehb jefferson up to 0.3 and classified as critical. This vulnerability affects unknown code of the file src/scripts/jefferson. The manipulation leads to path traversal. The attack can be initiated remotely. Upgrading to version 0.4 is able to address this issue. The name of the patch is 53b3f2fc34af0bb32afbcee29d18213e61471d87. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-218020.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T20:43:47.000000Z"}, {"uuid": "b9502c07-66ab-4f7a-96b0-1ac3f9830c70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48308", "type": "seen", "source": "https://t.me/cibsecurity/58324", "content": "\u203c CVE-2022-48308 \u203c\n\nIt was discovered that the sls-logging was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept, read, or modify network communications to and from the affected service.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T18:12:28.000000Z"}, {"uuid": "43c98c06-0356-4b83-bdeb-72e4f4ca2f11", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48166", "type": "seen", "source": "https://t.me/cibsecurity/57627", "content": "\u203c CVE-2022-48166 \u203c\n\nAn access control issue in Wavlink WL-WN530HG4 M30HG4.V5030.201217 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T00:23:35.000000Z"}, {"uuid": "455da2d1-5959-429b-a5b3-06759c052519", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48252", "type": "seen", "source": "https://t.me/cibsecurity/56323", "content": "\u203c CVE-2022-48252 \u203c\n\nThe jokob-sk/Pi.Alert fork (before 22.12.20) of Pi.Alert allows Remote Code Execution via nmap_scan.php (scan parameter) OS Command Injection.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-11T07:28:57.000000Z"}, {"uuid": "536773a3-9d1a-48b9-93d0-9fe78da34115", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48307", "type": "seen", "source": "https://t.me/cibsecurity/58319", "content": "\u203c CVE-2022-48307 \u203c\n\nIt was discovered that the Magritte-ftp was not verifying hostnames in TLS certificates due to a misuse of the javax.net.ssl.SSLSocketFactory API. A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept, read, or modify network communications to and from the affected service. In the case of a successful man in the middle attack on magritte-ftp, an attacker would be able to read and modify network traffic such as authentication tokens or raw data entering a Palantir Foundry stack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T18:12:24.000000Z"}, {"uuid": "51251a38-ce19-4ae6-bfe5-5af84c07bdb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48306", "type": "seen", "source": "https://t.me/cibsecurity/58316", "content": "\u203c CVE-2022-48306 \u203c\n\nImproper Validation of Certificate with Host Mismatch vulnerability in Gotham Chat IRC helper of Palantir Gotham allows A malicious attacker in a privileged network position could abuse this to perform a man-in-the-middle attack. A successful man-in-the-middle attack would allow them to intercept, read, or modify network communications to and from the affected service. This issue affects: Palantir Palantir Gotham Chat IRC helper versions prior to 30221005.210011.9242.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-16T18:12:20.000000Z"}, {"uuid": "26a4ec14-bc75-4b5c-bfec-0faf4512b6f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48300", "type": "seen", "source": "https://t.me/cibsecurity/57836", "content": "\u203c CVE-2022-48300 \u203c\n\nThe WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:08.000000Z"}, {"uuid": "20d55c0f-0ab5-44ae-a837-1790a416d1cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48292", "type": "seen", "source": "https://t.me/cibsecurity/57834", "content": "\u203c CVE-2022-48292 \u203c\n\nThe Bluetooth module has an out-of-memory (OOM) vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:06.000000Z"}, {"uuid": "d515084c-3e5a-4738-8b52-ee8ed8239b8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48295", "type": "seen", "source": "https://t.me/cibsecurity/57832", "content": "\u203c CVE-2022-48295 \u203c\n\nThe IHwAntiMalPlugin interface lacks permission verification. Successful exploitation of this vulnerability can lead to filling problems (batch installation of applications).\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:03.000000Z"}, {"uuid": "c4787370-f9ee-4729-970c-8914cb0c3625", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48301", "type": "seen", "source": "https://t.me/cibsecurity/57831", "content": "\u203c CVE-2022-48301 \u203c\n\nThe bundle management module lacks permission verification in some APIs. Successful exploitation of this vulnerability may restore the pre-installed apps that have been uninstalled.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:02.000000Z"}, {"uuid": "203952c9-3688-42b1-a389-a12f19dfafbc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48293", "type": "seen", "source": "https://t.me/cibsecurity/57830", "content": "\u203c CVE-2022-48293 \u203c\n\nThe Bluetooth module has an OOM vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:01.000000Z"}, {"uuid": "468e6a2d-a466-41e2-8054-6033037c1dda", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48297", "type": "seen", "source": "https://t.me/cibsecurity/57845", "content": "\u203c CVE-2022-48297 \u203c\n\nThe geofencing kernel code has a vulnerability of not verifying the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:18.000000Z"}, {"uuid": "c26c0a49-ab9a-49a1-bb09-5ee94ffdfa51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48298", "type": "seen", "source": "https://t.me/cibsecurity/57843", "content": "\u203c CVE-2022-48298 \u203c\n\nThe geofencing kernel code does not verify the length of the input data. Successful exploitation of this vulnerability may cause out-of-bounds memory access.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:16.000000Z"}, {"uuid": "1d08789f-5661-4786-b0cd-b785bb3df5d8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48299", "type": "seen", "source": "https://t.me/cibsecurity/57840", "content": "\u203c CVE-2022-48299 \u203c\n\nThe WMS module lacks the authentication mechanism in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:12.000000Z"}, {"uuid": "e02848ad-526a-42f9-b497-7b6cea97259a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48294", "type": "seen", "source": "https://t.me/cibsecurity/57838", "content": "\u203c CVE-2022-48294 \u203c\n\nThe IHwAttestationService interface has a defect in authentication. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:10.000000Z"}, {"uuid": "44497b70-0186-46fa-8d01-307f363ead79", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48296", "type": "seen", "source": "https://t.me/cibsecurity/57837", "content": "\u203c CVE-2022-48296 \u203c\n\nThe SystemUI has a vulnerability in permission management. Successful exploitation of this vulnerability may cause users to receive broadcasts from malicious apps, conveying false alarm information about external storage devices.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:09.000000Z"}, {"uuid": "af8ecafa-55be-46b8-85c8-87627560ffc4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48286", "type": "seen", "source": "https://t.me/cibsecurity/57847", "content": "\u203c CVE-2022-48286 \u203c\n\nThe multi-screen collaboration module has a privilege escalation vulnerability. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:20.000000Z"}, {"uuid": "1b05c04a-f600-4489-bf88-424cdf725672", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48288", "type": "seen", "source": "https://t.me/cibsecurity/57846", "content": "\u203c CVE-2022-48288 \u203c\n\nThe bundle management module lacks authentication and control mechanisms in some APIs. Successful exploitation of this vulnerability may affect data confidentiality.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-09T20:26:19.000000Z"}, {"uuid": "831b5fac-058b-4bdf-a1d6-2877a4eded7a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48110", "type": "seen", "source": "https://t.me/cibsecurity/58021", "content": "\u203c CVE-2022-48110 \u203c\n\nCKSource CKEditor5 35.4.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Full Featured CKEditor5 widget.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-13T22:29:56.000000Z"}, {"uuid": "69100e5e-d141-4944-acf5-3098c4758ed4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48077", "type": "seen", "source": "https://t.me/cibsecurity/58010", "content": "\u203c CVE-2022-48077 \u203c\n\nGenymotion Desktop v3.3.2 was discovered to contain a DLL hijacking vulnerability that allows attackers to escalate privileges and execute arbitrary code via a crafted DLL.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-14T10:01:32.000000Z"}, {"uuid": "781f5521-f506-4ee2-8d0e-b5e6db242247", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4808", "type": "seen", "source": "https://t.me/cibsecurity/55491", "content": "\u203c CVE-2022-4808 \u203c\n\nImproper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:32.000000Z"}, {"uuid": "d024c0bf-5674-4003-9a05-d5e920a8e25b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48322", "type": "seen", "source": "https://t.me/cibsecurity/57993", "content": "\u203c CVE-2022-48322 \u203c\n\nNETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-13T07:29:43.000000Z"}, {"uuid": "293140b9-3efb-43b4-8db8-ea6c23585053", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48323", "type": "seen", "source": "https://t.me/cibsecurity/57987", "content": "\u203c CVE-2022-48323 \u203c\n\nSunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the pathname of the powershell.exe program.