Hackers Found Exploiting Oracle WebLogic RCE Flaw to Spread Ransomware

Taking advantage of newly disclosed and even patched vulnerabilities has become common among cybercriminals, which makes it one of the primary attack vectors for everyday-threats, like crypto-mining, phishing, and ransomware. As suspected, a recently-disclosed critical vulnerability in the widely...

Sierra Wireless AirLink ES450 ACEManager Information Exposure Exploit

An information disclosure vulnerability exists in the ACEManager authentication functionality of Sierra Wireless AirLink ES450 FW 4.9.3. The ACEManager authentication functionality is done in plaintext XML to the web server. An attacker can listen to network traffic upstream from the device to...

Alibaba Group UC Browser application for Android encryption issue vulnerability

Alibaba Group UC Browser application for Android is a mobile browser based on the Android platform from China's Alibaba Group Alibaba Group. A security vulnerability exists in the 2019-03-26 and earlier versions of the UCWeb UC Browser application for Android-based platforms. An attacker can...

CVE-2013-2807

creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:12+00:00| seen| https://t.me/cibsecurity/3364...

CVE-2014-5431

creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:11+00:00| seen| https://t.me/cibsecurity/3362...

CVE-2014-5401

creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:11+00:00| seen| https://t.me/cibsecurity/3363...

CVE-2014-5432

creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:09+00:00| seen| https://t.me/cibsecurity/3361...

CVE-2014-5433

creationtimestamp| type| source ---|---|--- 2019-03-26 19:32:08+00:00| seen| https://t.me/cibsecurity/3360...

CVE-2019-8553

creationtimestamp| type| source ---|---|--- 2019-03-26 09:53:30+00:00| seen| https://t.me/thehackernews/233...

CVE-2019-6222

creationtimestamp| type| source ---|---|--- 2019-03-26 09:53:30+00:00| seen| https://t.me/thehackernews/233...

CVE-2018-11932

creationtimestamp| type| source ---|---|--- 2019-02-26 00:58:16+00:00| seen| https://t.me/cibsecurity/2719...

CVE-2018-11935

creationtimestamp| type| source ---|---|--- 2019-02-26 00:58:15+00:00| seen| https://t.me/cibsecurity/2718...

Xiaomi perseus-p-oss MIX 3 integer overflow vulnerability

Xiaomi perseus-p-oss MIX 3 is a smartphone from Chinese company Xiaomi Technology Xiaomi. Xiaomi perseus-p-oss MIX 3 An integer overflow vulnerability exists in the sdeevtlogfilterwrite method of the drivers/gpu/drm/msm/sdedbg.c file in the Xiaomi perseus-p-oss MIX 3 on 2018-11-26 and earlier...

MatrixSSL 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates

MatrixSSL 4.0.2 - Stack Buffer Overflow Verifying x.509 Certificates I happened to notice that a public X.509 certificate testcase for CVE-2014-1569 caused a stack buffer overflow in MatrixSSL. I cleaned up the testcase a bit, to make a better demonstration. You can test it with the certValidate...

Cisco RV300 / RV320 - Information Disclosure

Exploit Title: 6coRV Exploit Date: 01-26-2018 Exploit Author: Harom Ramos Horus Tested on: Cisco RV300/RV320 CVE : CVE-2019-1653 import requests from requests.packages.urllib3.exceptions import InsecureRequestWarning from fakeuseragent import UserAgent def randomheaders: return dict'user-agent':...

assofond.it XSS vulnerability

Open Bug Bounty ID: OBB-714596 Description| Value ---|--- Affected Website:| assofond.it Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

rfppl.co.in XSS vulnerability

Open Bug Bounty ID: OBB-714539 Description| Value ---|--- Affected Website:| rfppl.co.in Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

archtour.at XSS vulnerability

Open Bug Bounty ID: OBB-714503 Description| Value ---|--- Affected Website:| archtour.at Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden unti...

youpharmacy.gr XSS vulnerability

Open Bug Bounty ID: OBB-714401 Description| Value ---|--- Affected Website:| youpharmacy.gr Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| hidden...

Joomla! JE Photo Gallery 1.1 SQL Injection

Exploit Title: Joomla! Component JE Photo Gallery 1.1 - SQL Injection Dork: N/A Date: 2018-11-26 Exploit Author: Ihsan Sencan Vendor Homepage: https://joomlaextensions.co.in Software Link: http://joomlaextensions.co.in/download/1387375463JE%20PhotoGallery%20%20J-%203.0%20.zip Version: 1.1 Categor...