CVE-2021-21315

creationtimestamp| type| source ---|---|--- 2021-02-16 20:47:59+00:00| seen| https://t.me/cibsecurity/23665 2021-02-24 12:16:02+00:00| published-proof-of-concept| https://t.me/BleepingComputer/9188 2021-03-04 15:23:07+00:00| published-proof-of-concept| https://t.me/antichat/9338 2021-10-28...

CVE-2021-21479

creationtimestamp| type| source ---|---|--- 2021-02-10 00:41:02+00:00| seen| https://t.me/cibsecurity/23344 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21479.yaml 2024-09-21 16:06:46+00:00| published-proof-of-concept...

CVE-2021-22502

creationtimestamp| type| source ---|---|--- 2021-02-09 00:39:10+00:00| seen| https://t.me/cibsecurity/23262 2021-03-17 11:01:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2925 2021-04-29 18:16:56+00:00| seen|...

CVE-2021-25646

creationtimestamp| type| source ---|---|--- 2021-02-05 23:22:52+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/5128 2021-02-06 07:37:08+00:00| published-proof-of-concept| https://t.me/cKure/3868 2021-02-09 12:30:57+00:00| published-proof-of-concept| https://t.me/reconshell/428...

CVE-2020-25506

creationtimestamp| type| source ---|---|--- 2021-02-02 17:07:20+00:00| seen| https://t.me/cibsecurity/22944 2021-03-17 11:01:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2925 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20...

CVE-2020-17519

creationtimestamp| type| source ---|---|--- 2021-01-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49398 2021-02-23 15:29:39+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/apacheflinkjobmanagertraversal.rb 2021-03-17...

PT-2021-10097 · Apache · Apache Flink

Name of the Vulnerable Software and Affected Versions: Apache Flink versions 1.11.0 through 1.11.2 Description: A change introduced in Apache Flink allows attackers to read any file on the local filesystem of the JobManager through the REST interface. Access is restricted to files accessible by t...

CVE-2020-36112

creationtimestamp| type| source ---|---|--- 2021-01-04 19:10:47+00:00| seen| https://t.me/cibsecurity/21547 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-24581

creationtimestamp| type| source ---|---|--- 2020-12-22 22:53:21+00:00| seen| https://t.me/cibsecurity/21187 2021-02-04 17:32:29+00:00| published-proof-of-concept| https://t.me/reconshell/404 2021-02-05 19:52:01+00:00| published-proof-of-concept|...

CVE-2020-11738

creationtimestamp| type| source ---|---|--- 2020-12-18 22:18:46+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wpduplicatorfileread.rb 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen...

CVE-2020-10770

creationtimestamp| type| source ---|---|--- 2020-12-15 22:40:56+00:00| seen| https://t.me/cibsecurity/20877 2023-09-29 12:42:29+00:00| seen| https://t.me/cibsecurity/71269 2025-02-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-05 2025-03-09 00:00:00+00:00| see...

Drupal 7.x, 8.x, 9.x RCE Vulnerability (SA-CORE-2020-013) - Linux

Drupal is prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...

CVE-2019-20933

creationtimestamp| type| source ---|---|--- 2020-11-19 07:41:05+00:00| seen| https://t.me/cibsecurity/16573 2022-01-19 18:02:44+00:00| published-proof-of-concept| https://t.me/cybersecs/528 2023-03-06 21:00:32+00:00| published-proof-of-concept|...

CVE-2020-13638

creationtimestamp| type| source ---|---|--- 2020-11-13 22:33:58+00:00| seen| https://t.me/cibsecurity/16323 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-07 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

CVE-2020-16846

creationtimestamp| type| source ---|---|--- 2020-11-11 19:52:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/saltstacksaltapicmdexec.rb 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen...

CVE-2020-27986

creationtimestamp| type| source ---|---|--- 2020-10-29 01:33:09+00:00| seen| https://t.me/cibsecurity/15703 2021-05-10 02:45:38+00:00| seen| https://t.me/pwnwikizhchannel/394 2024-11-12 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-12 2024-11-17...

APT Actors Chaining Vulnerabilities Against SLTT, Critical Infrastructure, and Elections Organizations

Summary This joint cybersecurity advisory uses the MITRE Adversarial Tactics, Techniques, and Common Knowledge ATT &CK® framework. See the ATT&CK for Enterprise framework for all referenced threat actor techniques. Note: the analysis in this joint cybersecurity advisory is ongoing, and the...

CVE-2020-15505

creationtimestamp| type| source ---|---|--- 2020-10-13 06:50:38+00:00| seen| MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4 2020-10-13 15:16:18+00:00| seen| MISP/f628d96f-2958-4717-91da-e86aace4925d 2020-10-20 15:57:21+00:00| seen| MISP/42d04e94-bf5b-427d-acc8-f5d740675941 2020-10-20 15:58:05+00:00|...

CVE-2019-9978

creationtimestamp| type| source ---|---|--- 2020-10-09 15:23:48+00:00| seen| MISP/012ae48d-aab7-4bf9-91cc-f09e50fddc28 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 21:59:47+00:00|...

CVE-2019-7256

creationtimestamp| type| source ---|---|--- 2020-10-09 14:02:20+00:00| seen| MISP/4cf681c5-0bde-42c8-aece-998f0a4ed7b1 2023-01-05 00:32:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/linearemergeunauthrcecve20197256.rb 2024-03-14...