CVE-2019-11782

Improper access control in Odoo Community 14.0 and earlier and Odoo Enterprise 14.0 and earlier, allows remote authenticated users with access to contact management to modify user accounts, leading to privilege escalation...

Odoo Input Validation Error Vulnerability

Odoo is an Enterprise Resource Planning ERP and Customer Relationship Management CRM system from Odoo Belgium. The system is developed in Python language with PostgreSQL as the database and includes modules for sales management, inventory management, financial management and so on. An input...

Advice for incident responders on recovery from systemic identity compromises

As Microsoft alongside our industry partners and the security community continues to investigate the extent of the Solorigate attack, our goal is to provide the latest threat intelligence including IOCs and guidance across our products and solutions to help the community fight back against, harde...

A Massive Fraud Operation Stole Millions From Online Accounts

The crooks used emulators to mimic the phones of more than 16,000 customers whose mobile bank accounts had been compromised...

Go365 - An Office365 User Attack Tool

Go365 is a tool designed to perform user enumeration and password guessing attacks on organizations that use Office365 now/soon Microsoft365. Go365 uses a unique SOAP API endpoint on login.microsoftonline.com that most other tools do not use. When queried with an email address and password, the...

CVE-2020-25620

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named [email protected] and [email protected]. These allow logins to the N-Central Administrative Console NAC and/or the regular web interface...

Hardcoded credentials

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named email protected and email protected. These allow logins to the N-Central Administrative Console NAC and/or the regular web interface...

Ensuring customers are protected from Solorigate

Microsoft is monitoring a dynamic threat environment surrounding the discovery of a sophisticated attack that included compromised binaries from a legitimate software. These binaries, which are related to the SolarWinds Orion Platform, could be used by attackers to remotely access devices. We hav...

Kaspersky Security Bulletin 2020. Statistics

All statistics in this report are from the global cloud service Kaspersky Security Network KSN, which receives information from components in our security solutions. The data was obtained from users who have given their consent to it being sent to KSN. Millions of Kaspersky users around the globe...

Rumble Mail Server 0.51.3135 - 'domain and path' Stored XSS

Exploit Title: Rumble Mail Server 0.51.3135 - 'domain and path' Stored XSS Date: 2020-9-3 Exploit Author: Mohammed Alshehri Vendor Homepage: http://rumble.sf.net/ Software Link: https://sourceforge.net/projects/rumble/files/Windows%20binaries/rumble0.51.3135-setup.exe Version: Version 0.51.3135...

CVE-2020-35175

creationtimestamp| type| source ---|---|--- 2020-12-12 02:35:50+00:00| seen| https://t.me/cibsecurity/20649 2020-12-12 02:38:51+00:00| seen| https://t.me/cibsecurity/20669 2020-12-12 03:25:18+00:00| seen| https://t.me/cibsecurity/20689 2020-12-12 04:07:05+00:00| seen| https://t.me/cibsecurity/207...

CVE-2020-29455

creationtimestamp| type| source ---|---|--- 2020-12-11 22:38:52+00:00| seen| https://t.me/cibsecurity/20479 2020-12-11 22:54:27+00:00| seen| https://t.me/cibsecurity/20498 2020-12-11 23:25:21+00:00| seen| https://t.me/cibsecurity/20518 2020-12-12 00:25:20+00:00| seen| https://t.me/cibsecurity/205...

CVE-2020-15023

creationtimestamp| type| source ---|---|--- 2020-12-11 18:37:37+00:00| seen| https://t.me/cibsecurity/20261 2020-12-11 19:25:27+00:00| seen| https://t.me/cibsecurity/20281 2020-12-11 19:34:34+00:00| seen| https://t.me/cibsecurity/20300 2020-12-11 20:24:28+00:00| seen| https://t.me/cibsecurity/203...

CVE-2020-29254

creationtimestamp| type| source ---|---|--- 2020-12-11 18:37:36+00:00| seen| https://t.me/cibsecurity/20260 2020-12-11 19:25:26+00:00| seen| https://t.me/cibsecurity/20280 2020-12-11 20:24:27+00:00| seen| https://t.me/cibsecurity/20318 2020-12-11 20:25:25+00:00| seen| https://t.me/cibsecurity/203...

CVE-2020-13944

creationtimestamp| type| source ---|---|--- 2020-12-11 16:35:40+00:00| seen| https://t.me/cibsecurity/20105 2020-12-11 17:25:38+00:00| seen| https://t.me/cibsecurity/20125 2020-12-11 18:05:10+00:00| seen| https://t.me/cibsecurity/20143 2020-12-11 18:11:18+00:00| seen| https://t.me/cibsecurity/201...

CVE-2020-28220

creationtimestamp| type| source ---|---|--- 2020-12-11 07:35:19+00:00| seen| https://t.me/cibsecurity/19780 2020-12-11 07:38:18+00:00| seen| https://t.me/cibsecurity/19800 2020-12-11 08:25:34+00:00| seen| https://t.me/cibsecurity/19820 2020-12-11 09:25:30+00:00| seen| https://t.me/cibsecurity/198...

CVE-2020-25967

creationtimestamp| type| source ---|---|--- 2020-12-11 02:34:40+00:00| seen| https://t.me/cibsecurity/19645 2020-12-11 02:37:46+00:00| seen| https://t.me/cibsecurity/19665 2020-12-11 03:25:37+00:00| seen| https://t.me/cibsecurity/19685 2020-12-11 04:25:29+00:00| seen| https://t.me/cibsecurity/197...

CVE-2020-26269

creationtimestamp| type| source ---|---|--- 2020-12-11 02:34:36+00:00| seen| https://t.me/cibsecurity/19641 2020-12-11 02:37:39+00:00| seen| https://t.me/cibsecurity/19661 2020-12-11 03:25:31+00:00| seen| https://t.me/cibsecurity/19681 2020-12-11 04:25:22+00:00| seen| https://t.me/cibsecurity/197...

Western Digital Dashboard Code Issue Vulnerability

Western Digital Dashboard is a hard disk management software from Western Digital USA. The software can be used to analyze ssd including model, capacity, firmware version and smart attributes and firmware updates, and can help users take full advantage of WD SSF's software utility A security...

CVE-2020-17148

creationtimestamp| type| source ---|---|--- 2020-12-10 02:32:57+00:00| seen| https://t.me/cibsecurity/18395 2020-12-10 02:35:58+00:00| seen| https://t.me/cibsecurity/18415 2020-12-10 02:38:50+00:00| seen| https://t.me/cibsecurity/18427 2020-12-10 03:25:12+00:00| seen| https://t.me/cibsecurity/184...