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-13T07:29:34.000000Z"}, {"uuid": "4c527298-d020-4cd7-93f3-aa7ae5c7493e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48198", "type": "seen", "source": "https://t.me/cibsecurity/55718", "content": "\u203c CVE-2022-48198 \u203c\n\nThe ntpd_driver component before 1.3.0 and 2.x before 2.2.0 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled time_ref_topic parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-01T12:15:38.000000Z"}, {"uuid": "9a689a6d-b2bc-4ba3-ad5e-0497b2f147d0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4883", "type": "seen", "source": "https://t.me/cibsecurity/57691", "content": "\u203c CVE-2022-4883 \u203c\n\nA flaw was found in libXpm. When processing files with .Z or .gz extensions, the library calls external programs to compress and uncompress files, relying on the PATH environment variable to find these programs, which could allow a malicious user to execute other programs by manipulating the PATH environment variable.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T22:23:14.000000Z"}, {"uuid": "e4159f6c-8aa2-479e-b9aa-f37b790238a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48085", "type": "seen", "source": "https://t.me/cibsecurity/57547", "content": "\u203c CVE-2022-48085 \u203c\n\nSoftr v2.0 was discovered to contain a HTML injection vulnerability via the Work Space Name parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-02T02:08:06.000000Z"}, {"uuid": "8fc6eebb-5f7f-4e15-bd88-6656e6f4bba9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48078", "type": "seen", "source": "https://t.me/cibsecurity/57556", "content": "\u203c CVE-2022-48078 \u203c\n\npycdc commit 44a730f3a889503014fec94ae6e62d8401cb75e5 was discovered to contain a stack overflow via the component ASTree.cpp:BuildFromCode.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T18:23:33.000000Z"}, {"uuid": "59be9fc6-ed88-46fb-92d6-6365039b9e16", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4863", "type": "seen", "source": "https://t.me/cibsecurity/55568", "content": "\u203c CVE-2022-4863 \u203c\n\nImproper Handling of Insufficient Permissions or Privileges in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T18:13:56.000000Z"}, {"uuid": "9b9359e7-eeeb-458e-8421-a5b12aef6131", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4861", "type": "seen", "source": "https://t.me/cibsecurity/55566", "content": "\u203c CVE-2022-4861 \u203c\n\nIncorrect implementation in authentication protocol in M-Files Server before 22.5.11356.0 allows high privileged user to get other users tokens to another resource.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T16:13:49.000000Z"}, {"uuid": "bde86009-b525-4f06-ab18-71001d89b27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4858", "type": "seen", "source": "https://t.me/cibsecurity/55562", "content": "\u203c CVE-2022-4858 \u203c\n\nInsertion of Sensitive Information into Log Files in M-Files Server in M-Files before 22.10.11846.0 could allow to obtain sensitive tokens from logs, if specific configurations were set.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T14:14:14.000000Z"}, {"uuid": "a69c5fbe-6746-4eab-a0c4-b3c19bb55fab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4851", "type": "seen", "source": "https://t.me/cibsecurity/55534", "content": "\u203c CVE-2022-4851 \u203c\n\nImproper Handling of Values in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:21.000000Z"}, {"uuid": "bd499432-caf8-40e5-8a2f-e924e468611c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4848", "type": "seen", "source": "https://t.me/cibsecurity/55533", "content": "\u203c CVE-2022-4848 \u203c\n\nImproper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:20.000000Z"}, {"uuid": "e9dd2894-586b-49a7-9802-d346b5c81177", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4843", "type": "seen", "source": "https://t.me/cibsecurity/55532", "content": "\u203c CVE-2022-4843 \u203c\n\nNULL Pointer Dereference in GitHub repository radareorg/radare2 prior to 5.8.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:19.000000Z"}, {"uuid": "e8ba02d4-7d43-463d-b71e-51966613b9c8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4846", "type": "seen", "source": "https://t.me/cibsecurity/55531", "content": "\u203c CVE-2022-4846 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:18.000000Z"}, {"uuid": "96281475-8cb8-46fe-b4ae-b207d1918754", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4839", "type": "seen", "source": "https://t.me/cibsecurity/55530", "content": "\u203c CVE-2022-4839 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:17.000000Z"}, {"uuid": "26411664-7e4d-446a-91f2-0990b9f84007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4840", "type": "seen", "source": "https://t.me/cibsecurity/55529", "content": "\u203c CVE-2022-4840 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:16.000000Z"}, {"uuid": "39e32fe1-f368-465b-8989-0d7c40189b0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4849", "type": "seen", "source": "https://t.me/cibsecurity/55528", "content": "\u203c CVE-2022-4849 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:15.000000Z"}, {"uuid": "3d43f4a8-00f5-4194-8f95-4636b0550a1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48311", "type": "seen", "source": "https://t.me/cibsecurity/57616", "content": "\u203c CVE-2022-48311 \u203c\n\n**UNSUPPORTED WHEN ASSIGNED** Cross Site Scripting (XSS) in HP Deskjet 2540 series printer Firmware Version CEP1FN1418BR and Product Model Number A9U23B allows authenticated attacker to inject their own script into the page via HTTP configuration page. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-07T00:23:24.000000Z"}, {"uuid": "12aa52ff-c5fe-4529-9e92-6938083e9e32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "https://t.me/cibsecurity/57549", "content": "\u203c CVE-2022-48164 \u203c\n\nAn access control issue in the component /cgi-bin/ExportLogs.sh of Wavlink WL-WN533A8 M33A8.V5030.190716 allows unauthenticated attackers to download configuration data and log files and obtain admin credentials.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T16:22:57.000000Z"}, {"uuid": "9d4178ba-7d2c-4eae-b6a1-4deff9f84f6d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4838", "type": "seen", "source": "https://t.me/cibsecurity/57589", "content": "\u203c CVE-2022-4838 \u203c\n\nThe Clean Login WordPress plugin before 1.13.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:44.000000Z"}, {"uuid": "4235e0b3-48dd-4de7-b227-a6d833b4e949", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4825", "type": "seen", "source": "https://t.me/cibsecurity/57581", "content": "\u203c CVE-2022-4825 \u203c\n\nThe WP-ShowHide WordPress plugin before 1.05 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:33.000000Z"}, {"uuid": "c5bfaa13-82ee-41c5-9234-af2904669618", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4826", "type": "seen", "source": "https://t.me/cibsecurity/57577", "content": "\u203c CVE-2022-4826 \u203c\n\nThe Simple Tooltips WordPress plugin before 2.1.4 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T22:23:30.000000Z"}, {"uuid": "e763c22b-98ec-4cd2-81c3-45631b176821", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48019", "type": "seen", "source": "https://t.me/cibsecurity/57566", "content": "\u203c CVE-2022-48019 \u203c\n\nThe components wfshbr64.sys and wfshbr32.sys in Another Eden before v3.0.20 and before v2.14.200 allows attackers to perform privilege escalation via a crafted payload.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-02-06T18:23:49.000000Z"}, {"uuid": "a648d4b8-f83b-419c-bae2-361f431736a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4859", "type": "seen", "source": "https://t.me/cibsecurity/55561", "content": "\u203c CVE-2022-4859 \u203c\n\nA vulnerability, which was classified as problematic, has been found in Joget up to 7.0.33. This issue affects the function submitForm of the file wflow-core/src/main/java/org/joget/plugin/enterprise/UserProfileMenu.java of the component User Profile Menu. The manipulation of the argument firstName/lastName leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 7.0.34 is able to address this issue. The name of the patch is 9a77f508a2bf8cf661d588f37a4cc29ecaea4fc8. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217055.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T14:14:13.000000Z"}, {"uuid": "b70bbf45-89a0-4321-8ddf-0bd47883d7b1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4841", "type": "seen", "source": "https://t.me/cibsecurity/55539", "content": "\u203c CVE-2022-4841 \u203c\n\nCross-site Scripting (XSS) - Stored in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:24:13.000000Z"}, {"uuid": "0a5e9524-373f-4515-a0b3-62e1ae2ab498", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4844", "type": "seen", "source": "https://t.me/cibsecurity/55538", "content": "\u203c CVE-2022-4844 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:27.000000Z"}, {"uuid": "5727ef67-e1c5-45be-92b0-1dc5c1615c32", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4845", "type": "seen", "source": "https://t.me/cibsecurity/55537", "content": "\u203c CVE-2022-4845 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:23.000000Z"}, {"uuid": "6061be8d-0a98-4329-8459-85ac7027db18", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4847", "type": "seen", "source": "https://t.me/cibsecurity/55536", "content": "\u203c CVE-2022-4847 \u203c\n\nIncorrectly Specified Destination in a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:22.000000Z"}, {"uuid": "5ebf3868-5d20-4910-a383-c57b6646e00f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4860", "type": "seen", "source": "https://t.me/cibsecurity/55556", "content": "\u203c CVE-2022-4860 \u203c\n\nA vulnerability was found in KBase Metrics. It has been classified as critical. This affects the function upload_user_data of the file source/daily_cron_jobs/methods_upload_user_stats.py. The manipulation leads to sql injection. The name of the patch is 959dfb6b05991e30b0fa972a1ecdcaae8e1dae6d. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-217059.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T14:14:08.000000Z"}, {"uuid": "68b1e48d-b398-4ccc-bc58-653614d9f514", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48196", "type": "seen", "source": "https://t.me/cibsecurity/55549", "content": "\u203c CVE-2022-48196 \u203c\n\nCertain NETGEAR devices are affected by a buffer overflow by an unauthenticated attacker. This affects RAX40 before 1.0.2.60, RAX35 before 1.0.2.60, R6400v2 before 1.0.4.122, R6700v3 before 1.0.4.122, R6900P before 1.3.3.152, R7000P before 1.3.3.152, R7000 before 1.0.11.136, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T12:13:50.000000Z"}, {"uuid": "af986543-af70-4f19-ac9a-253cd4188a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4855", "type": "seen", "source": "https://t.me/cibsecurity/55548", "content": "\u203c CVE-2022-4855 \u203c\n\nA vulnerability, which was classified as critical, was found in SourceCodester Lead Management System 1.0. Affected is an unknown function of the file login.php. The manipulation of the argument username leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-217020.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T12:13:49.000000Z"}, {"uuid": "9049edc3-e950-4358-ad0a-ff05887aa127", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4803", "type": "seen", "source": "https://t.me/cibsecurity/55488", "content": "\u203c CVE-2022-4803 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:29.000000Z"}, {"uuid": "5d672107-88f8-4356-a9e0-f374bbeabd61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4800", "type": "seen", "source": "https://t.me/cibsecurity/55486", "content": "\u203c CVE-2022-4800 \u203c\n\nImproper Verification of Source of a Communication Channel in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:27.000000Z"}, {"uuid": "12089164-3dcc-45d9-a8ec-8559c301f497", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4805", "type": "seen", "source": "https://t.me/cibsecurity/55485", "content": "\u203c CVE-2022-4805 \u203c\n\nIncorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:26.000000Z"}, {"uuid": "9c55e9c6-f3bf-4ed4-bca6-9303184eb348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4811", "type": "seen", "source": "https://t.me/cibsecurity/55490", "content": "\u203c CVE-2022-4811 \u203c\n\nImproper Authorization in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:31.000000Z"}, {"uuid": "d28f487a-12f6-4ddb-8af3-b3c7cbefa8e1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4856", "type": "seen", "source": "https://t.me/cibsecurity/55547", "content": "\u203c CVE-2022-4856 \u203c\n\nA vulnerability has been found in Modbus Tools Modbus Slave up to 7.5.1 and classified as critical. Affected by this vulnerability is an unknown functionality of the file mbslave.exe of the component mbs File Handler. The manipulation leads to buffer overflow. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-217021 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T12:13:48.000000Z"}, {"uuid": "09dfc53b-ae9c-4d8e-b3e6-0fd6eff3f2e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48194", "type": "seen", "source": "https://t.me/cibsecurity/55546", "content": "\u203c CVE-2022-48194 \u203c\n\nTP-Link TL-WR902AC devices through V3 0.9.1 allow remote authenticated attackers to execute arbitrary code or cause a Denial of Service (DoS) by uploading a crafted firmware update because the signature check is inadequate.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-30T12:13:48.000000Z"}, {"uuid": "766e63d1-ab5a-4c8d-9c74-e405ce322c45", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4857", "type": "seen", "source": "https://t.me/cibsecurity/55545", "content": "\u203c CVE-2022-4857 \u203c\n\nA vulnerability was found in Modbus Tools Modbus Poll up to 9.10.0 and classified as critical. Affected by this issue is some unknown functionality of the file mbpoll.exe of the component mbp File Handler. The manipulation leads to buffer overflow. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-217022 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-03-01T23:30:14.000000Z"}, {"uuid": "bb6a29fd-767d-4456-be2f-7b2b6d1c94ab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4850", "type": "seen", "source": "https://t.me/cibsecurity/55535", "content": "\u203c CVE-2022-4850 \u203c\n\nCross-Site Request Forgery (CSRF) in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T20:13:21.000000Z"}, {"uuid": "dcb4bd89-be01-45e8-be81-44961aae7885", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4823", "type": "seen", "source": "https://t.me/cibsecurity/55514", "content": "\u203c CVE-2022-4823 \u203c\n\nA vulnerability, which was classified as problematic, was found in InSTEDD Nuntium. Affected is an unknown function of the file app/controllers/geopoll_controller.rb. The manipulation of the argument signature leads to observable timing discrepancy. It is possible to launch the attack remotely. The name of the patch is 77236f7fd71a0e2eefeea07f9866b069d612cf0d. It is recommended to apply a patch to fix this issue. VDB-217002 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T00:12:39.000000Z"}, {"uuid": "1cc5f90c-d30c-4394-a217-582161b291bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4818", "type": "seen", "source": "https://t.me/cibsecurity/55513", "content": "\u203c CVE-2022-4818 \u203c\n\nA vulnerability was found in Talend Open Studio for MDM. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file org.talend.mdm.core/src/com/amalto/core/storage/SystemStorageWrapper.java. The manipulation leads to xml external entity reference. Upgrading to version 20221220_1938 is able to address this issue. The name of the patch is 95590db2ad6a582c371273ceab1a73ad6ed47853. It is recommended to upgrade the affected component. The identifier VDB-216997 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T00:12:38.000000Z"}, {"uuid": "456b3e64-5d37-44c9-888b-6391491ed4dc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4821", "type": "seen", "source": "https://t.me/cibsecurity/55512", "content": "\u203c CVE-2022-4821 \u203c\n\nA vulnerability classified as problematic was found in FlatPress. This vulnerability affects the function onupload of the file admin/panels/uploader/admin.uploader.php of the component XML File Handler/MD File Handler. The manipulation leads to cross site scripting. The attack can be initiated remotely. The name of the patch is 3cc223dec5260e533a84b5cf5780d3a4fbf21241. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-217000.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T00:12:37.000000Z"}, {"uuid": "fea4a9d5-af77-4348-91e3-5bbdace25110", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4817", "type": "seen", "source": "https://t.me/cibsecurity/55510", "content": "\u203c CVE-2022-4817 \u203c\n\nA vulnerability was found in centic9 jgit-cookbook. It has been declared as problematic. This vulnerability affects unknown code. The manipulation leads to insecure temporary file. The attack can be initiated remotely. The name of the patch is b8cb29b43dc704708d598c60ac1881db7cf8e9c3. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-216988.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T22:12:33.000000Z"}, {"uuid": "661c053a-59e1-498b-8054-7ddc1fe6635c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4802", "type": "seen", "source": "https://t.me/cibsecurity/55484", "content": "\u203c CVE-2022-4802 \u203c\n\nImproper Authorization in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:25.000000Z"}, {"uuid": "62233e1e-1b57-4adb-9edc-e6c960e857ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4806", "type": "seen", "source": "https://t.me/cibsecurity/55483", "content": "\u203c CVE-2022-4806 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:24.000000Z"}, {"uuid": "cc134a62-8cd9-4b3f-82aa-cadc5bcc3390", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4813", "type": "seen", "source": "https://t.me/cibsecurity/55482", "content": "\u203c CVE-2022-4813 \u203c\n\nInsufficient Granularity of Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:23.000000Z"}, {"uuid": "e00206d7-f5fa-4396-802f-87057495c01f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4810", "type": "seen", "source": "https://t.me/cibsecurity/55481", "content": "\u203c CVE-2022-4810 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:22.000000Z"}, {"uuid": "54af7015-0094-4929-bdce-1cf682ee4951", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4812", "type": "seen", "source": "https://t.me/cibsecurity/55480", "content": "\u203c CVE-2022-4812 \u203c\n\nComparison of Object References Instead of Object Contents in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:21.000000Z"}, {"uuid": "29acbf80-c170-436a-ab6d-98a1b4afb27c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4820", "type": "seen", "source": "https://t.me/cibsecurity/55517", "content": "\u203c CVE-2022-4820 \u203c\n\nA vulnerability classified as problematic has been found in FlatPress. This affects an unknown part of the file admin/panels/entry/admin.entry.list.php of the component Admin Area. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is 229752b51025e678370298284d42f8ebb231f67f. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-216999.