CVE-2021-44183

creationtimestamp| type| source ---|---|--- 2021-12-21 00:15:42+00:00| seen| https://t.me/cibsecurity/34327...

CVE-2021-43750

creationtimestamp| type| source ---|---|--- 2021-12-21 00:11:50+00:00| seen| https://t.me/cibsecurity/34320...

CVE-2021-40784

creationtimestamp| type| source ---|---|--- 2021-12-21 00:11:49+00:00| seen| https://t.me/cibsecurity/34319...

CVE-2021-38415

creationtimestamp| type| source ---|---|--- 2021-12-21 00:11:44+00:00| seen| https://t.me/cibsecurity/34315...

CVE-2021-43847

creationtimestamp| type| source ---|---|--- 2021-12-21 00:11:36+00:00| seen| https://t.me/cibsecurity/34309...

CVE-2021-43846

creationtimestamp| type| source ---|---|--- 2021-12-21 00:11:35+00:00| seen| https://t.me/cibsecurity/34308...

CVE-2021-22057

creationtimestamp| type| source ---|---|--- 2021-12-21 00:11:32+00:00| seen| https://t.me/cibsecurity/34306...

CVE-2021-43030

creationtimestamp| type| source ---|---|--- 2021-12-21 00:11:31+00:00| seen| https://t.me/cibsecurity/34305...

Fresenius Kabi Agilia Connect Infusion System (Update A)

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Fresenius Kabi Equipment: Agilia Connect Infusion System Vulnerabilities: Uncontrolled Resource Consumption, Use of a Broken or Risky Cryptographic Algorithm, Insufficiently Protected Credentials,...

GHSA-GJRJ-9RJ4-PGWX DoS Vulnerability from Upstream Actix Web Issues

Impact This vulnerability affects all users of the perseus deploy functionality who have not exported their sites to static files. If you are using the inbuilt Perseus server in production, there is a memory leak in Actix Web stemming from this upstream issue which can allow even a single user to...

Backdoor.Win32.FTP.Matiteman Weak Hardcoded Password

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/fc8eaa2a5752b509dbd02989d8d9f2e2.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.FTP.Matiteman Vulnerability: Weak Hardcoded Password Description: The malware listens...

CVE-2021-37056

creationtimestamp| type| source ---|---|--- 2021-12-07 18:21:50+00:00| seen| https://t.me/cibsecurity/33466...

CVE-2021-42130

creationtimestamp| type| source ---|---|--- 2021-12-07 16:21:51+00:00| seen| https://t.me/cibsecurity/33445...

CVE-2021-44685

creationtimestamp| type| source ---|---|--- 2021-12-07 02:21:06+00:00| seen| https://t.me/cibsecurity/33425...

Fortinet FortiClient Dylib injection (FG-IR-21-079) (macOS)

The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-079 advisory. - An improper control of generation of code vulnerability CWE-94 in FortiClientMacOS versions 7.0.0 and below and 6.4.5 and...

RHEL 8 : mailman:2.1 (RHSA-2021:4838)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:4838 advisory. Mailman is a program used to help manage e-mail discussion lists. Security Fixes: mailman: CSRF token bypass allows to perform CSRF attacks...

QNAP QTS RCE Vulnerability (QSA-21-50)

QNAP QTS is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:qnap:qts";...

propertytax.chattanooga.gov Cross Site Scripting vulnerability OBB-2278395

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-33850

creationtimestamp| type| source ---|---|--- 2021-11-19 18:23:21+00:00| seen| https://t.me/cibsecurity/32700...

CISA Releases Advisory on Vulnerabilities in Multiple Data Distribution Service Implementations 

CISA has released an Industrial Control Systems Advisory ICSA related to a public report detailing vulnerabilities found in multiple open-source and proprietary Object Management Group OMG Data-Distribution Service DDS implementations. Successful exploitation of these vulnerabilities could result...