CVE-2020-26958

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:34+00:00| seen| https://t.me/cibsecurity/17484 2020-12-09 09:25:41+00:00| seen| https://t.me/cibsecurity/17504 2020-12-09 10:25:29+00:00| seen| https://t.me/cibsecurity/17524 2020-12-09 11:25:29+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-26959

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:33+00:00| seen| https://t.me/cibsecurity/17483 2020-12-09 09:25:40+00:00| seen| https://t.me/cibsecurity/17503 2020-12-09 10:25:28+00:00| seen| https://t.me/cibsecurity/17523 2020-12-09 11:25:28+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-16128

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:32+00:00| seen| https://t.me/cibsecurity/17482 2020-12-09 09:25:39+00:00| seen| https://t.me/cibsecurity/17502 2020-12-09 10:25:27+00:00| seen| https://t.me/cibsecurity/17522 2020-12-09 11:25:27+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-26962

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:28+00:00| seen| https://t.me/cibsecurity/17481 2020-12-09 09:25:35+00:00| seen| https://t.me/cibsecurity/17501 2020-12-09 10:25:26+00:00| seen| https://t.me/cibsecurity/17521 2020-12-09 11:25:24+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-25627

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:27+00:00| seen| https://t.me/cibsecurity/17480 2020-12-09 09:25:34+00:00| seen| https://t.me/cibsecurity/17500 2020-12-09 10:25:22+00:00| seen| https://t.me/cibsecurity/17520 2020-12-09 11:25:23+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-26956

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:26+00:00| seen| https://t.me/cibsecurity/17478 2020-12-09 09:25:33+00:00| seen| https://t.me/cibsecurity/17498 2020-12-09 10:25:21+00:00| seen| https://t.me/cibsecurity/17518 2020-12-09 11:25:21+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-26953

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:19+00:00| seen| https://t.me/cibsecurity/17474 2020-12-09 09:25:26+00:00| seen| https://t.me/cibsecurity/17494 2020-12-09 10:25:17+00:00| seen| https://t.me/cibsecurity/17514 2020-12-09 11:25:17+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-26965

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:18+00:00| seen| https://t.me/cibsecurity/17473 2020-12-09 09:25:25+00:00| seen| https://t.me/cibsecurity/17493 2020-12-09 10:25:15+00:00| seen| https://t.me/cibsecurity/17513 2020-12-09 11:25:15+00:00| seen| https://t.me/cibsecurity/175...

CVE-2020-26960

creationtimestamp| type| source ---|---|--- 2020-12-09 08:25:16+00:00| seen| https://t.me/cibsecurity/17471 2020-12-09 09:25:21+00:00| seen| https://t.me/cibsecurity/17491 2020-12-09 10:25:13+00:00| seen| https://t.me/cibsecurity/17511 2020-12-09 11:25:13+00:00| seen| https://t.me/cibsecurity/175...

A flaw was found in the Linux kernel. A use-after-free memory flaw was found in the perf subsystem allowing a local attacker with permission to monitor perf events to corrupt memory and possibly escalate privileges. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...

CVE-2020-26951

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...

CVE-2020-25674

creationtimestamp| type| source ---|---|--- 2020-12-09 00:36:32+00:00| seen| https://t.me/cibsecurity/17306 2020-12-09 07:34:47+00:00| seen| https://t.me/cibsecurity/17448...

CVE-2020-26951

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...

CVE-2020-26951

A parsing and event loading mismatch in Firefox's SVG code could have allowed load events to fire, even after sanitization. An attacker already capable of exploiting an XSS vulnerability in privileged internal pages could have used this attack to bypass our built-in sanitizer. This vulnerability...

py-matrix-synapse -- DoS on Federation API

Matrix developers reports: A malicious or poorly-implemented homeserver can inject malformed events into a room by specifying a different room id in the path of a /sendjoin, /sendleave, /invite or /exchangethirdpartyinvite request. This can lead to a denial of service in which future events will...

Foxit Reader Javascript Field fileSelect Use After Free Vulnerability

Summary A use after free vulnerability exists in the JavaScript engine of Foxit Software’s Foxit PDF Reader, version 10.1.0.37527. A specially crafted PDF document can trigger reuse of previously free memory which can lead to arbitrary code execution. An attacker needs to trick the user to open t...

Matrix Synapse 资源管理错误漏洞

Matrix Synapse is a Matrix Management Server implementation from the Matrix Foundation in the UK. Matrix Synapse suffers from a security vulnerability that stems from the fact that a malicious or poorly implemented host server can inject malformed events by specifying different room ids in the pa...

CVE-2020-29600

creationtimestamp| type| source ---|---|--- 2020-12-07 22:30:18+00:00| seen| https://t.me/cibsecurity/17207 2020-12-12 02:35:52+00:00| seen| https://t.me/cibsecurity/20651 2020-12-12 02:38:53+00:00| seen| https://t.me/cibsecurity/20671 2020-12-12 03:25:20+00:00| seen| https://t.me/cibsecurity/206...

Remote Code Execution (RCE)

Insufficient restrictions on what can be done with Apple Events in Google Chrome on macOS allowed a local attacker to execute JavaScript via Apple Events...

Privilege Escalation

linux kernel is vulnerable to privilege escalation. A local attacker with monitor perf events permissions is able to corrupt memory and obtain higher privileges...