CVE-2021-41266

creationtimestamp| type| source ---|---|--- 2021-11-17 16:27:38+00:00| seen| https://t.me/cibsecurity/32511 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-30 2024-11-12 00:00:00+00:00| exploited| The Shadowserver...

CVE-2021-37580

creationtimestamp| type| source ---|---|--- 2021-11-17 13:31:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/868 2021-11-18 00:23:00+00:00| published-proof-of-concept| https://t.me/hackertrick/440 2021-11-20 06:56:13+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/119...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, which require remediation from federal civilian executive branch FCEB agencies by December 1, 2021. CISA has evidence that threat actors are actively exploiting the vulnerabilities listed in the table below...

FBI Email Hoaxer ID’ed by the Guy He Allegedly Loves to Torment

Vinny Troia, the cybersecurity researcher mentioned in a fake alert gushed out to thousands of people from the FBI’s own email system on Friday night, has fingered the guy who allegedly pulled off the exploit. Register now for our LIVE event! Troia – white hat threat hunter, cybercrime investigat...

Binatone Motorola-branded Camera Licensing Issue Vulnerability

The Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone, Inc. The Binatone Motorola-branded Camera is vulnerable to licensing issues, which could be exploited by an attacker to gain physical access to the device through the interface or unauthoriz...

Directorist – Business Directory Plugin < 7.0.6.2 - CSRF to Remote File Upload

The plugin was vulnerable to Cross-Site Request Forgery to Remote File Upload leading to arbitrary PHP shell uploads in the wp-content/plugins directory. This vulnerability was seen actively exploited by Sucuri in the wild for ransomware attacks. PoC 1. Authenticate as any user. 2. Paste below...

Nim code issue vulnerability

Nim is a statically typed programming language from the Nim community. nim has a code issue vulnerability that can be exploited by attackers to bypass checks and launch SSRF attacks using null bytes...

Binatone Motorola-branded Camera Buffer Overflow Vulnerability

Binatone Motorola-branded Camera is a Binatone licensed Motorola-branded product camera from Binatone Inc. A buffer overflow vulnerability exists in Binatone Motorola-branded Camera, which can be exploited by attackers to perform denial of service attacks on the device...

Early user can break addLiquidity

Handle WatchPug Vulnerability details uint256 totalLiquidityUnits = totalSupply; if totalLiquidityUnits == 0 liquidity = nativeDeposit; // TODO: Contact ThorChain on proper approach In the current implementation, the first liquidity takes the nativeDeposit amount and uses it directly. However,...

Weak Password Vulnerability in Golden Dragon Card Water Control Management System

Harbin Xinzhongxin Electronics Co., Ltd. is a leading provider of campus card system solutions in China. A weak password vulnerability exists in the Golden Dragon Card Water Control Management System, which can be exploited by attackers to obtain sensitive information...

Airangel Hsmx Gateway Remote Code Execution Vulnerability

Airangel Hsmx Gateway is a platform from Airangel UK, Inc. It is used to manage authentication and billing in the network.A remote code execution vulnerability exists in Airangel Hsmx Gateway prior to 5.2.04, which originates when a remote server controlled by an attacker downloads and runs a...

Microsoft Chakra Scripting Engine Memory Corruption Vulnerability

Microsoft Windows Scripting is a scripting language for the Windows operating system from Microsoft Corporation USA.A memory corruption vulnerability exists in the Microsoft Chakra Scripting Engine, which can be exploited by attackers to execute code on the target host...

Microsoft Windows Diagnostic Hub Elevation of Privilege Vulnerability

Microsoft Windows Diagnostic Hub is an application from Microsoft Corporation USA. It is not only a task manager, but also a device diagnostic center. This application combines Windows developer tools with UWP functionality to access new information and features.Microsoft Windows Diagnostic Hub i...

Microsoft Windows Active Directory Elevation of Privilege Vulnerability

Microsoft Windows Active Directory is a centralized directory management service from Microsoft Corporation USA that is responsible for architecting large network environments. Microsoft Windows Active Directory has an elevation of privilege vulnerability that could be exploited by an attacker to...

CVE-2021-22956

creationtimestamp| type| source ---|---|--- 2021-11-11 18:37:00+00:00| exploited| https://t.me/truesecator/2312...

Nomacs has an unspecified vulnerability

Nomacs is a free open source image viewer for viewing all common image formats, including Raw and Psd images. It is used to view all common image formats, including Raw and Psd images. Nomacs v3.15.0 contains a security vulnerability that could be exploited by an attacker to cause a denial of...

Siemens Nucleus ReadyStart incorrect access vulnerability

Siemens Nucleus ReadyStart is a bundled solution from Siemens Germany. It is used to accelerate the fast startup of complete systems and provides a rich board-level support package Bsp. Siemens Nucleus ReadyStart suffers from an incorrect access vulnerability that could be exploited by an attacke...

Siemens Siveillance Video DLNA Server Path Traversal Vulnerability

Siemens Siveillance Video DLNA Server is a video DLNA server from Siemens, a German company, that is vulnerable to a path traversal vulnerability that could be exploited by remote attackers to access any file outside the application's Web document directory. Any file...

GHSA-WX8Q-RGFR-CF6V Insufficient Granularity of Access Control in github.com/google/exposure-notifications-verification-server

Impact Users or API keys with permission to expire verification codes could have expired codes that belonged to another realm if they guessed the UUID. Patches v1.1.2+ Workarounds There are no workarounds, and there are no indications this has been exploited in the wild. Verification codes can on...

CVE-2021-42298

creationtimestamp| type| source ---|---|--- 2021-11-10 12:44:04+00:00| seen| https://t.me/cKure/7972 2021-11-10 13:12:56+00:00| seen| https://t.me/truesecator/2302 2022-12-02 12:58:17+00:00| published-proof-of-concept| https://t.me/truesecator/3775 2022-12-15 10:05:07+00:00| exploited|...