Advisories

Advisory Mar 14, 2022

(CVE-2022-28730) Apache JSPWiki v2.11.1 - Reflected XSS in AjaxPreview.jsp

CVE: CVE-2022-28730 Tested Versions: Latest release v2.11.2 CVSSv3.1 Base Score: 5.4 (Medium) CVSSv3.1 String: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N …

ByPoh Jia Hao

Advisory Mar 04, 2022

(CVE-2022-26718) macOS smbfs Out-of-Bounds Read due to parse nic info

CVE: CVE-2022-26718 Tested Versions: macOS 11.x.x <= 11.6.4 macOS 12.x.x <= 12.2.1 Product URL(s): https://www.apple.com/ Description of the vulnerability …

ByPeter Nguyễn Vũ Hoàng

Advisory Jan 11, 2022

(CVE-2022-21877) Storage Spaces Controller Information Disclosure Vulnerability

Summary Product Storage Spaces Vendor Microsoft Severity Medium Affected Versions spaceport.sys in Windows 10 and Windows Server 2019 Tested Versions …

ByLê Hữu Quang Linh

Advisory Sep 13, 2021

(CVE-2021-30844) macOS smbfs Out-of-Bounds Read

CVE: CVE-2021-30844 Tested Versions: macOS BigSur 11.0 - 11.2.3 Product URL(s): https://apple.com Description of the vulnerability smbfs is a kext driver which …

ByPeter Nguyễn Vũ Hoàng

Advisory Sep 13, 2021

(CVE-2021-30845) macOS smbfs Out-of-Bounds Read

CVE: CVE-2021-30845 Tested Versions: macOS BigSur 11.0 - 11.2.3 Product URL(s): https://apple.com/ Description of the vulnerability smbfs is a kext driver which …

ByPeter Nguyễn Vũ Hoàng

Advisory Jun 18, 2021

(CVE-2021-30868) macOS smbfs Race Condition leading to Use-After-Free Vulnerability

CVE: CVE-2021-30868 Tested Versions: macOS BigSur 11.0 - 11.2.3 Product URL(s): https://apple.com/ Description of the vulnerability smbfs is a kext driver which …

ByPeter Nguyễn Vũ Hoàng

Advisory Jun 10, 2021

(CVE-20221-35400) Prolink PRC2402M mesh.cgi get_extender_page Un-authenticated Command Injection Vulnerability

CVE: CVE-2021-35400 Tested Versions: Prolink PRC2402M 20190909 Product URL(s): https://prolink2u.com/ Description of the vulnerability This vulnerability is …

ByDaniel Lim Wee Soong

Advisory Jun 10, 2021

(CVE-20221-35401) Prolink PRC2402M login.cgi sys_login Un-authenticated Command Injection Vulnerability

CVE: CVE-2021-35401 Tested Versions: Prolink PRC2402M 20190909 Product URL(s): https://prolink2u.com/ Description of the vulnerability This vulnerability is …

ByDaniel Lim Wee Soong

Advisory Jun 10, 2021

(CVE-20221-35403) Prolink PRC2402M touchlist_sync.cgi main Un-authenticated Command Injection Vulnerability

CVE: CVE-2021-35403 Tested Versions: Prolink PRC2402M 20190909 Product URL(s): https://prolink2u.com/ Description of the vulnerability This vulnerability is …

ByDaniel Lim Wee Soong

Advisory Jun 10, 2021

(CVE-20221-35404) Prolink PRC2402M applogin.cgi sys_login1 Authenticated Command Injection Vulnerability

CVE: CVE-2021-35404 Tested Versions: Prolink PRC2402M 20190909 Product URL(s): https://prolink2u.com/ Description of the vulnerability This vulnerability is …

ByDaniel Lim Wee Soong