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T00:12:45.000000Z"}, {"uuid": "61356241-9fd0-4c99-9496-71c3093b1627", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4822", "type": "seen", "source": "https://t.me/cibsecurity/55516", "content": "\u203c CVE-2022-4822 \u203c\n\nA vulnerability, which was classified as problematic, has been found in FlatPress. This issue affects some unknown processing of the file setup/lib/main.lib.php of the component Setup. The manipulation leads to cross site scripting. The attack may be initiated remotely. The name of the patch is 5f23b4c2eac294cc0ba5e541f83a6f8a26f9fed1. It is recommended to apply a patch to fix this issue. The identifier VDB-217001 was assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T00:12:44.000000Z"}, {"uuid": "059eac6a-b33d-4e13-af14-b5ed28817ad9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4819", "type": "seen", "source": "https://t.me/cibsecurity/55515", "content": "\u203c CVE-2022-4819 \u203c\n\nA vulnerability was found in HotCRP. It has been rated as problematic. Affected by this issue is some unknown functionality. The manipulation leads to cross site scripting. The attack may be launched remotely. The name of the patch is d4ffdb0ef806453c54ddca7fdda3e5c60356285c. It is recommended to apply a patch to fix this issue. VDB-216998 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-29T00:31:46.000000Z"}, {"uuid": "f28165df-df62-4f5a-8acd-4fc64893f14c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4809", "type": "seen", "source": "https://t.me/cibsecurity/55479", "content": "\u203c CVE-2022-4809 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:20.000000Z"}, {"uuid": "b099c34d-c7e4-428b-9102-af090627af06", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4807", "type": "seen", "source": "https://t.me/cibsecurity/55477", "content": "\u203c CVE-2022-4807 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:17.000000Z"}, {"uuid": "01e9aebe-fe95-491d-a96c-122fd15562b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4804", "type": "seen", "source": "https://t.me/cibsecurity/55478", "content": "\u203c CVE-2022-4804 \u203c\n\nImproper Authorization in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:19.000000Z"}, {"uuid": "4c24f567-e206-4390-ac87-f605c23f24b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4814", "type": "seen", "source": "https://t.me/cibsecurity/55493", "content": "\u203c CVE-2022-4814 \u203c\n\nImproper Access Control in GitHub repository usememos/memos prior to 0.9.1.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-12-28T16:12:37.000000Z"}, {"uuid": "575d237c-93d9-493e-82f3-55fa3eeda4d5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48010", "type": "seen", "source": "https://t.me/cibsecurity/57094", "content": "\u203c CVE-2022-48010 \u203c\n\nLimeSurvey v5.4.15 was discovered to contain a stored cross-site scripting (XSS) vulnerability in the component /index.php/surveyAdministration/rendersidemenulink?subaction=surveytexts. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Description or Welcome-message text fields.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T20:48:51.000000Z"}, {"uuid": "ad81ff64-caed-4ab8-8d39-9407e8471869", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48126", "type": "seen", "source": "https://t.me/cibsecurity/56761", "content": "\u203c CVE-2022-48126 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the username parameter in the setting/setOpenVpnCertGenerationCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:39.000000Z"}, {"uuid": "ba53d3b5-49df-4e13-b876-a703ae377ed3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48123", "type": "seen", "source": "https://t.me/cibsecurity/56758", "content": "\u203c CVE-2022-48123 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the servername parameter in the setting/delStaticDhcpRules function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:36.000000Z"}, {"uuid": "a368270a-448e-4276-9c55-cdee26f88233", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48008", "type": "seen", "source": "https://t.me/cibsecurity/57074", "content": "\u203c CVE-2022-48008 \u203c\n\nAn arbitrary file upload vulnerability in the plugin manager of LimeSurvey v5.4.15 allows attackers to execute arbitrary code via a crafted PHP file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T20:45:39.000000Z"}, {"uuid": "ea6f2f8a-2b2f-4c94-8f40-e70f99ba993d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4898", "type": "seen", "source": "https://t.me/cibsecurity/57201", "content": "\u203c CVE-2022-4898 \u203c\n\nIn affected versions of Octopus Server the help sidebar can be customized to include a Cross-Site Scripting payload in the support link. This was initially resolved in advisory 2022-07 however it was identified that the fix could be bypassed in certain circumstances. A different approach was taken to prevent the possibility of the support link being susceptible to XSS\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T07:37:47.000000Z"}, {"uuid": "e34dd2ed-c6cd-4a2b-9f47-ec81451096a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48176", "type": "seen", "source": "https://t.me/cibsecurity/57193", "content": "\u203c CVE-2022-48176 \u203c\n\nNetgear routers R7000P before v1.3.3.154, R6900P before v1.3.3.154, R7960P before v1.4.4.94, and R8000P before v1.4.4.94 were discovered to contain a pre-authentication stack overflow.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T02:47:35.000000Z"}, {"uuid": "b7521661-eec0-452c-905a-f2af6ad81ef5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48175", "type": "seen", "source": "https://t.me/cibsecurity/57192", "content": "\u203c CVE-2022-48175 \u203c\n\nRukovoditel v3.2.1 was discovered to contain a remote code execution (RCE) vulnerability in the component /rukovoditel/index.php?module=dashboard/ajax_request.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T02:47:34.000000Z"}, {"uuid": "045da886-948a-4df6-9528-eb0f4266127c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48006", "type": "seen", "source": "https://t.me/cibsecurity/57170", "content": "\u203c CVE-2022-48006 \u203c\n\nAn arbitrary file upload vulnerability in taocms v3.0.2 allows attackers to execute arbitrary code via a crafted PHP file. This vulnerability is exploited via manipulation of the upext variable at /include/Model/Upload.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-31T00:43:35.000000Z"}, {"uuid": "17b930ad-332f-4fe2-9a6d-ae879876e92a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48303", "type": "seen", "source": "https://t.me/cibsecurity/57138", "content": "\u203c CVE-2022-48303 \u203c\n\nGNU Tar through 1.34 has a one-byte out-of-bounds read that results in use of uninitialized memory for a conditional jump. Exploitation to change the flow of control has not been demonstrated. The issue occurs in from_header in list.c via a V7 archive in which mtime has approximately 11 whitespace characters.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-30T07:36:48.000000Z"}, {"uuid": "1eef31d9-26f1-455a-a154-5cf8b566de97", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48116", "type": "seen", "source": "https://t.me/cibsecurity/57111", "content": "\u203c CVE-2022-48116 \u203c\n\nAyaCMS v3.1.2 was discovered to contain a remote code execution (RCE) vulnerability via the component /admin/tpl_edit.inc.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T22:34:44.000000Z"}, {"uuid": "cb4b77ef-0b5e-4715-aee3-79db4b7540e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48118", "type": "seen", "source": "https://t.me/cibsecurity/57109", "content": "\u203c CVE-2022-48118 \u203c\n\nJorani v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Acronym parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T22:34:42.000000Z"}, {"uuid": "4c257d4c-a0aa-4d9f-a208-1b7022e8d991", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48011", "type": "seen", "source": "https://t.me/cibsecurity/57103", "content": "\u203c CVE-2022-48011 \u203c\n\nOpencats v0.9.7 was discovered to contain a SQL injection vulnerability via the importID parameter in the Import viewerrors function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T20:49:01.000000Z"}, {"uuid": "80b3d1af-987b-4009-a2b0-96c0a1c215ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48007", "type": "seen", "source": "https://t.me/cibsecurity/57079", "content": "\u203c CVE-2022-48007 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in identification.php of Piwigo v13.4.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User-Agent.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T20:45:45.000000Z"}, {"uuid": "951fbc99-0b40-409b-80ab-69ab597241d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48070", "type": "seen", "source": "https://t.me/cibsecurity/57052", "content": "\u203c CVE-2022-48070 \u203c\n\nPhicomm K2 v22.6.534.263 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:38.000000Z"}, {"uuid": "f8ea1425-4cd3-42b4-8d26-847445cdc2c1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48072", "type": "seen", "source": "https://t.me/cibsecurity/57049", "content": "\u203c CVE-2022-48072 \u203c\n\nPhicomm K2G v22.6.3.20 was discovered to contain a command injection vulnerability via the autoUpTime parameter in the automatic upgrade function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:35.000000Z"}, {"uuid": "dee13a7b-b0d8-4f65-b7ef-09e42566f0e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48067", "type": "seen", "source": "https://t.me/cibsecurity/57048", "content": "\u203c CVE-2022-48067 \u203c\n\nAn information disclosure vulnerability in Totolink A830R V4.1.2cu.5182 allows attackers to obtain the root password via a brute-force attack.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:31.000000Z"}, {"uuid": "d9b79c3b-7974-4eb8-a2ae-4abd4a1cade1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48073", "type": "seen", "source": "https://t.me/cibsecurity/57047", "content": "\u203c CVE-2022-48073 \u203c\n\nPhicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:30.000000Z"}, {"uuid": "8f487112-e07b-46ec-a1d9-52631db47fb9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48066", "type": "seen", "source": "https://t.me/cibsecurity/57046", "content": "\u203c CVE-2022-48066 \u203c\n\nAn issue in the component global.so of Totolink A830R V4.1.2cu.5182 allows attackers to bypass authentication via a crafted cookie.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:29.000000Z"}, {"uuid": "c0cd20aa-c78e-44fd-8df9-ff86c9cc09c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48069", "type": "seen", "source": "https://t.me/cibsecurity/57045", "content": "\u203c CVE-2022-48069 \u203c\n\nTotolink A830R V4.1.2cu.5182 was discovered to contain a command injection vulnerability via the QUERY_STRING parameter.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:28.000000Z"}, {"uuid": "122cb4f0-3662-45ae-be97-ecec24c2f039", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48071", "type": "seen", "source": "https://t.me/cibsecurity/57044", "content": "\u203c CVE-2022-48071 \u203c\n\nPhicomm K2 v22.6.534.263 was discovered to store the root and admin passwords in plaintext.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-27T18:34:27.000000Z"}, {"uuid": "f53afb04-b3db-4516-b768-d0f981c8a173", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48281", "type": "seen", "source": "https://t.me/cibsecurity/56821", "content": "\u203c CVE-2022-48281 \u203c\n\nprocessCropSelections in tools/tiffcrop.c in LibTIFF through 4.5.0 has a heap-based buffer overflow (e.g., \"WRITE of size 307203\") via a crafted TIFF image.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T07:29:33.000000Z"}, {"uuid": "42d08e6a-76d1-4370-a692-6404be678a39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4816", "type": "seen", "source": "https://t.me/cibsecurity/56865", "content": "\u203c CVE-2022-4816 \u203c\n\nA denial-of-service vulnerability has been identified in Lenovo Safecenter that could allow a local user to crash the application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-23T20:24:03.000000Z"}, {"uuid": "96c558ed-788d-4aec-a593-5b816e69064f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48124", "type": "seen", "source": "https://t.me/cibsecurity/56757", "content": "\u203c CVE-2022-48124 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the FileName parameter in the setting/setOpenVpnCertGenerationCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:35.000000Z"}, {"uuid": "910029b0-1893-4fde-b45c-3c201563dbc5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48121", "type": "seen", "source": "https://t.me/cibsecurity/56755", "content": "\u203c CVE-2022-48121 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the rsabits parameter in the setting/delStaticDhcpRules function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:33.000000Z"}, {"uuid": "c2bb6efb-4bf7-4930-8c79-1579744ace00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48125", "type": "seen", "source": "https://t.me/cibsecurity/56754", "content": "\u203c CVE-2022-48125 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the password parameter in the setting/setOpenVpnCertGenerationCfg function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:32.000000Z"}, {"uuid": "08074968-4e47-4184-babc-a6fa8718deee", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48122", "type": "seen", "source": "https://t.me/cibsecurity/56760", "content": "\u203c CVE-2022-48122 \u203c\n\nTOTOlink A7100RU V7.4cu.2313_B20191024 was discovered to contain a command injection vulnerability via the dayvalid parameter in the setting/delStaticDhcpRules function.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-20T18:27:38.000000Z"}, {"uuid": "3a351292-9693-4def-8f35-2f8cfe6d074f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4892", "type": "seen", "source": "https://t.me/cibsecurity/56708", "content": "\u203c CVE-2022-4892 \u203c\n\nA vulnerability was found in MyCMS. It has been classified as problematic. This affects the function build_view of the file lib/gener/view.php of the component Visitors Module. The manipulation of the argument original/converted leads to cross site scripting. It is possible to initiate the attack remotely. The name of the patch is d64fcba4882a50e21cdbec3eb4a080cb694d26ee. It is recommended to apply a patch to fix this issue. The associated identifier of this vulnerability is VDB-218895.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-19T12:21:39.000000Z"}, {"uuid": "6b97ca01-8e88-47ca-9227-f1b425e6fde6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4884", "type": "seen", "source": "https://t.me/cibsecurity/56165", "content": "\u203c CVE-2022-4884 \u203c\n\nPath-Traversal in MKP storing in Tribe29 Checkmk <=2.0.0p32 and <= 2.1.0p18 allows an administrator to write mkp files to arbitrary locations via a malicious mkp file.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-09T22:11:17.000000Z"}, {"uuid": "91531945-55fd-4880-b9d2-9da49eb5cf82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4881", "type": "seen", "source": "https://t.me/cibsecurity/56137", "content": "\u203c CVE-2022-4881 \u203c\n\nA vulnerability was found in CapsAdmin PAC3. It has been rated as problematic. Affected by this issue is some unknown functionality of the file lua/pac3/core/shared/http.lua. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. The name of the patch is 8fc9e12dfa21d757be6eb4194c763e848b299ac0. It is recommended to apply a patch to fix this issue. VDB-217646 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-08T16:26:41.000000Z"}, {"uuid": "f685bcd3-84a2-4199-a31c-e6ea8c955cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4876", "type": "seen", "source": "https://t.me/cibsecurity/55926", "content": "\u203c CVE-2022-4876 \u203c\n\nA vulnerability was found in Kaltura mwEmbed up to 2.96.rc1 and classified as problematic. This issue affects some unknown processing of the file includes/DefaultSettings.php. The manipulation of the argument HTTP_X_FORWARDED_HOST leads to cross site scripting. The attack may be initiated remotely. Upgrading to version 2.96.rc2 is able to address this issue. The name of the patch is 13b8812ebc8c9fa034eed91ab35ba8423a528c0b. It is recommended to upgrade the affected component. The associated identifier of this vulnerability is VDB-217427.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T02:18:28.000000Z"}, {"uuid": "dd5c5bac-6c73-42cd-aff1-89fea606cbe0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4877", "type": "seen", "source": "https://t.me/cibsecurity/55939", "content": "\u203c CVE-2022-4877 \u203c\n\nA vulnerability has been found in snoyberg keter up to 1.8.1 and classified as problematic. This vulnerability affects unknown code of the file Keter/Proxy.hs. The manipulation of the argument host leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.8.2 is able to address this issue. The name of the patch is d41f3697926b231782a3ad8050f5af1ce5cc40b7. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-217444.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T12:23:49.000000Z"}, {"uuid": "fe852cbc-dcfb-4e50-a7c3-5f95e726f6bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4869", "type": "seen", "source": "https://t.me/cibsecurity/55938", "content": "\u203c CVE-2022-4869 \u203c\n\nA vulnerability was found in Evolution Events Artaxerxes. It has been declared as problematic. This vulnerability affects unknown code of the file arta/common/middleware.py of the component POST Parameter Handler. The manipulation of the argument password leads to information disclosure. The attack can be initiated remotely. The name of the patch is 022111407d34815c16c6eada2de69ca34084dc0d. It is recommended to apply a patch to fix this issue. VDB-217438 is the identifier assigned to this vulnerability.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-05T12:23:45.000000Z"}, {"uuid": "b24ff1b9-1b9f-49fe-b19d-ac1f585b01a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48217", "type": "seen", "source": "https://t.me/cibsecurity/55914", "content": "\u203c CVE-2022-48217 \u203c\n\n** DISPUTED ** The tf_remapper_node component 1.1.1 for Robot Operating System (ROS) allows attackers, who control the source code of a different node in the same ROS application, to change a robot's behavior. This occurs because a topic name depends on the attacker-controlled old_tf_topic_name and/or new_tf_topic_name parameter. NOTE: the vendor's position is \"it is the responsibility of the programmer to make sure that only known and required parameters are set and unexpected parameters are not.\"\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T22:18:14.000000Z"}, {"uuid": "557eb1e5-bd1f-4ba6-af5c-c4551ecc9913", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48216", "type": "seen", "source": "https://t.me/cibsecurity/55890", "content": "\u203c CVE-2022-48216 \u203c\n\nUniswap Universal Router before 1.1.0 mishandles reentrancy. This would have allowed theft of funds.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-04T18:18:09.000000Z"}, {"uuid": "4a836552-5d6d-4edf-9173-79efdc049591", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48197", "type": "seen", "source": "https://t.me/cibsecurity/55739", "content": "\u203c CVE-2022-48197 \u203c\n\n** UNSUPPORTED WHEN ASSIGNED ** Reflected cross-site scripting (XSS) exists in the TreeView of YUI2 through 2800: up.php sam.php renderhidden.php removechildren.php removeall.php readd.php overflow.php newnode2.php newnode.