CVE-2022-29822 - Feathers.js Improper Parameter Filtering Leads to SQL Injection Attack
In early 2022, a serious vulnerability was discovered in the popular Feathers.js web framework. Tracked as CVE-2022-29822, the flaw is caused by improper filtering
CVE-2022-29823 - Remote Code Execution in Feather-Sequelize’s cleanQuery—An Exclusive Deep Dive
The security of backend systems is paramount, especially when dealing with code that interacts directly with databases. One of the subtle-yet-devastating vulnerabilities discovered in 2022
CVE-2022-2422 - SQL Injection in FeathersJS Through feathers-sequelize – A Simple Explanation & Walkthrough
FeathersJS is a popular web framework for building flexible and real-time web APIs in Node.js. However, improper input validation in some versions of FeathersJS,
CVE-2022-36454 - Impersonation Vulnerability in Mitel MiCollab Up to 9.5..101—Exploiting Profile Parameter Manipulation
A critical vulnerability, CVE-2022-36454, has been discovered in the MiCollab Client API of Mitel MiCollab, affecting versions up to 9.5..101. This weakness allows
CVE-2022-36453 - How a Simple Bug Lets You Control Other Users’ Extensions in Mitel MiCollab
Mitel’s MiCollab is a widely used collaboration platform, powering businesses with voice, messaging, and conference tools. If you’re running MiCollab versions from 9.
Episode
00:00:00
00:00:00