CVE-2020-27132

creationtimestamp| type| source ---|---|--- 2020-12-11 20:35:44+00:00| seen| https://t.me/cibsecurity/20357 2020-12-11 20:46:00+00:00| seen| https://t.me/cibsecurity/20377 2020-12-11 21:25:15+00:00| seen| https://t.me/cibsecurity/20396 2020-12-11 22:04:32+00:00| seen| https://t.me/cibsecurity/204...

CVE-2020-29589

creationtimestamp| type| source ---|---|--- 2020-12-11 18:37:43+00:00| seen| https://t.me/cibsecurity/20264 2020-12-11 19:25:30+00:00| seen| https://t.me/cibsecurity/20284 2020-12-11 19:34:38+00:00| seen| https://t.me/cibsecurity/20303 2020-12-11 20:24:31+00:00| seen| https://t.me/cibsecurity/203...

CVE-2020-29591

creationtimestamp| type| source ---|---|--- 2020-12-11 18:37:42+00:00| seen| https://t.me/cibsecurity/20263 2020-12-11 19:25:29+00:00| seen| https://t.me/cibsecurity/20283 2020-12-11 19:34:37+00:00| seen| https://t.me/cibsecurity/20302 2020-12-11 20:24:30+00:00| seen| https://t.me/cibsecurity/203...

CVE-2020-7793

creationtimestamp| type| source ---|---|--- 2020-12-11 16:35:42+00:00| seen| https://t.me/cibsecurity/20106 2020-12-11 17:25:39+00:00| seen| https://t.me/cibsecurity/20126 2020-12-11 18:05:11+00:00| seen| https://t.me/cibsecurity/20144 2020-12-11 18:11:20+00:00| seen| https://t.me/cibsecurity/201...

CVE-2020-7542

creationtimestamp| type| source ---|---|--- 2020-12-11 07:35:09+00:00| seen| https://t.me/cibsecurity/19773 2020-12-11 07:38:11+00:00| seen| https://t.me/cibsecurity/19793 2020-12-11 08:25:26+00:00| seen| https://t.me/cibsecurity/19813 2020-12-11 09:25:21+00:00| seen| https://t.me/cibsecurity/198...

CVE-2020-16608

creationtimestamp| type| source ---|---|--- 2020-12-11 02:34:32+00:00| seen| https://t.me/cibsecurity/19638 2020-12-11 02:37:36+00:00| seen| https://t.me/cibsecurity/19658 2020-12-11 03:25:25+00:00| seen| https://t.me/cibsecurity/19678 2020-12-11 04:25:20+00:00| seen| https://t.me/cibsecurity/196...

CVE-2020-12516

creationtimestamp| type| source ---|---|--- 2020-12-10 07:33:31+00:00| seen| https://t.me/cibsecurity/18561 2020-12-10 07:36:34+00:00| seen| https://t.me/cibsecurity/18581 2020-12-10 08:25:30+00:00| seen| https://t.me/cibsecurity/18601 2020-12-10 09:25:21+00:00| seen| https://t.me/cibsecurity/186...

CVE-2020-27833

A Zip Slip vulnerability was found in the oc binary in openshift-clients where an arbitrary file write is achieved by using a specially crafted raw container image .tar file which contains symbolic links. The vulnerability is limited to the command oc image extract. If a symbolic link is first...

CVE-2020-17156

creationtimestamp| type| source ---|---|--- 2020-12-10 02:33:11+00:00| seen| https://t.me/cibsecurity/18404 2020-12-10 02:36:11+00:00| seen| https://t.me/cibsecurity/18424 2020-12-10 02:39:01+00:00| seen| https://t.me/cibsecurity/18436 2020-12-10 03:25:22+00:00| seen| https://t.me/cibsecurity/184...

CVE-2020-17115

creationtimestamp| type| source ---|---|--- 2020-12-10 02:33:09+00:00| seen| https://t.me/cibsecurity/18403 2020-12-10 02:36:10+00:00| seen| https://t.me/cibsecurity/18423 2020-12-10 02:39:00+00:00| seen| https://t.me/cibsecurity/18435 2020-12-10 03:25:21+00:00| seen| https://t.me/cibsecurity/184...

Security update for minidlna (moderate)

openSUSE Security Update: Security update for minidlna Announcement ID: openSUSE-SU-2020:2226-1 Rating: moderate References: 1179447 Cross-References: CVE-2020-12695 CVE-2020-28926 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now available...

Cybersecurity Firm FireEye Got Hacked; Red-Team Pentest Tools Stolen

FireEye, one of the largest cybersecurity firms in the world, said on Tuesday it became a victim of a state-sponsored attack by a "highly sophisticated threat actor" that stole its arsenal of Red Team penetration testing tools it uses to test the defenses of its customers. The company said it's...

Cybersecurity Firm FireEye Got Hacked; Red-Team Pentest Tools Stolen

FireEye, one of the largest cybersecurity firms in the world, said on Tuesday it became a victim of a state-sponsored attack by a "highly sophisticated threat actor" that stole its arsenal of Red Team penetration testing tools it uses to test the defenses of its customers. The company said it's...

Evading Link Scanning Security Services with Passive Fingerprinting

By Gal Bitensky, Executive Summary Link scanners are a critical component in multiple classes of security products including email security suites, websites that suggest direct inspection of a suspicious link, and others. Behind the scenes, these services use web clients...

DEBIAN-CVE-2020-25651

A flaw was found in the SPICE file transfer protocol. File data from the host system can end up in full or in parts in the client connection of an illegitimate local user in the VM system. Active file transfers from other users could also be interrupted, resulting in a denial of service. The...

Denial of service attack due to invalid JSON

Impact A denial of service attack against Matrix clients can be exploited by sending an event including invalid JSON data to Synapse. Synapse would relay the data to clients which could crash or hang. Impact is long-lasting if the event is made part of the room state. Patches At a minimum 8106 an...

GHSA-4MP3-385R-V63F Denial of service attack due to invalid JSON

Impact A denial of service attack against Matrix clients can be exploited by sending an event including invalid JSON data to Synapse. Synapse would relay the data to clients which could crash or hang. Impact is long-lasting if the event is made part of the room state. Patches At a minimum 8106 an...

CVE-2019-20925

An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.1; MongoDB Server v4.0 versions prior to 4.0.13; MongoDB...

Exploitable inventory component chaining in PocketMine-MP

Impact Specially crafted InventoryTransactionPackets sent by malicious clients were able to exploit the behaviour of InventoryTransaction-findResultItem and cause it to take an abnormally long time to execute causing an apparent server freeze. The affected code is intended to compact conflicting...

Acronis TrueImage XPC Privilege Escalation

Acronis TrueImage versions 2019 update 1 through 2021 update 1 are vulnerable to privilege escalation. The com.acronis.trueimagehelper helper tool does not perform any validation on connecting clients, which gives arbitrary clients the ability to execute functions provided by the helper tool with...