447 matches found
GHSA-GMW6-94GG-2RC2
creationtimestamp| type| source ---|---|--- 2021-08-31 20:33:48+00:00| seen| https://t.me/cibsecurity/28112...
vinmedmere.dk Cross Site Scripting vulnerability OBB-2127388
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2021-3546 affecting package qemu-kvm 4.2.0-48
CVE-2021-3546 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
CVE-2021-2404
creationtimestamp| type| source ---|---|--- 2021-07-21 18:48:26+00:00| seen| https://t.me/cibsecurity/26338...
CVE-2020-23283
creationtimestamp| type| source ---|---|--- 2021-07-21 18:48:23+00:00| seen| https://t.me/cibsecurity/26335...
Linux Kernel Netfilter Heap Out-Of-Bounds Write
/ CVE-2021-22555: Turning \x00\x00 into 10000$ by Andy Nguyen theflow@ theflow@theflow:$ gcc -m32 -static -o exploit exploit.c theflow@theflow:$ ./exploit + Linux Privilege Escalation by theflow@ - 2021 + STAGE 0: Initialization Setting up namespace sandbox... Initializing sockets and message...
CVE-2021-20181 affecting package qemu-kvm 4.2.0-48
CVE-2021-20181 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
CVE-2020-20211
creationtimestamp| type| source ---|---|--- 2021-07-07 18:37:48+00:00| seen| https://t.me/cibsecurity/25971...
SUSE: Security Advisory (SUSE-SU-2015:1184-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
GNU LibreDWG 缓冲区错误漏洞
LibreDWG is a free C library for reading and writing DWG files. A heap buffer overflow vulnerability exists in GNU LibreDWG version 0.10.2641. An attacker can exploit this vulnerability via htmlescape ... /... /programs/escape.c:48 to exploit the vulnerability and cause a heap buffer overflow...
CVE-2021-3416 affecting package qemu-kvm 4.2.0-48
CVE-2021-3416 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
Linux Kernel 5.4 BleedingTooth Remote Code Execution
/ BleedingTooth: Linux Bluetooth Zero-Click Remote Code Execution by Andy Nguyen theflow@ This Proof-Of-Concept demonstrates the exploitation of CVE-2020-12351 and CVE-2020-12352. Compile using: $ gcc -o exploit exploit.c -lbluetooth and execute as: $ sudo ./exploit targetmac sourceip sourceport ...
Nextcloud: Ratelimiting can be bypassed using IPv6 subnets
Nextcloud hardcodes IPv6 subnets to /128. End users get at least a /64 subnet more than the whole IPv4 address space!, most providers assign even larger subnets like /48. The subnet is used to block bruteforce attempts 3 and rate limiting 4. An attacker can easily generate random addresses from t...
CVE-2021-20255 affecting package qemu-kvm 4.2.0-48
CVE-2021-20255 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
CVE-2021-20203 affecting package qemu-kvm 4.2.0-48
CVE-2021-20203 affecting package qemu-kvm 4.2.0-48. A patched version of the package is available...
CVE-2020-35570
creationtimestamp| type| source ---|---|--- 2021-02-16 18:48:00+00:00| seen| https://t.me/cibsecurity/23644...
CVE-2021-1202
creationtimestamp| type| source ---|---|--- 2021-01-14 00:48:39+00:00| seen| https://t.me/cibsecurity/22106...
CVE-2021-21115
creationtimestamp| type| source ---|---|--- 2021-01-08 22:48:05+00:00| seen| https://t.me/cibsecurity/21871...
48 U.S. States and FTC are suing Facebook for illegal monopolization
The US Federal Trade Commission and a coalition of 48 state attorneys general on Wednesday filed a pair of sweeping antitrust suits against Facebook, alleging that the company abused its power in the marketplace to neutralize competitors through its acquisitions of Instagram and WhatsApp and...