Microsoft & Adobe Patch Tuesday (December 2021) – Microsoft 83 Vulnerabilities with 7 Critical, 1 Actively Exploited. Adobe 60 Vulnerabilities, 28 critical.

Microsoft Patch Tuesday – December 2021 Microsoft patched 83 vulnerabilities in their December 2021 Patch Tuesday release, of which seven 7 are rated as critical severity. This months release includes one 1 Zero Day known to be actively exploited. Products impacted by Microsofts December security...

CVE-2021-4104

creationtimestamp| type| source ---|---|--- 2021-12-14 14:13:20+00:00| seen| https://t.me/cibsecurity/33912 2021-12-19 05:14:34+00:00| exploited| https://t.me/GithubRedTeam/1166 2021-12-19 10:03:53+00:00| exploited| https://t.me/BlueRedTeam/1548 2021-12-20 06:50:30+00:00| seen|...

CVE-2021-4099

creationtimestamp| type| source ---|---|--- 2021-12-14 13:04:00+00:00| exploited| https://t.me/truesecator/2439...

CVE-2021-4101

creationtimestamp| type| source ---|---|--- 2021-12-14 13:04:00+00:00| exploited| https://t.me/truesecator/2439...

CVE-2021-4100

creationtimestamp| type| source ---|---|--- 2021-12-14 13:04:00+00:00| exploited| https://t.me/truesecator/2439...

CVE-2021-4422

creationtimestamp| type| source ---|---|--- 2021-12-14 11:04:35+00:00| seen| https://t.me/NeKaspersky/1550 2022-01-11 12:34:11+00:00| exploited| https://t.me/BleepingComputer/11313 2023-07-12 12:35:39+00:00| seen| https://t.me/cibsecurity/66474 2024-10-21 16:08:53+00:00| seen|...

Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2021-101133)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. versions 6.4.1 and earlier and 6.3.15 and...

Apache Log4j 2.0.x Multiple Vulnerabilities (TCP, Log4Shell) - Active Check

Apache Log4j is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Reprise License Manager Remote Code Execution Vulnerability

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications.Reprise Software Reprise License...

ZZCMS Access Control Error Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS suffers from an access control error vulnerability that stems from an incorrect access control vulnerability in zzcms via admin.php, which can be exploited by an attacker to directly access the administrator console afte...

Gryphon Tower Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Gryphon Tower, a wireless router from Gryphon. The vulnerability stems from a lack of user-supplied data and output data validation filtering in the url parameter of cgi-bin/luci/siteaccess/, which can be exploited to execute client-side JavaScript...

Cross site scripting

Stored Cross-Site Scripting XSS vulnerability discovered in WordPress Comment Engine Pro plugin versions = 1.0, could be exploited by users with Editor or higher role...

CVE-2021-44228

creationtimestamp| type| source ---|---|--- 2021-12-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=700 2021-12-10 08:54:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus38/2021 2021-12-10 09:44:22+00:00| exploited| https://t.me/poxek/229 2021-12-1...

CISA Adds 13 Known Exploited Vulnerabilities to Catalog

CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

Jolokia Unauthorized Command Execution Vulnerability

Jolokia is a jmx remote management project implemented via http and josn. Jolokia unauthorized command execution vulnerability can be exploited by attackers to gain control of the server...

CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog

CISA has added thirteen new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all typ...

SquaredUp for SCOM Cross-Site Scripting Vulnerability

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. a cross-site scripting vulnerability exists in Image Tile in SquaredUp for SCOM version 5.2.1.6654, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML...

CVE-2021-42567

creationtimestamp| type| source ---|---|--- 2021-12-08 00:23:19+00:00| seen| https://t.me/cibsecurity/33537 2025-01-01 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-01-01 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

NoMachine Enterprise Client Buffer Overflow Vulnerability

NoMachine is a remote desktop access tool from Luxembourg-based NoMachine. A security vulnerability exists in NoMachine Enterprise Client, which can be exploited by attackers to execute arbitrary code in kernel mode or cause a denial of service memory corruption and OS crash via specially crafted...

Electronic Team Donglify Integer Overflow Vulnerability

Electronic Team Donglify is an application from Electronic Team, Inc. that shares Usb security keys over the Internet. an integer overflow vulnerability exists in Electronic Team Donglify, which can be exploited by attackers to execute arbitrary code in kernel mode or via specially crafted I/O...