9602 matches found
CVE-2021-27101
creationtimestamp| type| source ---|---|--- 2021-02-17 00:48:06+00:00| seen| https://t.me/cibsecurity/23689 2021-02-23 15:58:16+00:00| seen| MISP/7391b143-ed2a-4938-b1eb-1198b56048a3 2021-07-29 17:59:02+00:00| seen| https://t.me/RussianOSINT/875 2021-10-25 22:32:43+00:00| seen|...
Monitor Google Cloud Platform (GCP) Data With InsightIDR
InsightIDR was built in the cloud to support dynamic and rapidly changing environments—including remote workers, hybrid cloud and on-premises architectures, and fully cloud environments. Today, more and more organizations are adopting multi-cloud or hybrid environments, creating increasingly more...
CVE-2021-20067
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication...
Authentication flaw
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication...
CVE-2021-20067
Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to view sensitive syslog events without authentication...
Nsauditor 3.2.2.0 - (Event Description) Denial of Service Exploit
Exploit Title: Nsauditor 3.2.2.0 - 'Event Description' Denial of Service PoC Exploit Author: Ismael Nava Vendor Homepage: https://www.nsauditor.com/ Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Version: 3.2.2.0 Tested on: Windows 10 Home x64 STEPS Open the program Nsaudito...
Nsauditor 3.2.2.0 - 'Event Description' Denial of Service (PoC)
Exploit Title: Nsauditor 3.2.2.0 - 'Event Description' Denial of Service PoC Date: 2021-02-15 Exploit Author: Ismael Nava Vendor Homepage: https://www.nsauditor.com/ Software Link: http://www.nsauditor.com/downloads/nsauditorsetup.exe Version: 3.2.2.0 Tested on: Windows 10 Home x64 STEPS Open the...
Spam and phishing in 2020
Figures of the year In 2020: The share of spam in email traffic amounted to 50.37%, down by 6.14 p.p. from 2019. Most spam 21.27% originated in Russia. Kaspersky solutions detected a total of 184,435,643 malicious attachments. The email antivirus was triggered most frequently by email messages...
CVE-2017-9182
creationtimestamp| type| source ---|---|--- 2021-02-12 00:42:59+00:00| seen| https://t.me/cibsecurity/23506 2021-02-12 00:46:18+00:00| seen| https://t.me/VulnerabilityNews/20224...
SUSE SLES15 Security Update : kernel (SUSE-SU-2021:0438-1)
The SUSE Linux Enterprise 15 kernel was updated to receive various security and bugfixes. The following security bugs were fixed : CVE-2021-3348: Fixed a use-after-free in nbdaddsocket that could be triggered by local attackers with access to the nbd device via an I/O request at a certain point...
CVE-2021-21029
creationtimestamp| type| source ---|---|--- 2021-02-11 22:47:50+00:00| seen| https://t.me/cibsecurity/23473 2021-05-30 02:59:05+00:00| seen| https://t.me/pwnwikizhchannel/543...
CVE-2021-26708
creationtimestamp| type| source ---|---|--- 2021-02-05 16:35:19+00:00| seen| https://t.me/cibsecurity/23148 2021-02-17 12:16:14+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2724 2021-03-03 17:40:13+00:00| seen| https://t.me/xakepru/10449 2021-04-09 08:59:26+00:00|...
Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2021-9030)
The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9030 advisory. - mwifiex: Fix possible buffer overflows in mwifiexcmdappendvsietlv Qing Xu Orabug: 31350932 CVE-2020-12653 - ALSA: rawmidi: Fix racy buffer resize...
CVE-2019-20470
creationtimestamp| type| source ---|---|--- 2021-02-02 00:46:17+00:00| seen| https://t.me/VulnerabilityNews/20021 2021-02-02 01:25:12+00:00| seen| https://t.me/cibsecurity/22929 2021-02-02 01:25:16+00:00| seen| https://t.me/cibsecurity/22931...
Wordpress Plugin Modern Events Calendar - Authenticated Remote Code Execution
This module allows an attacker with a privileged Wordpress account to launch a reverse shell due to an arbitrary file upload vulnerability in Wordpress plugin Modern Events Calendar .php Module Options msf use exploit/multi/http/wp/pluginmoderneventscalendarrce msf...
Modern Events Calendar Lite < 5.16.5 - Authenticated Arbitrary File Upload leading to RCE
The plugin did not properly check the imported file, allowing PHP ones to be uploaded by administrator by using the 'text/csv' content-type in the request. The issue could also be exploited via a CRSF attack, as such check was also missing...
WordPress Modern Events Calendar Lite plugin <= 5.16.5 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability found by Nguyen Van Khanh in WordPress Modern Events Calendar Lite plugin versions = 5.16.5. Solution Update the WordPress Modern Events Calendar Lite plugin to the latest available version at least 5.16.6...
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
The plugin did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example. https://drive.google.com/file/d/1lLEXDyPp4LcKoCOqYS7A-0YgpIQD-ND/view?usp=sharing...
Modern Events Calendar Lite < 5.16.5 - Unauthenticated Events Export
The plugin did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example. PoC https://drive.google.com/file/d/1lLEXDyPp4LcKoCOqYS7A-0YgpIQD-ND/view?usp=sharing...
Modern Events Calendar Lite < 5.16.5 - Authenticated Stored Cross-Site Scripting (XSS)
The plugin did not sanitise the miccomment field Notes on time when adding/editing an event, allowing users with privilege as low as author to add events with a Cross-Site Scripting payload in them, which will be triggered in the frontend when viewing the event. Edit WPScanTeam January 22nd, 2021...