RST Threat feed. IOC: api.angelwallet.xyz

Found **api[.]angelwallet.xyz** in [RST Threat Feed](https://rs...Read More ...

Continue Reading
RST Threat feed. IOC: https://117.25.156.179:443/api/v1

Found **https://117[.]25.156.179:443/api/v1** in [RST Threat Fee...Read More ...

Continue Reading
CVE-2022-30034

Flower, a web UI for the Celery Python RPC framework, all versions as of 05-02-2022 is vulnerable to an OAuth authentication bypass. An attacker could then access the Flower API to discover and invoke ...

Continue Reading
SUSE SLES15 Security Update : php8 (SUSE-SU-2022:1928-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2022:1928-1 advisory. Note that Nessus has not tested for this issue but has ...

Continue Reading
CVE-2022-26134

In affected versions of Confluence Server and Data Center, an OGNL injection vulnerability exists that would allow an unauthenticated attacker to execute arbitrary code on a Confluence Server or Data ...

Continue Reading
paysdelaloire.fr Cross Site Scripting vulnerability OBB-2635906

Following the coordinated and responsible vulnerability disclosure guidelines of the **[ISO 29147]()** standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. not ...

Continue Reading
CVE-2022-29778

** UNSUPPORTED WHEN ASSIGNED ** D-Link DIR-890L 1.20b01 allows attackers to execute arbitrary code due to the hardcoded option Wake-On-Lan for the parameter 'descriptor' at SetVirtualServerSettings.ph ...

Continue Reading
CVE-2022-29773

An access control issue in aleksis/core/util/auth_helpers.py: ClientProtectedResourceMixin of AlekSIS-Core v2.8.1 and below allows attackers to access arbitrary scopes if no allowed scopes are specifi ...

Continue Reading

Back to Main

Subscribe for the latest news: