4142 matches found
CVE-2021-22361
creationtimestamp| type| source ---|---|--- 2021-06-22 22:16:34+00:00| seen| https://t.me/cibsecurity/25623 2021-06-23 02:45:20+00:00| seen| Telegram/Ekunfood9vJ8uPG0967nMjqqpMg8L0jJNK1gL9j3m6shdO8...
SUSE SLES12: kernel-livepatch-4_12_14-150_69-default / etc (SUSE-SU-2021:2060-1)
The remote SUSE Linux SLES12 / SLES15 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2060-1 advisory. This update for the Linux Kernel 4.12.14-15069 fixes several issues. The following security issues were fixed: -...
Cross site scripting
Cross-site scripting XSS vulnerability in the Portal Workflow module's edit process page in Liferay DXP 7.0 before fix pack 99, 7.1 before fix pack 23, 7.2 before fix pack 12 and 7.3 before fix pack 1, allows remote attackers to inject arbitrary web script or HTML via the currentURL parameter...
CVE-2021-31440
creationtimestamp| type| source ---|---|--- 2021-05-31 07:18:25+00:00| published-proof-of-concept| https://t.me/k8security/306 2021-06-02 17:52:20+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3519 2023-03-23 06:30:43+00:00| published-proof-of-concept|...
Advantech BB-ESWGP506-2SFP-T Use of Hard-coded Credentials Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Advantech BB-ESWGP506-2SFP-T industrial switches. Authentication is not required to exploit this vulnerability. The specific flaw exists within the telnet service, which listens on TCP port 23 by...
Microsoft Exchange Server 代码注入漏洞
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. A code injection vulnerability exists in Microsoft Exchange Server. The followin...
Microsoft Exchange Server 代码问题漏洞
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. A code issue vulnerability exists in Microsoft Exchange Server. The following...
Threat Roundup for April 23 to April 30
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between April 23 and April 30. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral... This is on...
Backdoor.Win32.Agent.oj Code Execution
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/c1e92e04cdb432d83ea2610ef226d4cdB.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.oj Vulnerability: Unauthenticated Remote Command Execution Description: The...
Backdoor.Win32.Agent.oj Buffer Overflow
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/c1e92e04cdb432d83ea2610ef226d4cd.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.oj Vulnerability: Remote Stack Buffer Overflow Description: The malware listens...
openldap security update
2.4.44-23 - Fix CVE-2020-25692 openldap: NULL pointer dereference for unauthenticated packet in slapd 1895328...
Worm.Win32.Busan.k Insecure Transit
Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/bcad7aa6cb6cb9d94377cd88acbca1c9.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Worm.Win32.Busan.k Vulnerability: Insecure Communication Protocol Description: Busan.k launches a...
CVE-2019-25013
creationtimestamp| type| source ---|---|--- 2021-04-23 17:20:56+00:00| seen| https://t.me/reconshell/683...
CVE-2021-31607
creationtimestamp| type| source ---|---|--- 2021-04-23 15:10:12+00:00| seen| https://t.me/reconshell/682 2021-05-24 20:04:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3446...
CVE-2021-28969
creationtimestamp| type| source ---|---|--- 2021-04-23 10:12:08+00:00| seen| https://t.me/reconshell/681...
WordPress Captchinoo, Google recaptcha for admin login page plugin <= 2.3 - Arbitrary Plugin Installation and Activation vulnerability
Arbitrary Plugin Installation and Activation vulnerability discovered by Bugbang in WordPress Captchinoo, Google recaptcha for admin login page plugin versions = 2.3. Solution This plugin has been closed as of March 23, 2021 and is not available for download. This closure is temporary, pending a...
SUSE: Security Advisory (SUSE-SU-2017:2500-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Solaris 10 (sparc) : 119812-23
X11 6.6.2: FreeType patch. Date this patch was last updated by Sun : Apr/18/21 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid148754; scriptversion"1.3";...
SUSE: Security Advisory (SUSE-SU-2018:1537-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2017:3309-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...