CVE-2021-30124

creationtimestamp| type| source ---|---|--- 2021-07-30 18:15:28+00:00| seen| https://t.me/cibsecurity/26600...

Zimbra 8.8.15 - Webmail Compromise via Email

Zimbra is a popular webmail solution for global enterprises. According to Zimbra, it is used by over 200,000 businesses and over a thousand government & financial institutions to exchange emails between millions of users every day. When attackers get access to an employees email account, it often...

CVE-2021-2404

creationtimestamp| type| source ---|---|--- 2021-07-21 18:48:26+00:00| seen| https://t.me/cibsecurity/26338...

CVE-2021-2335

creationtimestamp| type| source ---|---|--- 2021-07-21 18:45:17+00:00| seen| https://t.me/cibsecurity/26322...

CVE-2021-21817

creationtimestamp| type| source ---|---|--- 2021-07-18 05:01:26+00:00| seen| https://t.me/cyberbannewsir/3637...

CVE-2021-33211

creationtimestamp| type| source ---|---|--- 2021-07-14 18:25:29+00:00| seen| https://t.me/cibsecurity/26147...

CVE-2021-29150

creationtimestamp| type| source ---|---|--- 2021-07-08 18:38:55+00:00| seen| https://t.me/cibsecurity/26007...

CVE-2021-28127

creationtimestamp| type| source ---|---|--- 2021-07-01 18:32:22+00:00| seen| https://t.me/cibsecurity/25866...

CVE-2021-28575

creationtimestamp| type| source ---|---|--- 2021-06-28 18:27:19+00:00| seen| https://t.me/cibsecurity/25742...

Threat Roundup for June 18 to June 25

Today, Talos is publishing a glimpse into the most prevalent threats we've observed between June 18 and June 25. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral...

CVE-2021-33604 Reflected cross-site scripting in development mode handler in Vaadin 14, 15-19

URL encoding error in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.6.1 Vaadin 14.0.0 through 14.6.1, 3.0.0 through 6.0.9 Vaadin 15.0.0 through 19.0.8 allows local user to execute arbitrary JavaScript code by opening crafted URL in browser...

CVE-2020-18442

creationtimestamp| type| source ---|---|--- 2021-06-18 18:12:05+00:00| seen| https://t.me/cibsecurity/25555...

CVE-2021-34811

creationtimestamp| type| source ---|---|--- 2021-06-18 07:11:34+00:00| seen| https://t.me/cibsecurity/25540...

CVE-2021-31159

creationtimestamp| type| source ---|---|--- 2021-06-18 02:55:31+00:00| seen| https://t.me/pwnwikizhchannel/667 2024-10-09 17:28:32+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3639 2026-09-01 17:00:47+00:00| seen| https://t.me/cissp/3471 2026-09-01 20:02:35+00:00| see...

CVE-2021-32426

creationtimestamp| type| source ---|---|--- 2021-06-18 02:11:24+00:00| seen| https://t.me/cibsecurity/25538...

CVE-2021-32694

creationtimestamp| type| source ---|---|--- 2021-06-18 02:11:24+00:00| seen| https://t.me/cibsecurity/25539...

CVE-2020-8840

creationtimestamp| type| source ---|---|--- 2021-06-17 00:59:33+00:00| seen| https://t.me/pwnwikizhchannel/664 2023-12-18 02:32:42+00:00| seen| https://t.me/arpsyndicate/1893...

Backdoor.Win32.Pazus.18 Authentication Bypass / Code Execution

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/5be13eb16018ab69157f8c8e96e7d6bf.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Pazus.18 Vulnerability: Authentication Bypass RCE Description: Pazus malware listens ...

CVE-2021-28810

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...

Authentication flaw

If exploited, this vulnerability allows an attacker to access resources which are not otherwise accessible without proper authentication. Roon Labs has already fixed this vulnerability in the following versions: Roon Server 2021-05-18 and later...