CVE-2022-36722

creationtimestamp| type| source ---|---|--- 2022-08-19 00:22:54+00:00| seen| https://t.me/cibsecurity/48409...

CVE-2022-28757

creationtimestamp| type| source ---|---|--- 2022-08-19 00:22:53+00:00| seen| https://t.me/cibsecurity/48408 2022-08-19 21:16:31+00:00| seen| https://t.me/ctinow/59235...

CVE-2022-35212

creationtimestamp| type| source ---|---|--- 2022-08-19 00:22:52+00:00| seen| https://t.me/cibsecurity/48407...

CVE-2022-25966

creationtimestamp| type| source ---|---|--- 2022-08-19 00:22:43+00:00| seen| https://t.me/cibsecurity/48401...

CVE-2022-21152

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:58+00:00| seen| https://t.me/cibsecurity/48394...

CVE-2022-21240

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:53+00:00| seen| https://t.me/cibsecurity/48393...

CVE-2022-22730

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:53+00:00| seen| https://t.me/cibsecurity/48392...

CVE-2022-25841

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:50+00:00| seen| https://t.me/cibsecurity/48389...

CVE-2022-21812

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:45+00:00| seen| https://t.me/cibsecurity/48387...

CVE-2021-33060

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:39+00:00| seen| https://t.me/cibsecurity/48383...

CVE-2022-21148

creationtimestamp| type| source ---|---|--- 2022-08-19 00:16:36+00:00| seen| https://t.me/cibsecurity/48380...

Microsoft Edge (Chromium) < 104.0.1293.63 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 104.0.1293.63. It is, therefore, affected by multiple vulnerabilities as referenced in the August 19, 2022 advisory. - Use after free in FedCM. CVE-2022-2852 - Heap buffer overflow in Downloads. CVE-2022-2853 - Use aft...

covid.setequedas.ms.gov.br Cross Site Scripting vulnerability OBB-2852799

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-33927

creationtimestamp| type| source ---|---|--- 2022-08-10 20:26:19+00:00| seen| https://t.me/cibsecurity/47876...

CVE-2022-20866

creationtimestamp| type| source ---|---|--- 2022-08-10 16:03:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2899 2022-08-10 20:26:03+00:00| seen| https://t.me/cibsecurity/47864 2022-08-11 12:12:51+00:00| seen| https://t.me/truesecator/3279 2022-08-19 11:00:04+00:00| seen|...

The Truth About False Positives in Security

TL;DR: As weird as it might sound, seeing a few false positives reported by a security scanner is probably a good sign and certainly better than seeing none. Let's explain why. Introduction False positives have made a somewhat unexpected appearance in our lives in recent years. I am, of course,...

CVE-2022-35143

creationtimestamp| type| source ---|---|--- 2022-08-05 00:19:58+00:00| seen| https://t.me/cibsecurity/47594...

CVE-2022-32455

creationtimestamp| type| source ---|---|--- 2022-08-04 22:19:56+00:00| seen| https://t.me/cibsecurity/47576...

Manjusaka: A Chinese sibling of Sliver and Cobalt Strike

By Asheer Malhotra and Vitor Ventura. Cisco Talos recently discovered a new attack framework called "Manjusaka" being used in the wild that has the potential to become prevalent across the threat landscape. This framework is advertised as an imitation of the Cobalt Strike framework. The implants...

le-plombier-paris-19.fr Cross Site Scripting vulnerability OBB-2821531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...