1886 matches found
CVE-2021-31324
creationtimestamp| type| source ---|---|--- 2025-01-16 09:29:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31324.yaml 2025-01-20 21:01:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad57fo42d...
CVE-2025-22751
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farinspace Partners partners allows Reflected XSS.This issue affects Partners: from n/a through = 0.2.0...
CVE-2024-11848
creationtimestamp| type| source ---|---|--- 2025-01-15 12:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrqmsfhfn2s 2025-01-15 12:22:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1736 2025-01-15 12:47:44+00:00| seen|...
CVE-2025-213447
creationtimestamp| type| source ---|---|--- 2025-01-14 18:15:33+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0012...
CVE-2025-213617
creationtimestamp| type| source ---|---|--- 2025-01-14 18:15:33+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0012...
CVE-2024-39789
creationtimestamp| type| source ---|---|--- 2025-01-14 15:18:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkdnlxjl2b 2025-01-14 15:50:00+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113827499186971506 2025-01-14 17:20:32+00:00| seen|...
PT-2025-4217 · Microsoft · Windows
The Microsoft Windows Installer Service is affected by a local privilege escalation issue, which can be exploited by attackers to gain elevated privileges on a system. This issue is related to a link following flaw in the Windows Installer Service. The vulnerable software is Microsoft Windows. An...
PT-2025-1168 · Microsoft · Windows
The Windows Telephony Service is affected by a remote code execution issue, which can be exploited by attackers to execute arbitrary code and impact the system. This issue is critical and can have significant consequences if exploited. The vulnerable software is Windows, but no specific versions...
CISA: DHS OSAI-OBP Partnership Fact Sheet
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: Strategies for Effectively Blending Cyber and Physical Security within Critical Infrastructure
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CISA: STS Scenarios Workshop 1 Scenario 4 New Wave of Cooperation
System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...
CVE-2024-43661
creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagxwjoi25 2025-01-09 08:47:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113797527995004670 2025-01-09 10:13:50+00:00| seen|...
Blurring the Lines: How Nation-States and Organized Cybercriminals Are Becoming Alike
Blurring the Lines: How Nation-States and Organized Cybercriminals Are Becoming Alike By Tomer Shloman · January 7, 2025 The distinction between nation-state actors and organized cybercriminals is becoming increasingly blurred in our rapidly evolving cyber landscape. Historically, these groups ha...
2024 in AI: It’s changed the world, but it’s not all good
A popular saying is: “To err is human, but to really foul things up you need a computer.” Even though the saying is older than you might think, it did not come about earlier than the concept of artificial intelligence AI. And as long as we have been waiting for AI technology to become commonplace...
CVE-2024-52535
creationtimestamp| type| source ---|---|--- 2024-12-25 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le5atoyh4j25 2024-12-25 17:09:26+00:00| seen| https://t.me/cvedetector/13626 2024-12-26 13:58:43+00:00| seen|...
5 Practical Techniques for Effective Cyber Threat Hunting
Addressing cyber threats before they have a chance to strike or inflict serious damage is by far the best security approach any company can embrace. Achieving this takes a lot of research and proactive threat hunting. The problem here is that it is easy to get stuck in endless arrays of data and...
Iran-Linked IOCONTROL Malware Targets SCADA and Linux-Based IoT Platforms
Iran-affiliated threat actors have been linked to a new custom malware that's geared toward IoT and operational technology OT environments in Israel and the United States. The malware has been codenamed IOCONTROL by OT cybersecurity company Claroty, highlighting its ability to attack IoT and...
Something to Read When You Are On Call and Everyone Else is at the Office Party
Welcome to this week's edition of the Threat Source newsletter. The new head of the UK's National Cyber Security Centre, Richard Horne, recently remarked that there is a "clearly widening gap between, on the one hand, the threat and our exposure to it and, on the other, the defences that are in...
CVE-2024-53274 GHSL-2024-111: Reflected XSS in /home in habitica
Habitica is an open-source habit-building program. Versions prior to 5.28.5 are vulnerable to reflected cross-site scripting. The register function in home.vue containsa reflected XSS vulnerability due to an incorrect sanitization function. An attacker can specify a malicious redirectTo parameter...