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2023-01-02T18:30:24.000000Z"}, {"uuid": "f58f4d5b-6938-4073-8831-fb7436b891a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-31)", "content": "", "creation_timestamp": "2026-08-01T10:15:07.911130Z"}, {"uuid": "abab45ef-9ea8-4041-a7ed-898a8d5059bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48870", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7406", "content": "#exploit\n1. CVE-2022-48870:\nmaccms admin+ xss attacks\nhttps://github.com/Cedric1314/CVE-2022-48870\n\n2. CVE-2022-39253:\nDocker host file read\nhttps://github.com/ssst0n3/docker-cve-2022-39253-poc", "creation_timestamp": "2022-12-22T11:02:01.000000Z"}, {"uuid": "e80c3f2e-ce2d-42eb-ab3b-4a80589620ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4883", "type": "published-proof-of-concept", "source": "https://t.me/CyberSecurityTechnologies/7970", "content": "#Threat_Research\n1. NAPLISTENER/Wmdtc.exe Analysis\nhttps://www.elastic.co/security-labs/naplistener-more-bad-dreams-from-the-developers-of-siestagraph\n2. Analyzing Linux PATH hijacking vulnerability in the libxpm package (CVE-2022-4883)\nhttps://www.archcloudlabs.com/projects/cve-2022-4883", "creation_timestamp": "2023-03-21T11:26:35.000000Z"}, {"uuid": "7287b6d5-2add-441c-9c59-d1c118e51c28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-05-03)", "content": "", "creation_timestamp": "2026-05-03T00:00:00.000000Z"}, {"uuid": "56f42976-4218-400a-b2ba-7808109d5c30", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48475", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-07-31T05:00:04.265135Z"}, {"uuid": "73073ae8-d92e-4673-8939-1f76e3f999c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48474", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-07-31T05:00:04.225234Z"}, {"uuid": "efaff5d4-e5f2-4f3d-b244-3de8e5df274a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-02)", "content": "", "creation_timestamp": "2026-08-03T11:15:03.608728Z"}, {"uuid": "1df68c4f-ab2e-4abb-8ce0-562f578ec3f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4896", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11086", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-4896*\nGithub: https://github.com/sapellaniz/CVE-2022-4896", "creation_timestamp": "2026-07-31T06:00:05.527467Z"}, {"uuid": "e85c543d-78ec-44af-95a3-a95254e3f7ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48150", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10099", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *-CVE-2022-48150*\nGithub: https://github.com/sahilop123/-CVE-2022-48150", "creation_timestamp": "2026-07-31T08:00:04.405080Z"}, {"uuid": "9a28db97-88ad-4961-b244-252b43790228", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-30)", "content": "", "creation_timestamp": "2026-07-31T10:15:12.113955Z"}, {"uuid": "6aebf90f-62a1-426e-ac1d-051f26553f24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48310", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-07-31T19:00:03.863150Z"}, {"uuid": "042bd8e0-2a3a-4c03-8eb8-7ec05bae44c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48309", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-07-31T19:00:03.902343Z"}, {"uuid": "761f36ee-3203-455b-98ce-38435c5f7f51", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48875", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260511", "content": "", "creation_timestamp": "2026-05-10T18:00:00.000000Z"}, {"uuid": "bbbed8a9-2669-41f1-b22c-6f1f5edab72f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48474", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-08-01T00:00:41.316327Z"}, {"uuid": "efce3789-1a6c-452f-bcd7-541e746742a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48310", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-08-01T00:00:25.041692Z"}, {"uuid": "8cf8384f-41e0-455f-960e-62692eea715e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48309", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-08-01T00:00:25.075421Z"}, {"uuid": "4838f7c9-8508-40a0-8f91-adf1afd1ae0c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48150", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/10099", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *-CVE-2022-48150*\nGithub: https://github.com/sahilop123/-CVE-2022-48150", "creation_timestamp": "2026-08-01T00:00:37.748809Z"}, {"uuid": "49963b78-f8dc-4f53-9114-0bbf283d8106", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48475", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-08-01T00:00:41.353473Z"}, {"uuid": "dbfefe44-9fcb-4c8e-aa6b-467579ebca90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4896", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/11086", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-4896*\nGithub: https://github.com/sapellaniz/CVE-2022-4896", "creation_timestamp": "2026-08-01T00:00:41.478651Z"}, {"uuid": "fea49141-79fc-4701-b082-00f97e34a644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-21)", "content": "", "creation_timestamp": "2026-05-21T00:00:00.000000Z"}, {"uuid": "358df1af-e7cd-418a-aa1e-a5114b56cdf9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-19)", "content": "", "creation_timestamp": "2026-08-20T10:15:13.195373Z"}, {"uuid": "63712897-d304-4fe1-b229-77a3bda3da65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-05-29)", "content": "", "creation_timestamp": "2026-05-29T00:00:00.000000Z"}, {"uuid": "2fd95788-28e7-43cf-a74f-87489e7b7b81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-07)", "content": "", "creation_timestamp": "2026-08-08T11:02:50.990689Z"}, {"uuid": "0a3d42ef-24f6-4da4-bd2b-241e08513ea6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-07)", "content": "", "creation_timestamp": "2026-06-07T00:00:00.000000Z"}, {"uuid": "ed35f8ff-24a1-4ea0-90e3-6b9604b837b4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-20)", "content": "", "creation_timestamp": "2026-08-21T10:15:08.959800Z"}, {"uuid": "8d559c8c-02a2-4cf4-a14d-339d53fafd39", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-09)", "content": "", "creation_timestamp": "2026-06-09T00:00:00.000000Z"}, {"uuid": "a70f4ef4-75e2-44b0-9047-c4d8759e8973", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-15)", "content": "", "creation_timestamp": "2026-06-15T00:00:00.000000Z"}, {"uuid": "60338454-a88f-4a37-8357-2e39337aee2f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-17)", "content": "", "creation_timestamp": "2026-06-17T00:00:00.000000Z"}, {"uuid": "e58de3fa-5f34-4f0a-93a1-bb3ed9a976c6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-18)", "content": "", "creation_timestamp": "2026-06-18T00:00:00.000000Z"}, {"uuid": "0e1e56fd-432c-46c2-ab2e-c8ea9d48933e", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c43107ce-379f-4550-ae73-c9c39cc82620", "content": "", "creation_timestamp": "2026-06-19T12:46:09.869126Z"}, {"uuid": "366af39a-998f-4ded-9c67-01fa9a089b5f", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/c6c139fd-3f84-4830-bbbe-8b2080246034", "content": "", "creation_timestamp": "2026-06-19T12:45:23.689643Z"}, {"uuid": "74bb036f-dd84-4fa1-9965-e03c49881df1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48811", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/2c97ee9a-a24e-41e1-a43f-1be611992da2", "content": "", "creation_timestamp": "2026-06-19T12:46:38.170613Z"}, {"uuid": "4f17282c-015d-4b36-9f4b-006d88cd7d92", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3ede7e38-c1fc-4ba4-b295-a0d3bd8ca25f", "content": "", "creation_timestamp": "2026-06-19T12:46:42.758128Z"}, {"uuid": "118c2ed5-d06c-44a6-be3d-6d6f02f62d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-06-21)", "content": "", "creation_timestamp": "2026-06-21T00:00:00.000000Z"}, {"uuid": "c34663f2-2853-4565-95de-c61577085ae4", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a38a0065-9e93-4369-b1ee-1b999a4cefc7", "content": "", "creation_timestamp": "2026-06-23T14:03:31.781070Z"}, {"uuid": "3f8eb580-5895-4eaa-a602-67452bd9fd2b", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48503", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/fa26a02c-b2bb-48aa-a7fa-9ba67a6e1be2", "content": "", "creation_timestamp": "2026-06-23T14:03:49.130750Z"}, {"uuid": "9bcee736-8a76-4085-8486-04ed72991331", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48618", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/5965463d-ed07-43c4-9804-5f3d3937f6ff", "content": "", "creation_timestamp": "2026-06-23T14:05:50.978634Z"}, {"uuid": "c5b59989-91e8-49dd-ab09-af1e9661650d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqdhs65te2v", "content": "CVE-2022-48174 - busybox\nA security patch has been applied to the busybox software in a specific Linux environment. This patch fixes a vulnerability that could allow an unprivileged user to gain\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#busybox #RootAlpine315 #CVE #infosec", "creation_timestamp": "2026-08-10T14:42:04.106193Z"}, {"uuid": "0c286139-28d7-4de3-a1fd-f33c250ee217", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48174", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3msqdhsmd7q2u", "content": "CVE-2022-48174 - busybox\nThe busybox package on Root:Alpine:3.17 has a security issue that allows unauthorized users to access sensitive features. This could allow malicious users to perform actions\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#busybox #RootAlpine317 #CVE #infosec", "creation_timestamp": "2026-08-10T14:42:04.716849Z"}, {"uuid": "910efd47-be92-433a-ba2b-f0edb7f1deb5", "vulnerability_lookup_origin": "c8fb6bf1-f81f-4cb8-95b1-eadbb3b54ee8", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/601ca581-8558-4d57-ad7c-58bb8445099a", "content": "", "creation_timestamp": "2026-06-30T09:23:40.541945Z"}, {"uuid": "de3980dd-8d8d-441f-abed-e133259f9391", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48816", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/ubuntu-linux-kernel-multiple-vulnerabilities_20260702", "content": "", "creation_timestamp": "2026-07-02T05:52:27.518106Z"}, {"uuid": "e9d48c51-5e6d-4951-b964-cb2c3076ee92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2022-48703", "type": "seen", "source": "https://www.hkcert.org/security-bulletin/debian-linux-kernel-multiple-vulnerabilities_20260706", "content": "", "creation_timestamp": "2026-07-06T05:46:58.491991Z"}, {"uuid": "6c8b2f0a-e275-41f4-81ce-29dcd05e2578", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48111", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mpxbolybnr2f", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2022-48111: XSS \u0432 SIPE s.r.o. \u0438 \u0435\u0451 \u043f\u043e\u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u044f \u0434\u043b\u044f \u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438\n\n\n\nhttps://kripta.biz/posts/74623928-129E-4519-9913-3398028A4B7D", "creation_timestamp": "2026-07-06T04:43:09.568352Z"}, {"uuid": "6cc4bd7a-233e-470e-a1f0-a6c915269974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-21)", "content": "", "creation_timestamp": "2026-08-22T10:00:15.974636Z"}, {"uuid": "b69ae546-176c-4fb6-8a88-d27b7c329072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-06)", "content": "", "creation_timestamp": "2026-07-07T10:15:09.595720Z"}, {"uuid": "58ba1aac-8ee6-4230-b399-40a74ca3fdcb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-21)", "content": "", "creation_timestamp": "2026-08-22T10:15:08.863313Z"}, {"uuid": "012b9e8b-ffb4-4562-b4dc-6dfcd908bc8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:00:10.620984Z"}, {"uuid": "14e65bb0-41fd-41d7-9e05-56c83b6b1054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-09)", "content": "", "creation_timestamp": "2026-07-10T10:15:06.870634Z"}, {"uuid": "aca7bbc1-d7b2-43ba-8bab-b111d37502b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:15:46.817059Z"}, {"uuid": "5d395d6e-4c15-4902-a4e6-548b95c944e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-07-26)", "content": "", "creation_timestamp": "2026-07-27T10:15:09.739581Z"}, {"uuid": "7273b988-de66-4448-808a-abeb53f04a96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-24)", "content": "", "creation_timestamp": "2026-08-25T10:15:11.095795Z"}, {"uuid": "ba7960b1-9801-4654-9621-a70653e8d2e2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:00:05.787245Z"}, {"uuid": "3eeb880c-0fbd-456d-9a58-abcd17b37bd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-23)", "content": "", "creation_timestamp": "2026-08-24T10:15:42.143045Z"}, {"uuid": "f771db68-742f-4a0a-a0bc-a338bb4819fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4896", "type": "seen", "source": "https://t.me/CVEhub/11086", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-4896*\nGithub: https://github.com/sapellaniz/CVE-2022-4896", "creation_timestamp": "2026-07-29T12:00:37.828387Z"}, {"uuid": "45746803-45ee-4823-8775-4374935a429a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48474", "type": "seen", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-07-29T12:00:37.923111Z"}, {"uuid": "c87745b9-8746-45aa-b932-97e876400528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48475", "type": "seen", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-07-29T12:00:37.953511Z"}, {"uuid": "9d429dc5-5d6f-4745-b826-3257dff8d776", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48150", "type": "seen", "source": "https://t.me/CVEhub/10099", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *-CVE-2022-48150*\nGithub: https://github.com/sahilop123/-CVE-2022-48150", "creation_timestamp": "2026-07-29T12:00:41.958955Z"}, {"uuid": "0c8c742a-3f09-47e0-9a4f-cc2d6c31e9bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48310", "type": "seen", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-07-29T12:00:52.581202Z"}, {"uuid": "bdd73a1c-eef6-4bef-b007-15039396eb41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48309", "type": "seen", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-07-29T12:00:52.606622Z"}, {"uuid": "8527b951-b75c-43b1-9607-d54bd024b8e7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-08-27)", "content": "", "creation_timestamp": "2026-08-28T10:00:08.600047Z"}, {"uuid": "305ee9cc-e3d3-41da-a2f4-c8b88d63686b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4896", "type": "seen", "source": "https://t.me/CVEhub/11086", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-4896*\nGithub: https://github.com/sapellaniz/CVE-2022-4896", "creation_timestamp": "2026-07-30T00:01:03.681469Z"}, {"uuid": "25e35559-8631-4cc9-a8d3-8b5f952d22d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48474", "type": "seen", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-07-30T00:01:05.093075Z"}, {"uuid": "c89882bd-3bbf-4b0e-8be0-a51d4f2c3c63", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48475", "type": "seen", "source": "https://t.me/CVEhub/11085", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#exploit\nName: *CVE-2022-48474_CVE-2022-48475*\nGithub: https://github.com/sapellaniz/CVE-2022-48474_CVE-2022-48475", "creation_timestamp": "2026-07-30T00:01:05.137051Z"}, {"uuid": "1e4ff21f-f312-4035-b0f4-c2eeed8bdf46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48150", "type": "seen", "source": "https://t.me/CVEhub/10099", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *-CVE-2022-48150*\nGithub: https://github.com/sahilop123/-CVE-2022-48150", "creation_timestamp": "2026-07-30T00:01:10.632946Z"}, {"uuid": "c82487a6-689f-4f75-9512-936697af3061", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48310", "type": "seen", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-07-30T00:01:29.899868Z"}, {"uuid": "d9651ca9-e34a-452a-a6ff-166c74f5fbf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48309", "type": "seen", "source": "https://t.me/CVEhub/6214", "content": "\ud83d\udc7eKEYWORD SERVICE \ud83c\udff7#CVE-2022\nName: *CVE-2022-48309-and-CVE-2022-48310*\nGithub: https://github.com/nitschSB/CVE-2022-48309-and-CVE-2022-48310", "creation_timestamp": "2026-07-30T00:01:29.932818Z"}, {"uuid": "93302548-cb82-426d-ba27-2bed22b3a685", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-08-26)", "content": "", "creation_timestamp": "2026-08-27T10:15:12.224618Z"}, {"uuid": "3349f55d-407d-45a5-a017-fc9e9f1e5a27", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-01T17:00:07.180961Z"}, {"uuid": "2098f8f1-b897-4b21-9cd1-73ae60104b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-01T17:00:07.287373Z"}, {"uuid": "1f4170c5-d2d6-463b-b425-0a263e1eeff4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-01T20:00:43.813974Z"}, {"uuid": "a564cf4f-77c4-43d7-ac5f-c2941630a2a0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48110", "type": "seen", "source": "https://t.me/hacking_Attack/89590", "content": "Exploit Collector\nCKSource CKEditor5 35.4.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nCKSource CKEditor5 version 35.4.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | f08f1c1afb7a0cc51037710c177cce329c3a5c0949bafac6a223f8bdc91011aa\n\nDownload\n# Exploit Title: Cross Site Scripting in CKSource's CKEditor5 35.4.0\n# Google Dork: N/A\n# Date: February 09, 2023\n# Exploit Author: Manish Pathak\n# Vendor Homepage: https://cksource.com/\n# Software Link: https://ckeditor.com/ckeditor-5/download/\n# Version: 35.4.0\n# Tested on: Linux / Web\n# CVE : CVE-2022-48110\nCKSource CKEditor5 35.4.0 was discovered to contain a cross-site scripting\n(XSS) vulnerability via Full Featured CKEditor5 Widget as the editor fails\nto sanitize user provided data.\n\nAn attacker can execute arbitrary script in the browser in the context of\nthe affected site. This can allow the attacker to steal cookie-based\nauthentication credentials and launch other attacks.\n\nCKEditor5 version 35.4.0 is tested & found to be vulnerable.\n\nDocumentation avaiable at\nhttps://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html#security\n\nSecurity Docs Says \"\"\"The HTML embed feature does not currently execute\ncode in \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-01T20:01:04.973023Z"}, {"uuid": "d49ec82e-177d-4c33-9dea-f62b617c2d67", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-02T01:01:04.490229Z"}, {"uuid": "b1f9572a-1287-4bc1-971f-45870333737e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48110", "type": "seen", "source": "https://t.me/hacking_Attack/89590", "content": "Exploit Collector\nCKSource CKEditor5 35.4.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nCKSource CKEditor5 version 35.4.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | f08f1c1afb7a0cc51037710c177cce329c3a5c0949bafac6a223f8bdc91011aa\n\nDownload\n# Exploit Title: Cross Site Scripting in CKSource's CKEditor5 35.4.0\n# Google Dork: N/A\n# Date: February 09, 2023\n# Exploit Author: Manish Pathak\n# Vendor Homepage: https://cksource.com/\n# Software Link: https://ckeditor.com/ckeditor-5/download/\n# Version: 35.4.0\n# Tested on: Linux / Web\n# CVE : CVE-2022-48110\nCKSource CKEditor5 35.4.0 was discovered to contain a cross-site scripting\n(XSS) vulnerability via Full Featured CKEditor5 Widget as the editor fails\nto sanitize user provided data.\n\nAn attacker can execute arbitrary script in the browser in the context of\nthe affected site. This can allow the attacker to steal cookie-based\nauthentication credentials and launch other attacks.\n\nCKEditor5 version 35.4.0 is tested & found to be vulnerable.\n\nDocumentation avaiable at\nhttps://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html#security\n\nSecurity Docs Says \"\"\"The HTML embed feature does not currently execute\ncode in \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-02T01:01:25.635231Z"}, {"uuid": "2e91b8ed-0662-4f47-9636-e0d372e26b07", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-02T01:03:35.693437Z"}, {"uuid": "20f780aa-342d-4f02-86c9-8a9bc80df085", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-02T01:03:35.542822Z"}, {"uuid": "bf32baed-b9f6-4a61-8fbb-6a3193dada82", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-04T02:00:05.472253Z"}, {"uuid": "6dfd9382-a91f-45c4-b346-8fa846a7b13a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48110", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/89590", "content": "Exploit Collector\nCKSource CKEditor5 35.4.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nCKSource CKEditor5 version 35.4.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | f08f1c1afb7a0cc51037710c177cce329c3a5c0949bafac6a223f8bdc91011aa\n\nDownload\n# Exploit Title: Cross Site Scripting in CKSource's CKEditor5 35.4.0\n# Google Dork: N/A\n# Date: February 09, 2023\n# Exploit Author: Manish Pathak\n# Vendor Homepage: https://cksource.com/\n# Software Link: https://ckeditor.com/ckeditor-5/download/\n# Version: 35.4.0\n# Tested on: Linux / Web\n# CVE : CVE-2022-48110\nCKSource CKEditor5 35.4.0 was discovered to contain a cross-site scripting\n(XSS) vulnerability via Full Featured CKEditor5 Widget as the editor fails\nto sanitize user provided data.\n\nAn attacker can execute arbitrary script in the browser in the context of\nthe affected site. This can allow the attacker to steal cookie-based\nauthentication credentials and launch other attacks.\n\nCKEditor5 version 35.4.0 is tested & found to be vulnerable.