SecureVia @SecureVia1

Cybersecurity from the inside out! Joined October 2020

Tweets

3K
Followers

29
Following

65
Likes

0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-33146 - Open redirect vulnerability in web2py versions prior to 2.22.5 allows a remote attacker to redirect a user to an arbitrary web site and conduct a phishing attack by having a user to access a specially See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-2214 - A vulnerability was found in SourceCodester Library Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file /librarian/bookdetails.php. T See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-2213 - A vulnerability was found in SourceCodester Library Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/edit_admin See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-2212 - A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2020-27509 - Persistent XSS in Galaxkey Secure Mail Client in Galaxkey up to 5.6.11.5 allows an attacker to perform an account takeover by intercepting the HTTP Post request when sending an email and injecting a s See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-33121 - A Cross-Site Request Forgery (CSRF) in MiniCMS v1.11 allows attackers to arbitrarily delete local .dat files via clicking on a malicious link. See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-33122 - A stored cross-site scripting (XSS) vulnerability in eyoucms v1.5.6 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL field under the login page. See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-27238 - BigBlueButton version 2.4.7 (or earlier) is vulnerable to stored Cross-Site Scripting (XSS) in the private chat functionality. A threat actor could inject JavaScript payload in his/her username. The p See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-30028 - Dradis Professional Edition before 4.3.0 allows attackers to change an account password via reusing a password reset token. See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2020-7715 - All versions of package deep-get-set are vulnerable to Prototype Pollution via the main function. See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-21231 - All versions of package deep-get-set are vulnerable to Prototype Pollution via the 'deep' function. **Note:** This vulnerability derives from an incomplete fix of [CVE-2020-7715](https://security.snyk See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-29330 - Missing access control in the backup system of Telesoft VitalPBX before 3.2.1 allows attackers to access the PJSIP and SIP extension credentials, cryptographic keys and voicemails files via unspecifie See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-29096 - Dell Wyse Management Suite 3.6.1 and below contains a Reflected Cross-Site Scripting Vulnerability in saveGroupConfigurations page. An authenticated attacker could potentially exploit this vulnerabili See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2021-39409 - A vulnerability exists in Online Student Rate System v1.0 that allows any user to register as an administrator without needing to be authenticated. See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-32990 - An issue in gimp_layer_invalidate_boundary of GNOME GIMP 2.10.30 allows attackers to trigger an unhandled exception via a crafted XCF file, causing a Denial of Service (DoS). See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2021-21551 - Dell dbutil_2_3.sys driver contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user acce See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-34495 - rpmsg_probe in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. See nvd.nist.gov/vuln/detail/CV…

0 1 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-34494 - rpmsg_virtio_add_ctrl_dev in drivers/rpmsg/virtio_rpmsg_bus.c in the Linux kernel before 5.18.4 has a double free. See nvd.nist.gov/vuln/detail/CV…

0 1 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-2206 - Out-of-bounds Read in GitHub repository vim/vim prior to 8.2. See nvd.nist.gov/vuln/detail/CV…

0 0 0 0 0

SecureVia @SecureVia1

3 years ago

Emerging Vulnerability Found CVE-2022-2121 - OFFIS DCMTK's (All versions prior to 3.6.7) has a NULL pointer dereference vulnerability while processing DICOM files, which may result in a denial-of-service condition. See nvd.nist.gov/vuln/detail/CV…