2798 matches found
CVE-2021-2089
creationtimestamp| type| source ---|---|--- 2021-01-20 18:40:32+00:00| seen| https://t.me/cibsecurity/22399...
Authorities disrupt massive stolen credit card trading scam on dark web
By Deeba Ahmed Dubbed Carding Action 2020; the operation aimed at targeting several dark web marketplaces resulting in saving $48million/€40 million. This is a post from HackRead.com Read the original post: Authorities disrupt massive stolen credit card trading scam on dark web...
CVE-2020-28366
creationtimestamp| type| source ---|---|--- 2020-11-18 20:40:33+00:00| seen| https://t.me/cibsecurity/16523...
CVE-2020-26079
creationtimestamp| type| source ---|---|--- 2020-11-18 20:40:28+00:00| seen| https://t.me/cibsecurity/16518...
CVE-2020-5932
creationtimestamp| type| source ---|---|--- 2020-11-01 13:43:40+00:00| seen| https://t.me/cibsecurity/15758...
40.zazzfreebies.com Cross Site Scripting vulnerability OBB-1329191
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Mozilla Thunderbird < 68.12
The version of Thunderbird installed on the remote Windows host is prior to 68.12. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-40 advisory. - When aborting an operation, such as a fetch, an abort signal may be deleted while alerting the objects to be...
KLA11946 Multiple vulnerabilities in Mozilla Thunderbird
Multiple vulnerabilities were found in Mozilla Thunderbird. Malicious users can exploit these vulnerabilities to execute arbitrary code, spoof user interface, bypass security restrictions, gain privileges. Below is a complete list of vulnerabilities: 1. Security UI vulnerability in eval function...
CVE-2020-7357
Cayin CMS suffers from an authenticated OS semi-blind command injection vulnerability using default credentials. This can be exploited to inject and execute arbitrary shell commands as the root user through the 'NTPServerIP' HTTP POST parameter in system.cgi page. This issue affects several...
CVE-2020-7357
CVE-2020-7357 relates to Cayin CMS where an authenticated OS semi-blind command injection is possible via the NTP_Server_IP/NTP IP parameter in system.cgi. The issue requires authentication (default credentials) and can allow execution of arbitrary shell commands as root. Affected are multiple Ca...
Adobe Audition < 13.0.7 Multiple Arbitrary Code Execution (APSB20-40)
The version of Adobe Audition installed on the remote Windows host is prior to 13.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-40 advisory. - Adobe Audition versions 13.0.6 and earlier have an out-of-bounds write vulnerability. Successful exploitation...
umih-40.fr Cross Site Scripting vulnerability OBB-1192531
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
globizindia.com Cross Site Scripting vulnerability
Security Researcher 10Harshjoshi Helped patch 40 vulnerabilities Received 1 Coordinated Disclosure badges Received 5 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting globizindia.com website and its users. Following...
Cumulative Update 40 for Microsoft Dynamics NAV 2017 (Build 30192)
Cumulative Update 40 for Microsoft Dynamics NAV 2017 Build 30192 This article applies to Microsoft Dynamics NAV 2017 for all countries and all language locales.A remote code execution vulnerability exists in Microsoft Dynamics NAV. A user who has the permission to access certain features that...
finestra.biz Cross Site Scripting vulnerability
Security Researcher kun-fly Helped patch 590 vulnerabilities Received 7 Coordinated Disclosure badges Received 40 recommendations , a holder of 7 badges for responsible and coordinated disclosure, found a security vulnerability affecting finestra.biz website and its users. Following coordinated a...
Socomec DIRIS A-40 Password Disclosure Vulnerability
Socomec DIRIS A-40 is a network management solution developed by SOCOMEC for its Uninterruptible Power Supply UPS products to enable remote monitoring, condition management and automated operation of UPS. A password disclosure vulnerability exists in Socomec DIRIS A-40, which arises from errors...
CVE-2015-9463
creationtimestamp| type| source ---|---|--- 2019-10-10 20:31:40+00:00| seen| https://t.me/cibsecurity/7353...
CVE-2019-15859
Password disclosure in the web interface on socomec DIRIS A-40 devices before 48250501 allows a remote attacker to get full access to a device via the /password.jsn URI...
CVE-2019-15859
Socomec DIRIS A-40 devices (firmware versions before 48250501) are vulnerable to a password-disclosure flaw in the web interface that allows a remote attacker to gain full access via the /password.jsn URI. The issue stems from an incorrect or insufficient access-control path in the web interface,...
