CVE-2022-0557 OS Command Injection in Packagist microweber/microweber prior to 1.2.11.
It has been fixed in version 1.2.12. In older versions, attackers could inject an arbitrary command as GET or POST request parameter by
CVE-2022-22534 - Exploiting SAP NetWeaver Vulnerability to Steal User IDs and Passwords
Summary:
A critical vulnerability, CVE-2022-22534, was discovered in SAP NetWeaver. The flaw is due to insufficient encoding of user input, letting unauthenticated attackers
CVE-2022-0502 - Stored Cross-site Scripting (XSS) in remdex/livehelperchat Prior to 3.93
A critical stored Cross-site Scripting (XSS) vulnerability, tracked as CVE-2022-0502, was discovered in the popular PHP-based live chat software remdex/livehelperchat
CVE-2022-23614 - Twig Template Sandbox Vulnerability Unpacked
Twig is a popular open source template engine for PHP, widely used in Symfony, Drupal, and custom PHP apps for decoupling logic and views. In
CVE-2022-0218 - How Attackers Exploit the WP HTML Mail Plugin to Hijack WordPress Sites
The WordPress platform powers a huge share of the internet, and plugins extend its functionality. But sometimes, plugins come with security holes that hackers are
Episode
00:00:00
00:00:00