CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

Acronis VSS Doctor 代码问题漏洞

Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...

bkkgalaxy.com Cross Site Scripting vulnerability OBB-2349310

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mageia: Security Advisory (MGASA-2016-0291)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-21344

creationtimestamp| type| source ---|---|--- 2022-01-19 14:38:53+00:00| seen| https://t.me/cibsecurity/35832...

NIST Cybersecurity Framework: A Quick Guide for SaaS Security Compliance

When I want to know the most recently published best practices in cyber security, I visit The National Institute of Standards and Technology NIST. From the latest password requirements NIST 800-63 to IoT security for manufacturers NISTIR 8259, NIST is always the starting point. NIST plays a key...

Mozilla Firefox ESR < 91.4.0

The version of Firefox ESR installed on the remote Windows host is prior to 91.4.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2021-53 advisory. - Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian...

CVE-2021-23053

creationtimestamp| type| source ---|---|--- 2021-09-14 16:21:53+00:00| seen| https://t.me/cibsecurity/28800...

CVE-2021-29853

creationtimestamp| type| source ---|---|--- 2021-09-01 20:34:53+00:00| seen| https://t.me/cibsecurity/28190...

Adobe Bridge Security Update (APSB21-53) - Windows

The host is missing an important security update according to Adobe August update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

SUSE: Security Advisory (SUSE-SU-2016:2061-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Backdoor.Win32.Agent.lyw Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/4de6f4104a5fc2185164747a6fcf20ce.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.lyw Vulnerability: Remote Stack Buffer Overflow UDP Description: The malware...

Backdoor.Win32.Agent.kte Buffer Overflow

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/7c92e59e776355734781bbf05571d0f0.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Agent.kte Vulnerability: Remote Stack Buffer Overflow UDP Datagram Description: The...

Meet critical infrastructure security compliance requirements with Microsoft 365

Critical infrastructure operators face a hostile cyber threat environment and a complex compliance landscape. Every operator of an industrial control system also operates an IT network to service its productivity needs. A supervisory control and data acquisition SCADA system operator of a power...

CVE-2021-0460

creationtimestamp| type| source ---|---|--- 2021-03-10 20:53:07+00:00| seen| https://t.me/cibsecurity/24708...

CVE-2021-21362

MinIO is an open-source high performance object storage service and it is API compatible with Amazon S3 cloud storage service. In MinIO before version RELEASE.2021-03-04T00-53-13Z it is possible to bypass a readOnly policy by creating a temporary 'mc share upload' URL. Everyone is impacted who us...

CVE-2020-29142

creationtimestamp| type| source ---|---|--- 2021-02-15 22:46:53+00:00| seen| https://t.me/cibsecurity/23615...

CVE-2021-27172

creationtimestamp| type| source ---|---|--- 2021-02-10 22:41:53+00:00| seen| https://t.me/cibsecurity/23395...

CVE-2020-29395

creationtimestamp| type| source ---|---|--- 2020-12-15 14:02:02+00:00| published-proof-of-concept| https://t.me/cKure/3262...

Mozilla Thunderbird < 78.5.1

The version of Thunderbird installed on the remote Windows host is prior to 78.5.1. It is, therefore, affected by a vulnerability as referenced in the mfsa2020-53 advisory. - When reading SMTP server status codes, Thunderbird writes an integer value to a position on the stack that is intended to...