9603 matches found
Windows System Events Broker Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim...
KB4565503: Windows 10 Version 2004 July 2020 Security Update
The remote Windows host is missing security update 4565503. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability exists when the Windows System Events Broker improperly handles file operations. An attacker who successfully exploited this vulnerability...
Pandora FMS 7.0 NG 7XX Remote Command Execution Exploit
This Metasploit module exploits a vulnerability CVE-2020-13851 in Pandora FMS versions 7.0 NG 742, 7.0 NG 743, and 7.0 NG 744 and perhaps older versions in order to execute arbitrary commands. This module takes advantage of a command injection vulnerability in th e Events feature of Pandora FMS...
Shhgit - Find GitHub Secrets In Real Time
Shhgit finds secrets and sensitive files across GitHub code and Gists committed in near real time by listening to the GitHub Events API. NEW: LIVE VERSION. Find GitHub secrets straight from your browser! Finding secrets in GitHub is nothing new. There are many great tools available to help with...
Is 97% Network Traffic Offload Interesting?
Sports, gaming, and other live events have the potential to overwhelm network capacity due to the sheer volume of traffic generated when large numbers of viewers or gamers engage. These "peak" events may only occur once a month or even once a year sports championships, election results, gaming...
Patchless AMSI bypass using SharpBlock
Introduction For those that followed my personal blog posts on Creating an EDR and Bypassing It, I developed a new tool called SharpBlock. The tool implements a Windows debugger to prevent EDR’s or any other DLL from loading into a process that SharpBlock launches. One feature that was missing fr...
GHSA-F9MQ-JPH6-9MHM Arbitrary file read via window-open IPC in Electron
Impact The vulnerability allows arbitrary local file read by defining unsafe window options on a child window opened via window.open. Workarounds Ensure you are calling event.preventDefault on all new-window events where the url or options is not something you expect. Fixed Versions 9.0.0-beta.21...
CVE-2020-13383
creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:24+00:00| seen|...
CVE-2019-20408
creationtimestamp| type| source ---|---|--- 2020-07-01 08:55:15+00:00| seen| https://t.me/cibsecurity/13157 2020-07-01 13:55:29+00:00| seen| https://t.me/cibsecurity/13167 2020-07-01 16:55:05+00:00| seen| https://t.me/cibsecurity/13185...
Unspecified vulnerability in MISP (CNVD-2020-51415)
MISP is an open source software solution. The product is used to collect, store, distribute and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP version 2.4.128, which stems from insufficient ACL...
victoryevents.cz Cross Site Scripting vulnerability OBB-1208295
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
CVE-2019-19505
creationtimestamp| type| source ---|---|--- 2020-06-26 00:55:03+00:00| seen| https://t.me/cibsecurity/13073 2020-07-01 11:55:35+00:00| seen| https://t.me/cibsecurity/13163 2020-07-01 14:55:29+00:00| seen| https://t.me/cibsecurity/13174...
CVE-2019-19506
creationtimestamp| type| source ---|---|--- 2020-06-26 00:55:02+00:00| seen| https://t.me/cibsecurity/13072 2020-07-01 11:55:30+00:00| seen| https://t.me/cibsecurity/13162 2020-07-01 14:55:25+00:00| seen| https://t.me/cibsecurity/13173...
CVE-2020-10378
creationtimestamp| type| source ---|---|--- 2020-06-25 22:55:22+00:00| seen| https://t.me/cibsecurity/13069 2020-07-01 11:55:28+00:00| seen| https://t.me/cibsecurity/13159 2020-07-01 14:55:23+00:00| seen| https://t.me/cibsecurity/13170...
CVE-2020-10379
creationtimestamp| type| source ---|---|--- 2020-06-25 22:55:21+00:00| seen| https://t.me/cibsecurity/13068 2020-07-01 11:55:27+00:00| seen| https://t.me/cibsecurity/13158 2020-07-01 14:55:22+00:00| seen| https://t.me/cibsecurity/13169...
CVE-2019-20892
creationtimestamp| type| source ---|---|--- 2020-06-25 14:55:12+00:00| seen| https://t.me/cibsecurity/13047 2020-07-01 11:55:29+00:00| seen| https://t.me/cibsecurity/13161 2020-07-01 14:55:24+00:00| seen| https://t.me/cibsecurity/13172...
Code injection
An issue was discovered in Mattermost Server before 4.8.1, 4.7.4, and 4.6.3. WebSocket events were accidentally sent during certain user-management operations, violating user privacy...
CVE-2020-5410
creationtimestamp| type| source ---|---|--- 2020-06-18 12:07:17+00:00| published-proof-of-concept| https://t.me/cKure/934 2020-07-06 14:58:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/springclouddirectorytraversal.rb 2023-06-14...
Artica Pandora FMS Injection Vulnerability
Artica Pandora FMS is a monitoring system from the Spanish company Artica. The system monitors networks, servers, virtual infrastructures, applications, etc. in a visual way. An injection vulnerability exists in the Events feature in Artica Pandora FMS version 7.44. An attacker can exploit this...
