Active exploit activity
CVE-2022-23046 Phpipam SQL injection
- Public exploit or PoC available
- Exploit activity linked
Phpipam SQL injection now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Track daily vulnerability activity, KEV additions, public exploits, critical disclosures, and EPSS risk shifts.
Three highest-priority changes — analyst brief, not a CVE dump.
Active exploit activity
Phpipam SQL injection now has public exploit or PoC linkage — assume opportunistic scanning and targeted follow-on activity.
Critical exposure
New critical Dell Emc Unity Operating Environment Auth Bypass (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
Critical exposure
New critical Iresturant Project Iresturant SQL Injection (CVSS 9.8) — fresh disclosure window; early internet scanning often precedes mature exploit chains.
CISA KEV — confirmed in-the-wild exploitation.
Nothing flagged in this category for this digest.
PhpIPAM v1.4.4 allows an authenticated admin user to inject SQL sentences in the "subnet" parameter while searching a subnet via app/admi...
Nothing flagged in this category for this digest.
Dell VNX2 OE for File versions 8.1.21.266 and earlier, contain an authentication bypass vulnerability.
Authentication Bypass by Primary Weakness in GitHub repository adodb/adodb prior to 5.20.21.
The code that performs password matching when using 'Basic' HTTP authentication does not use a constant-time memcmp and has no rate-limit...
MartDevelopers iResturant 1.0 is vulnerable to SQL Injection.
In ForestBlog, as of 2021-12-28, File upload can bypass verification.
In JeecgBoot 3.0, there is a SQL injection vulnerability that can operate the database with root privileges.
The firmware on Moxa TN-5900 devices through 3.1 allows command injection that could lead to device damage.
A flaw was found in Moodle in versions 3.11 to 3.11.4.
User can access /plugin api without authentication.
In Varnish Cache before 6.6.2 and 7.x before 7.0.2, Varnish Cache 6.0 LTS before 6.0.10, and and Varnish Enterprise (Cache Plus) 4.1.x be...