CVE-2019-14041

creationtimestamp| type| source ---|---|--- 2020-04-17 09:10:07+00:00| seen| https://t.me/SecLabNews/7376...

neomag.cz Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144654 Security Researcher hunterx Helped patch 14 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting neomag.cz website and its users. Following coordinated a...

hendersonsofmelrose.co.uk Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1144634 Security Researcher hunterx Helped patch 14 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting hendersonsofmelrose.co.uk website and its users. Followi...

Design/Logic Flaw

In Hydra an OAuth2 Server and OpenID Certified™ OpenID Connect Provider written in Go, before version 1.4.0+oryOS.17, when using client authentication method 'privatekeyjwt' 1, OpenId specification says the following about assertion jti: "A unique identifier for the token, which can be used to...

HikPwn - A Simple Scanner For Hikvision Devices

HikPwn, a simple scanner for Hikvision devices with basic vulnerability scanning capabilities written in Python 3.8. This project was born out of curiosity while I was capturing and watching network traffic generated by some of Hikvision's software and devices. Setup instructions: git clone...

CVE-2020-10245

creationtimestamp| type| source ---|---|--- 2020-03-26 21:29:08+00:00| seen| https://t.me/cibsecurity/10770 2020-03-27 19:36:03+00:00| published-proof-of-concept| https://t.me/ctinow/21844 2020-03-30 09:47:35+00:00| seen| https://t.me/cibsecurity/10812 2026-03-17 12:00:00+00:00| seen|...

CVE-2019-10682

creationtimestamp| type| source ---|---|--- 2020-03-18 17:31:08+00:00| seen| https://t.me/cibsecurity/10576...

CVE-2018-18576

creationtimestamp| type| source ---|---|--- 2020-03-17 17:31:18+00:00| seen| https://t.me/cibsecurity/10551...

CVE-2018-21037

creationtimestamp| type| source ---|---|--- 2020-03-17 17:31:16+00:00| seen| https://t.me/cibsecurity/10550...

CVE-2017-18350

creationtimestamp| type| source ---|---|--- 2020-03-13 00:02:09+00:00| seen| https://t.me/cibsecurity/10486 2025-09-17 06:18:26+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lyz6ta27duc2...

CVE-2016-1487

creationtimestamp| type| source ---|---|--- 2020-03-09 21:43:08+00:00| seen| https://t.me/cibsecurity/10390 2024-01-06 17:59:49+00:00| seen| https://t.me/arpsyndicate/2566...

Security Bulletin: The Relationship admin page in Tivoli Netcool/OMNIbus WebGUI is vulnerable to Cross Site Scripting attack (CVE-2020-4198)

Summary Fix is available for vulnerability in Cross Site Scripting attack affecting Tivoli Netcool/OMNIbus WebGUI Relationship admin page CVE-2020-4198. Vulnerability Details CVEID: CVE-2020-4198 DESCRIPTION: IBM Tivoli Netcool/OMNIbusGUI is vulnerable to cross-site scripting. This vulnerability...

Security Bulletin: Cacheable HTTPS Responses have been identified on multiple Tivoli Netcool/OMNIbus WebGUI admin pages (CVE-2020-4197)

Summary Fix is available for vulnerability Cacheable HTTPS Responses in Tivoli Netcool/OMNIbus WebGUI admin pages CVE-2020-4197. Vulnerability Details CVEID: CVE-2020-4197 DESCRIPTION: IBM Tivoli Netcool/OMNIbusGUI allows web pages to be stored locally which can be read by another user on the...

WordPress Contact-Form-7 5.1.6 Cross Site Scripting

Title : word press plugin contact-form-7 5.1.6 - Cross-Site Scripting - Author : mehran feizi - Vendor : https://wordpress.org/plugins/contact-form-7/ - Tested on : Windows - Category : Webapps - Date : 2020-02-17...

Hackers Exploited Twitter Bug to Find Linked Phone Numbers of Users

Twitter today issued a warning revealing that attackers abused a legitimate functionality on its platform to unauthorizedly determine phone numbers associated with millions of its users' accounts. According to Twitter, the vulnerability resided in one of the APIs that has been designed to make it...

Threat Roundup for January 17 to January 24

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between Jan. 17 and Jan. 24. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral characteristics...

CVE-2007-6070

creationtimestamp| type| source ---|---|--- 2020-01-17 22:34:14+00:00| seen| https://t.me/cibsecurity/9274...

CVE-2020-0654

creationtimestamp| type| source ---|---|--- 2020-01-17 14:20:37+00:00| seen| https://t.me/androidMalware/610 2020-01-17 17:03:00+00:00| seen| https://t.me/alexmakus/3239...

Security update for libredwg (moderate)

openSUSE Security Update: Security update for libredwg Announcement ID: openSUSE-SU-2020:0068-1 Rating: moderate References: 1129868 1129869 1129870 1129873 1129874 1129875 1129876 1129878 1129879 1129881 1154080 1159824 1159825 1159826 1159827 1159828 1159831 1159832 Cross-References:...

MySQL -- Multiple vulerabilities

Oracle reports: This Critical Patch Update contains 17 new security fixes for Oracle MySQL. 5 of these vulnerabilities may be remotely exploitable without authentication, i.e., may be exploited over a network without requiring user credentials...