\n\nDocumentation avaiable at\nhttps://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html#security\n\nSecurity Docs Says \"\"\"The HTML embed feature does not currently execute\ncode in \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-04T21:00:04.171982Z"}, {"uuid": "5d940ef9-9e38-49e1-ba79-56e453b0b63c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48110", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/89590", "content": "Exploit Collector\nCKSource CKEditor5 35.4.0 Cross Site Scripting\n\nhttps://4.bp.blogspot.com/-rlkVZrkp7Nk/WWlvMMd1AsI/AAAAAAAAIMM/kgTZoxpDP8Ypbt5o2Ma3tAKenLk3_TLPQCLcBGAs/s1600/h18.png \nCKSource CKEditor5 version 35.4.0 suffers from a cross site scripting vulnerability.\n\nSHA-256 | f08f1c1afb7a0cc51037710c177cce329c3a5c0949bafac6a223f8bdc91011aa\n\nDownload\n# Exploit Title: Cross Site Scripting in CKSource's CKEditor5 35.4.0\n# Google Dork: N/A\n# Date: February 09, 2023\n# Exploit Author: Manish Pathak\n# Vendor Homepage: https://cksource.com/\n# Software Link: https://ckeditor.com/ckeditor-5/download/\n# Version: 35.4.0\n# Tested on: Linux / Web\n# CVE : CVE-2022-48110\nCKSource CKEditor5 35.4.0 was discovered to contain a cross-site scripting\n(XSS) vulnerability via Full Featured CKEditor5 Widget as the editor fails\nto sanitize user provided data.\n\nAn attacker can execute arbitrary script in the browser in the context of\nthe affected site. This can allow the attacker to steal cookie-based\nauthentication credentials and launch other attacks.\n\nCKEditor5 version 35.4.0 is tested & found to be vulnerable.\n\nDocumentation avaiable at\nhttps://ckeditor.com/docs/ckeditor5/latest/features/html-embed.html#security\n\nSecurity Docs Says \"\"\"The HTML embed feature does not currently execute\ncode in \n\nSource:packetstormsecurity.com", "creation_timestamp": "2026-09-05T01:00:14.983793Z"}, {"uuid": "da4f1d0e-d793-4fee-aa9e-80504b457121", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/hacking_Attack/125027", "content": "Black Hat Ethical Hacking\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\n\nUnpatched Vulnerabilities in NGINX Ingress Controller for Kubernetes Open Door to Credential Theft\nPost Views: 0 Premium Content https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nA trio of unpatched high-severity security vulnerabilities in the NGINX Ingress controller for Kubernetes has recently been disclosed, posing a substantial threat to Kubernetes clusters. These vulnerabilities could potentially be exploited by threat actors to steal sensitive credentials from the cluster.\n\nThe identified vulnerabilities are as follows:\n\n1. CVE-2022-4886 (CVSS score: 8.8) \u2013 This vulnerability allows the bypassing of Ingress-nginx path sanitization, potentially leading to the theft of credentials from the ingress-nginx controller.\n\n2. CVE-2023-5043 (CVSS score: 7.6) \u2013 An Ingress-nginx annotation injection flaw enables arbitrary command execution, putting the cluster\u2019s security at risk.\n\n3. CVE-2023-5044 (CVSS score: 7.6) \u2013 This vulnerability facilitates code injection through the nginx.ingress.kubernetes.io/permanent-redirect annotation.\nAccording to Ben Hirschberg, CTO and co-founder of Kubernetes security platform ARMO, these vulnerabilities offer an attacker who can control the configuration of the Ingress object the ability to steal secret credentials from the cluster, particularly with CVE-2023-5043 and CVE-2023-5044.\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses\nThe successful exploitation of these vulnerabilities could result in an adversary injecting arbitrary code into the ingress controller process, potentially gaining unauthorized access to sensitive data.\n\nCVE-2022-4886 stems from a lack of validation in the \u201cspec.rules[].http.paths[].path\u201d field, allowing an attacker with access to the Ingress object to pilfer Kubernetes API credentials from the ingress controller. Mitigations\n\nTo mitigate these issues, the software maintainers have released specific steps, including enabling the \u201cstrict-validate-path-type\u201d option and setting the \u2013enable-annotation-validation flag to prevent the creation of Ingress objects with invalid characters and enforce additional restrictions.\nTrending: Jeff Foley \u2013 OWASP Amass Founder Trending: Recon Tool: CHOMTE.SH\nUpgrading NGINX to version 1.19, in addition to adding the \u201c\u2013enable-annotation-validation\u201d command-line configuration, is recommended by ARMO to address CVE-2023-5043 and CVE-2023-5044.\n\nHirschberg emphasized that all these vulnerabilities converge on the same underlying problem \u2013 the privileged nature of ingress controllers, which have access to TLS secrets and Kubernetes API. Being public-facing components, they are especially vulnerable to external traffic entering the cluster through them. This calls for heightened security measures to protect Kubernetes clusters from potential breaches.\nTrending: StripedFly Malware: A Five-Year Undetected Threat to Windows and Linux Systems Are u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/10/Images-for-the-News-posts-4-1-300x15[...]", "creation_timestamp": "2026-09-05T01:00:44.325802Z"}, {"uuid": "6fdc8273-cce9-4019-bc5e-12ae518eca0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-04)", "content": "", "creation_timestamp": "2026-09-05T10:15:38.291092Z"}, {"uuid": "d9848855-7ab4-43c3-8733-cdd5bdb476fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-07)", "content": "", "creation_timestamp": "2026-09-08T10:00:09.467609Z"}, {"uuid": "5134358d-63a0-45de-8443-23c51fe1094e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-08T22:00:04.493014Z"}, {"uuid": "530ae8ac-5788-47d6-9069-63235a462d96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-08T22:00:04.628781Z"}, {"uuid": "a8cac137-bfbc-4f50-ac51-84ea733848ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "published-proof-of-concept", "source": "https://t.me/Hackme_news/875", "content": "\u041e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0442\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432  ingress \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 NGINX \u0438 \u0438\u0445 \u0432\u043b\u0438\u044f\u043d\u0438\u0435 \u043d\u0430 Kubernetes (3 \u043c\u0438\u043d\u0443\u0442\u044b \u0447\u0442\u0435\u043d\u0438\u044f)                                                                                                                                                                        \u0422\u0440\u0438 \u043d\u043e\u0432\u044b\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442\u043e\u043c NGINX ingress \u0432 Kubernetes (CVE-2023-5043, CVE-2023-5044 \u0438 CVE-2022-4886), \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b 27 \u043e\u043a\u0442\u044f\u0431\u0440\u044f. \u042d\u0442\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c, \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u0438\u0440\u0443\u044e\u0449\u0438\u043c \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u043f\u043e\u0445\u0438\u0442\u0438\u0442\u044c \u0441\u0435\u043a\u0440\u0435\u0442\u043d\u044b\u0435 \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0430, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u0441\u0435\u0440\u0432\u0435\u0440\u0430 Kubernetes API \u0441 \u043e\u0447\u0435\u043d\u044c \u0432\u044b\u0441\u043e\u043a\u0438\u043c\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u044f\u043c\u0438.                                                                                                         \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u0435\u0435\u2192 https://www.armosec.io/blog/cve-2023-5043-nginx-ingress/", "creation_timestamp": "2026-09-09T00:00:11.978652Z"}, {"uuid": "6a1c4f1c-b6c7-4933-90cd-fcfeb3b6b126", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-4886", "type": "seen", "source": "https://t.me/Hackme_news/879", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 ingress-nginx, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u044b Kubernetes\n\n\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u043c \u043f\u0440\u043e\u0435\u043a\u0442\u043e\u043c Kubernetes ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u044b \u0442\u0440\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u043e\u0431\u044a\u0435\u043a\u0442\u0430 Ingress, \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0445, \u0441\u0440\u0435\u0434\u0438 \u043f\u0440\u043e\u0447\u0435\u0433\u043e, \u0445\u0440\u0430\u043d\u044f\u0442\u0441\u044f \u0438 \u0443\u0447\u0451\u0442\u043d\u044b\u0435 \u0434\u0430\u043d\u043d\u044b\u0435 \u0434\u043b\u044f \u043e\u0431\u0440\u0430\u0449\u0435\u043d\u0438\u044f \u043a \u0441\u0435\u0440\u0432\u0435\u0440\u0430\u043c Kubernetes, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0438\u0435 \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043a \u043a\u043b\u0430\u0441\u0442\u0435\u0440\u0443. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u044f\u0432\u043b\u044f\u044e\u0442\u0441\u044f \u0442\u043e\u043b\u044c\u043a\u043e \u0432 ingress-\u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0435 ingress-nginx \u043e\u0442 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 Kubernetes \u0438 \u043d\u0435 \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u0435\u0442 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440 kubernetes-ingress, \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u044b\u0439 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0430\u043c\u0438 NGINX. https://www.nginx.com/blog/which-nginx-ingress-controllers-are-impacted-by-cve-2022-4886-cve-2023-5043-and-cve-2023-5044/", "creation_timestamp": "2026-09-09T00:00:12.145775Z"}, {"uuid": "90ff70dc-1102-4e40-8e3f-f75ee221fb55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "seen", "source": "The Shadowserver (honeypot/common-vulnerabilities) - (2026-09-08)", "content": "", "creation_timestamp": "2026-09-09T10:00:13.542682Z"}, {"uuid": "e50a3393-f71c-4a6c-9e4c-464d69d16156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-48164", "type": "exploited", "source": "The Shadowserver (honeypot/exploited-vulnerabilities) - (2026-09-09)", "content": "", "creation_timestamp": "2026-09-10T10:15:23.666151Z"}]}