CISA sets two week window for patching serious vulnerabilities

The Cybersecurity and Infrastructure Security Agency CISA has issued binding directive 22-01 titled Reducing the Significant Risk of Known Exploited Vulnerabilities. This directive applies to all software and hardware found on federal information systems managed on agency premises or hosted by...

CVE-2021-26294

creationtimestamp| type| source ---|---|--- 2021-11-04 14:51:10+00:00| published-proof-of-concept| Telegram/E904-7tNY5SsCugfjArkkhd1hZWJs7UA85Xzgg7k4dhsQ 2022-01-11 11:05:12+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5174 2023-11-30 07:58:47+00:00| seen|...

CVE-2021-21745

creationtimestamp| type| source ---|---|--- 2021-10-20 20:35:33+00:00| seen| https://t.me/cibsecurity/30908 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21745.yaml 2025-01-26 00:00:00+00:00| seen| The Shadowserver...

CVE-2021-39226

creationtimestamp| type| source ---|---|--- 2021-10-05 22:30:46+00:00| seen| https://t.me/cibsecurity/29999 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-39226.yaml 2023-06-14 21:10:04+00:00| seen|...

CVE-2021-40438

creationtimestamp| type| source ---|---|--- 2021-09-16 18:22:49+00:00| seen| https://t.me/cibsecurity/28988 2021-10-14 13:22:35+00:00| published-proof-of-concept| https://t.me/cKure/7605 2021-10-15 13:16:10+00:00| published-proof-of-concept| https://t.me/ptswarm/82 2021-10-15 13:37:04+00:00| seen...

CVE-2021-33044

creationtimestamp| type| source ---|---|--- 2021-09-16 02:22:15+00:00| seen| https://t.me/cibsecurity/28955 2021-10-11 22:13:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/677 2021-10-12 10:43:24+00:00| exploited| https://t.me/forensictools/381 2021-10-16 07:16:46+00:00| seen|...

CVE-2021-38647

creationtimestamp| type| source ---|---|--- 2021-09-15 05:46:05+00:00| published-proof-of-concept| https://t.me/cKure/7088 2021-09-15 16:22:15+00:00| seen| https://t.me/cibsecurity/28876 2021-09-15 21:47:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/537 2021-09-16 05:00:00+00:0...

Microsoft Windows Multiple Vulnerabilities (KB5005568)

This host is missing a critical security update according to Microsoft KB5005568 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Apple Issues Urgent Updates to Fix New Zero-Day Linked to Pegasus Spyware

Apple has released iOS 14.8, iPadOS 14.8, watchOS 7.6.2, macOS Big Sur 11.6, and Safari 14.1.2 to fix two actively exploited vulnerabilities, one of which defeated extra security protections built into the operating system. The list of two flaws is as follows - CVE-2021-30858 WebKit - A use after...

CVE-2021-33544

creationtimestamp| type| source ---|---|--- 2021-09-01 16:09:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/geutebruckcmdinjectcve2021335xx.rb 2021-09-13 22:15:05+00:00| seen| https://t.me/cibsecurity/28740 2025-01-26 00:00:00+00:00| seen| T...

CVE-2021-36356

creationtimestamp| type| source ---|---|--- 2021-08-31 07:33:05+00:00| seen| https://t.me/cibsecurity/28061 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-26084

creationtimestamp| type| source ---|---|--- 2021-08-30 12:32:06+00:00| seen| https://t.me/cibsecurity/27991 2021-08-31 16:38:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/434 2021-09-01 02:26:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/440 2021-09-01...

CVE-2021-39144

creationtimestamp| type| source ---|---|--- 2021-08-23 22:23:29+00:00| seen| https://t.me/cibsecurity/27713 2021-08-24 06:17:39+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/379 2022-10-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=903 2022-10-26...

Top Routinely Exploited Vulnerabilities

Summary This Joint Cybersecurity Advisory was coauthored by the U.S. Cybersecurity and Infrastructure Security Agency CISA, the Australian Cyber Security Centre ACSC, the United Kingdom’s National Cyber Security Centre NCSC, and the U.S. Federal Bureau of Investigation FBI. This advisory provides...

CVE-2021-26086

creationtimestamp| type| source ---|---|--- 2021-08-16 07:14:13+00:00| seen| https://t.me/cibsecurity/27346 2021-10-12 05:21:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/680 2021-10-13 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4511...

CVE-2021-33690

creationtimestamp| type| source ---|---|--- 2021-08-13 13:57:06+00:00| seen| https://t.me/truesecator/2000 2021-09-01 14:28:22+00:00| seen| https://t.me/ptswarm/67 2021-09-06 10:48:25+00:00| seen| https://t.me/truesecator/2071 2021-09-15 22:22:13+00:00| seen| https://t.me/cibsecurity/28941...

CVE-2021-20028

creationtimestamp| type| source ---|---|--- 2021-08-04 23:23:38+00:00| seen| https://t.me/cibsecurity/26843 2022-01-26 18:54:27+00:00| published-proof-of-concept| https://t.me/arvinclub/5154 2022-02-13 11:48:22+00:00| seen| https://t.me/breachdetector/45993 2023-06-14 21:10:04+00:00| seen|...

CISA Alert: Top Routinely Exploited Vulnerabilities

On July 28, 2021, the U.S. Cybersecurity and Infrastructure Security Agency CISA released a cybersecurity advisory detailing the top 30 publicly known vulnerabilities that have been routinely exploited by cyber threat actors in 2020 and 2021. Organizations are advised to prioritize and apply...

SUSE: Security Advisory (SUSE-SU-2013:1255-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-11978

creationtimestamp| type| source ---|---|--- 2021-06-03 00:39:25+00:00| seen| https://t.me/pwnwikizhchannel/579 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-09-18 22:16:38+00:00| seen|...