CVE-2020-16592

creationtimestamp| type| source ---|---|--- 2020-12-10 00:32:56+00:00| seen| https://t.me/cibsecurity/18297 2020-12-10 00:40:58+00:00| seen| https://t.me/cibsecurity/18317 2020-12-10 01:23:03+00:00| seen| https://t.me/cibsecurity/18336 2020-12-10 01:25:25+00:00| seen| https://t.me/cibsecurity/183...

CVE-2020-26828

creationtimestamp| type| source ---|---|--- 2020-12-09 20:32:57+00:00| seen| https://t.me/cibsecurity/18006 2020-12-09 20:35:57+00:00| seen| https://t.me/cibsecurity/18026 2020-12-09 20:44:55+00:00| seen| https://t.me/cibsecurity/18045 2020-12-09 21:02:35+00:00| seen| https://t.me/cibsecurity/180...

CVE-2020-29659

creationtimestamp| type| source ---|---|--- 2020-12-09 20:32:48+00:00| seen| https://t.me/cibsecurity/17999 2020-12-09 20:35:50+00:00| seen| https://t.me/cibsecurity/18019 2020-12-09 20:44:42+00:00| seen| https://t.me/cibsecurity/18038 2020-12-09 21:02:27+00:00| seen| https://t.me/cibsecurity/180...

CVE-2020-29661

creationtimestamp| type| source ---|---|--- 2020-12-09 20:32:46+00:00| seen| https://t.me/cibsecurity/17997 2020-12-09 20:35:48+00:00| seen| https://t.me/cibsecurity/18017 2020-12-09 20:44:40+00:00| seen| https://t.me/cibsecurity/18036 2020-12-09 21:02:25+00:00| seen| https://t.me/cibsecurity/180...

CVE-2020-26816

creationtimestamp| type| source ---|---|--- 2020-12-09 20:32:33+00:00| seen| https://t.me/cibsecurity/17990 2020-12-09 20:35:35+00:00| seen| https://t.me/cibsecurity/18010 2020-12-09 20:44:32+00:00| seen| https://t.me/cibsecurity/18029 2020-12-09 21:02:18+00:00| seen| https://t.me/cibsecurity/180...

CVE-2020-23520

creationtimestamp| type| source ---|---|--- 2020-12-09 18:32:50+00:00| seen| https://t.me/cibsecurity/17906 2020-12-09 19:25:39+00:00| seen| https://t.me/cibsecurity/17926 2020-12-09 19:34:08+00:00| seen| https://t.me/cibsecurity/17945 2020-12-09 20:23:06+00:00| seen| https://t.me/cibsecurity/179...

CVE-2020-26959

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:33+00:00| seen| https://t.me/cibsecurity/17483 2020-12-09 09:25:40+00:00| seen| https://t.me/cibsecurity/17503 2020-12-09 10:25:28+00:00| seen| https://t.me/cibsecurity/17523 2020-12-09 11:25:28+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-10146

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:12+00:00| seen| https://t.me/cibsecurity/17468 2020-12-09 09:25:18+00:00| seen| https://t.me/cibsecurity/17488 2020-12-09 10:25:09+00:00| seen| https://t.me/cibsecurity/17508 2020-12-09 11:25:09+00:00| seen| https://t.me/cibsecurity/175...

How Organizations Can Prevent Users from Using Breached Passwords

There is no question that attackers are going after your sensitive account data. Passwords have long been a target of those looking to compromise your environment. Why would an attacker take the long, complicated way if they have the keys to the front door? No matter how extensive your security...

Account Hijacking Site OGUsers Hacked, Again

For at least the third time in its existence, OGUsers -- a forum overrun with people looking to buy, sell and trade access to compromised social media accounts -- has been hacked. An offer by the apparent hackers of OGUsers, offering to remove account information from the eventual database leak i...

Quick Guide — How to Troubleshoot Active Directory Account Lockouts

Active Directory account lockouts can be hugely problematic for organizations. There have been documented instances of attackers leveraging the account lockout feature in a type of denial of service attack. By intentionally entering numerous bad passwords, attackers can theoretically lock all of...

Linux: Read /etc/shadow

shadow is a file which contains the password information for the system Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

OTRS ITSM Authorization Issues Vulnerability

OTRS ITSM is a suite of foundational solutions for IT service management organizations from OTRS Germany. The solution is based on ITIL best practices and provides management tools for request and fault management, problem management, change management and release management. A security...

BigBlueButton 安全漏洞

BigBlueButton is BigBlueButton community of a set of open source Web conferencing system . An email authentication bypass vulnerability exists in BigBlueButton 2.2.29 and earlier versions. An attacker who can view accountactivations/edit?token= URI can exploit this vulnerability to create approve...

How to Assign Permissions to Service Accounts Used by Veeam Backup for Google Cloud Platform

Challenge Veeam Backup for Google Cloud Platform requires a service account in each GCP project where data protection and disaster recovery tasks will be performed. The tasks include the following: Creating Snapshots Manually Performing Backup Perform Restore Adding Backup Repositories Create...

CVE-2020-4001

The SD-WAN Orchestrator 3.3.2, 3.4.x, and 4.0.x has default passwords allowing for a Pass-the-Hash Attack. SD-WAN Orchestrator ships with default passwords for predefined accounts which may lead to to a Pass-the-Hash attack...

CVE-2020-1778

When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions...

UBUNTU-CVE-2020-1778

When OTRS uses multiple backends for user authentication with LDAP, agents are able to login even if the account is set to invalid. This issue affects OTRS; 8.0.9 and prior versions...

CVE-2020-1778

Removed by vendor...

Denial of Service (DoS)

Overview github.com/nats-io/gnatsd/server is a routing mechanism to handle subject distribution and provides a facility to match subjects from published messages to interested subscribers. Subscribers can have wildcard subjects to match multiple published subjects. Affected versions of this packa...