CVE-2020-17519

creationtimestamp| type| source ---|---|--- 2021-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49398 2021-02-23 15:29:39+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/apacheflinkjobmanagertraversal.rb 2021-03-17...

PT-2021-10097 · Apache · Apache Flink

Name of the Vulnerable Software and Affected Versions: Apache Flink versions 1.11.0 through 1.11.2 Description: A change introduced in Apache Flink allows attackers to read any file on the local filesystem of the JobManager through the REST interface. Access is restricted to files accessible by t...

CVE-2020-36112

creationtimestamp| type| source ---|---|--- 2021-01-04 19:10:47+00:00| seen| https://t.me/cibsecurity/21547 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-24581

creationtimestamp| type| source ---|---|--- 2020-12-22 22:53:21+00:00| seen| https://t.me/cibsecurity/21187 2021-02-04 17:32:29+00:00| published-proof-of-concept| https://t.me/reconshell/404 2021-02-05 19:52:01+00:00| published-proof-of-concept|...

CVE-2020-11738

creationtimestamp| type| source ---|---|--- 2020-12-18 22:18:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wpduplicatorfileread.rb 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen...

CVE-2020-10770

creationtimestamp| type| source ---|---|--- 2020-12-15 22:40:56+00:00| seen| https://t.me/cibsecurity/20877 2023-09-29 12:42:29+00:00| seen| https://t.me/cibsecurity/71269 2025-02-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-05 2025-03-09 00:00:00+00:00| see...

Drupal 7.x, 8.x, 9.x RCE Vulnerability (SA-CORE-2020-013) - Linux

Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

CVE-2019-20933

creationtimestamp| type| source ---|---|--- 2020-11-19 07:41:05+00:00| seen| https://t.me/cibsecurity/16573 2022-01-19 18:02:44+00:00| published-proof-of-concept| https://t.me/cybersecs/528 2023-03-06 21:00:32+00:00| published-proof-of-concept|...

CVE-2020-13638

creationtimestamp| type| source ---|---|--- 2020-11-13 22:33:58+00:00| seen| https://t.me/cibsecurity/16323 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-16846

creationtimestamp| type| source ---|---|--- 2020-11-11 19:52:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/saltstacksaltapicmdexec.rb 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen...

CVE-2020-27986

creationtimestamp| type| source ---|---|--- 2020-10-29 01:33:09+00:00| seen| https://t.me/cibsecurity/15703 2021-05-10 02:45:38+00:00| seen| https://t.me/pwnwikizhchannel/394 2024-11-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-12 2024-11-17...

APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations

Summary This joint cybersecurity advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. Note: the analysis in this joint cybersecurity advisory is ongoing, and the...

CVE-2020-15505

creationtimestamp| type| source ---|---|--- 2020-10-13 06:50:38+00:00| seen| MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4 2020-10-13 15:16:18+00:00| seen| MISP/f628d96f-2958-4717-91da-e86aace4925d 2020-10-20 15:57:21+00:00| seen| MISP/42d04e94-bf5b-427d-acc8-f5d740675941 2020-10-20 15:58:05+00:00|...

CVE-2019-9978

creationtimestamp| type| source ---|---|--- 2020-10-09 15:23:48+00:00| seen| MISP/012ae48d-aab7-4bf9-91cc-f09e50fddc28 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 21:59:47+00:00|...

CVE-2019-7256

creationtimestamp| type| source ---|---|--- 2020-10-09 14:02:20+00:00| seen| MISP/4cf681c5-0bde-42c8-aece-998f0a4ed7b1 2023-01-05 00:32:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linearemergeunauthrcecve20197256.rb 2024-03-14...

CISA and FBI Release Joint Advisory Regarding APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations

The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI have released a joint cybersecurity advisory regarding advanced persistent threat APT actors chaining vulnerabilities—a commonly used tactic exploiting multiple vulnerabilities in the course of a...

CVE-2018-14558

creationtimestamp| type| source ---|---|--- 2020-10-05 09:50:10+00:00| exploited| https://t.me/informationsecuritychannel/40792 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04...

Feds Warn Nation-State Hackers are Actively Exploiting Unpatched Microsoft Exchange, F5, VPN Bugs

The U.S. government is warning that Chinese threat actors have successfully compromised several government and private sector entities in recent months, by exploiting vulnerabilities in F5 BIG-IP devices, Citrix and Pulse Secure VPNs and Microsoft Exchange servers. Patches are currently available...

CVE-2020-17496

creationtimestamp| type| source ---|---|--- 2020-08-12 18:11:25+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/vbulletinwidgettemplaterce.rb 2020-10-09 13:24:43+00:00| seen| MISP/b14f5ca4-fb33-4da3-ad29-dcaf9e3d3fc4 2020-11-01 13:37:36+00:00|...

CVE-2020-8209

creationtimestamp| type| source ---|---|--- 2020-08-12 04:42:19+00:00| exploited| https://t.me/cKure/1810 2020-08-14 06:54:22+00:00| seen| https://t.me/informationsecuritychannel/39832 2020-12-09 04:53:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2115 2021-08-24...