Cisco IOS and Cisco IOS XE Software Denial of Service Vulnerability

Cisco IOS and Cisco IOS XE Software are both products of Cisco, a U.S. company. Cisco IOS is a set of operating systems developed for its network devices. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network...

VMware vCenter Server File Upload Vulnerability

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructure. vCenter Server is vulnerable to a...

Cisco IOS and Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2021-80666)

Cisco IOS and Cisco IOS XE Software are both products of the U.S. company Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN,...

Mozilla Rust memory leak vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a memory leak that could be exploited by attackers to read memory from an uninitialized buffer...

Mozilla Rust Memory Corruption Vulnerability (CNVD-2021-85283)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. playXE/cgc for Mozilla Rust suffers from a memory corruption vulnerability that can be exploited by attackers to cause data contention...

Unpatched Apple Zero-Day Allows Code Execution

A zero-day security vulnerability in Apple’s macOS Finder system could allow remote attackers to trick users into running arbitrary commands, according to researchers – and a silent patch hasn’t fixed it. For those not in the Apple camp, the macOS Finder is the default file manager and GUI...

CVE-2021-22005

creationtimestamp| type| source ---|---|--- 2021-09-22 05:17:02+00:00| seen| https://t.me/thehackernews/1528 2021-09-22 14:26:45+00:00| exploited| https://t.me/ctinow/40137 2021-09-22 22:32:08+00:00| exploited| https://t.me/BleepingComputer/10542 2021-09-22 23:56:16+00:00| seen|...

CVE-2020-12080

A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause lmadmin to crash...

CVE-2020-21601

libde265 v1.0.4 contains a stack buffer overflow in the putqpelfallback function, which can be exploited via a crafted a file...

CVE-2021-40438

creationtimestamp| type| source ---|---|--- 2021-09-16 18:22:49+00:00| seen| https://t.me/cibsecurity/28988 2021-10-14 13:22:35+00:00| published-proof-of-concept| https://t.me/cKure/7605 2021-10-15 13:16:10+00:00| published-proof-of-concept| https://t.me/ptswarm/82 2021-10-15 13:37:04+00:00| seen...

Apple fixes the zero-day vulnerabilities exploited by Pegasus spyware named “FORCEDENTRY”

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. Two actively exploited vulnerabilities CVE-2021-30858 and CVE-2021-30860 have been fixed in Apples iOS 14.8, iPadOS 14.8, watchOS 7.6.2, macOS Big Sur 11.6, and Safari 14.1.2 releases. The NSO group carried out the attack by...

CVE-2021-33044

creationtimestamp| type| source ---|---|--- 2021-09-16 02:22:15+00:00| seen| https://t.me/cibsecurity/28955 2021-10-11 22:13:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/677 2021-10-12 10:43:24+00:00| exploited| https://t.me/forensictools/381 2021-10-16 07:16:46+00:00| seen|...

Apache Struts RCE Vulnerability (S2-048) - Version Check

Apache Struts is prone to a remote code execution RCE vulnerability. Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...

CVE-2021-38647

creationtimestamp| type| source ---|---|--- 2021-09-15 05:46:05+00:00| published-proof-of-concept| https://t.me/cKure/7088 2021-09-15 16:22:15+00:00| seen| https://t.me/cibsecurity/28876 2021-09-15 21:47:42+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/537 2021-09-16 05:00:00+00:0...

Microsoft Releases Patch for Actively Exploited Windows Zero-Day Vulnerability

A day after Apple and Google rolled out urgent security updates, Microsoft has pushed software fixes as part of its monthly Patch Tuesday release cycle to plug 66 security holes affecting Windows and other components such as Azure, Office, BitLocker, and Visual Studio, including an actively...

Microsoft HEVC Video Extensions Remote Code Execution Vulnerability (CNVD-2022-59690)

Microsoft HEVC Video Extensions is a video extension application from Microsoft Corporation USA. Microsoft HEVC Video Extensions is a remote code execution vulnerability that can be exploited by attackers to execute arbitrary code on a system...

Microsoft Windows Multiple Vulnerabilities (KB5005568)

This host is missing a critical security update according to Microsoft KB5005568 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Siemens SINEMA Remote Connect Server Information Disclosure Vulnerability (CNVD-2021-71422)

Siemens SINEMA Remote Connect Server is a remote network management platform from Siemens, Germany. The platform is used to remotely access, maintain, control and diagnose the underlying network. An information disclosure vulnerability exists in versions prior to Siemens SINEMA Remote Connect...

Siemens STAR-CCM+ Viewer Out-of-Bounds Write Vulnerability

Simcenter STAR-CCM+ is a multi-physics computational fluid dynamics CFD software used to simulate products operating under real-world conditions. An out-of-bounds write vulnerability exists in Siemens STAR-CCM+ Viewer, which can be exploited by an attacker to execute code in the context of the...

Microsoft Patches Actively Exploited Windows Zero-Day

In September’s Patch Tuesday crop of security fixes, Microsoft released patches for 66 CVEs, three of which are rated critical, and one of which – the Windows MSHTML zero-day – has been under active attack for nearly two weeks. One other bug is listed as publicly known but isn’t yet being...