5956 matches found
CVE-2021-27213
creationtimestamp| type| source ---|---|--- 2021-02-14 07:45:12+00:00| seen| https://t.me/cibsecurity/23578...
CVE-2020-13562
creationtimestamp| type| source ---|---|--- 2021-02-01 19:25:14+00:00| seen| https://t.me/cibsecurity/22900 2022-06-07 18:49:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2599 2026-09-01 17:01:04+00:00| seen| https://t.me/cissp/2251 2026-09-02 01:04:54+00:00| seen|...
Apple Fixes One of the iPhone's Most Pressing Security Risks
By hardening iMessage in iOS 14, the company has effectively cut off what had been an increasingly popular line of attack...
GHSA-32WX-4GXX-H48F Users can edit the tags of any discussion
This advisory concerns a vulnerability which was patched and publicly released on October 5, 2020. Impact This vulnerability allowed any registered user to edit the tags of any discussion for which they have READ access using the REST API. Users were able to remove any existing tag, and add any t...
Apple iOS 14 Thwarts iMessage Attacks With BlastDoor System
In an effort to prevent attacks from being launched via its iMessage feature, Apple has debuted a security service called BlastDoor in iOS 14, its current mobile operating system version. First detailed in an analysis this week by Google Project Zero’s Samuel Groß, BlastDoor acts as a “tightly...
New iMessage Security Features
Apple has added added security features to mitigate the risk of zero-click iMessage attacks. Apple did not document the changes but Groß said he fiddled around with the newest iOS 14 and found that Apple shipped a "significant refactoring of iMessage processing" that severely cripples the usual...
Google uncovers new iOS security feature Apple quietly added after zero-day attacks
Google Project Zero on Thursday disclosed details of a new security mechanism that Apple quietly added to iOS 14 as a countermeasure to prevent attacks that were recently found to leverage zero-days in its messaging app. Dubbed "BlastDoor," the improved sandbox system for iMessage data was...
A Look at iMessage in iOS 14
Posted By Samuel Groß, Project Zero On December 20, Citizenlab published “The Great iPwn”, detailing how “Journalists were Hacked with Suspected NSO Group iMessage ‘Zero-Click’ Exploit”. Of particular interest is the following note: “We do not believe that the exploit works against iOS 14 and...
Backdoor.Win32.Wollf.14 Missing Authentication
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/ccd3e54eb76b3349db57481a0fe68b35.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wollf.14 Vulnerability: Missing Authentication Description: Wollf.14 listens on TCP...
CVE-2021-21283
The CVE-2021-21283 issue affects Flarum’s Sticky extension (versions 0.1.0-beta.14 and 0.1.0-beta.15). A change in beta 14 causes the first post of a pinned discussion to be injected as HTML on the discussion list via Mithril’s m.trust(), enabling a cross-site scripting (XSS) attack. Affected: Fl...
CVE-2021-21283 XSS in Flarum Sticky extension.
Flarum is an open source discussion platform for websites. The "Flarum Sticky" extension versions 0.1.0-beta.14 and 0.1.0-beta.15 has a cross-site scripting vulnerability. A change in release beta 14 of the Sticky extension caused the plain text content of the first post of a pinned discussion to...
GitHub Security Lab: ihsinme: CPP Add query for CWE-14 compiler removal of code to clear buffers.
This bug was reported directly to GitHub Security Lab...
Flarum Sticky Cross-Site Scripting Vulnerability
Flarum is an open source forum system for the Flarum community. A cross-site scripting vulnerability exists in Flarum Sticky extension versions 0.1.0-beta.14 and 0.1.0-beta.15, which can be exploited by attackers to run javascript from other HTML attributes...
Solaris 10 (sparc) : 143725-14
SunOS 5.10: SunFreeware ntp patch. Date this patch was last updated by Sun : Jan/18/21 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid145192; scriptversion"1.1";...
Solaris 10 (x86) : 143726-14
SunOS 5.10x86: SunFreeware ntp patch. Date this patch was last updated by Sun : Jan/18/21 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid145172; scriptversion"1.1";...
CVE-2021-21261
creationtimestamp| type| source ---|---|--- 2021-01-14 22:49:51+00:00| seen| https://t.me/cibsecurity/22178...
CVE-2020-29019
creationtimestamp| type| source ---|---|--- 2021-01-14 18:49:39+00:00| seen| https://t.me/cibsecurity/22160...
CVE-2020-6776
creationtimestamp| type| source ---|---|--- 2021-01-14 18:49:38+00:00| seen| https://t.me/cibsecurity/22159...