AlmaLinux 8 : postgresql:13 (ALSA-2021:5236)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:5236 advisory. postgresql: memory disclosure in certain queries CVE-2021-3677 postgresql: server processes unencrypted bytes from man-in-the-middle CVE-2021-23214 Tenabl...

CVE-2022-23648

creationtimestamp| type| source ---|---|--- 2022-03-03 16:26:05+00:00| seen| https://t.me/cibsecurity/38353 2022-03-24 09:55:10+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/1829 2022-03-25 19:47:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1719 2024-12-19...

TikTok: HTML Injection via Email Share

A HTML injection was found on a TikTok endpoint via the "nameofowner" parameter. We thank @lu3ky-13 for reporting this to our team...

13.cl Cross Site Scripting vulnerability OBB-2382085

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-0630

creationtimestamp| type| source ---|---|--- 2022-02-19 16:39:13+00:00| seen| https://t.me/cibsecurity/37822...

notsi.com Cross Site Scripting vulnerability OBB-2371094

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

peopletraininglive.birmingham.gov.uk Cross Site Scripting vulnerability OBB-2370342

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

XWiki Information Disclosure Vulnerability (GHSA-35fg-hjcr-j65f)

XWiki is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

XWiki LFI Vulnerability (GHSA-2jhm-qp48-hv5j)

XWiki is prone to a local file inclusion LFI vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xwiki:xwiki";...

CVE-2021-0118

creationtimestamp| type| source ---|---|--- 2022-02-10 02:13:35+00:00| seen| https://t.me/cibsecurity/37153...

CVE-2021-0092

creationtimestamp| type| source ---|---|--- 2022-02-10 02:13:19+00:00| seen| https://t.me/cibsecurity/37142...

CVE-2021-36302

creationtimestamp| type| source ---|---|--- 2022-02-09 22:13:05+00:00| seen| https://t.me/cibsecurity/37115...

CVE-2021-37205

creationtimestamp| type| source ---|---|--- 2022-02-09 18:13:16+00:00| seen| https://t.me/cibsecurity/37082 2022-02-11 18:48:18+00:00| published-proof-of-concept| https://t.me/truesecator/2622 2022-02-14 16:20:30+00:00| published-proof-of-concept| https://t.me/icscert/517...

CVE-2021-46160

creationtimestamp| type| source ---|---|--- 2022-02-09 18:13:03+00:00| seen| https://t.me/cibsecurity/37072...

Rocky Linux 8 : postgresql:13 (RLSA-2021:2375)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:2375 advisory. - A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array...

Schweitzer Engineering Laboratories RTAC Improper Input Validation (CVE-2013-2792)

Schweitzer Engineering Laboratories SEL SEL-2241, SEL-3505, and SEL-3530 RTAC master devices allow remote attackers to cause a denial of service infinite loop via a crafted DNP3 TCP packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Rockwell Automation ControlLogix controllers Exposure of Sensitive Information to an Unauthorized Actor (CVE-2012-6441)

Rockwell Automation EtherNet/IP products; 1756-ENBT, 1756-EWEB, 1768-ENBT, and 1768-EWEB communication modules allow remote attackers to obtain sensitive information via a crafted CIP packet. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

CVE-2021-25049

creationtimestamp| type| source ---|---|--- 2022-02-01 18:48:13+00:00| seen| https://t.me/LearnExploit/3264...

Backdoor.Win32.Hanuman.b Code Execution

Discovery / credits: Malvuln - malvuln.com c 2022 Original source: https://malvuln.com/advisory/4087cffab90fa22c2882e2f97a467e8e.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Hanuman.b Vulnerability: Unauthenticated Remote Command Execution Description: The...

in mruby/mruby

Description There is a NULL Pointer Dereference in preparesingletonclass src/class.c:360:13. This bug has been found on mruby lastest commit hash 171d32c0071d776207174a40a8fa26def3dbb931 on Ubuntu 20.04 for x8664/amd64. Proof of Concept 1.timesb= a=0 0,m:0 c=0=0,nil=nil0 def mend def c.eend Steps...