PST, Want a Shell? ProxyShell Exploiting Microsoft Exchange Servers

In August 2021, Mandiant Managed Defense identified and responded to the exploitation of a chain of vulnerabilities known as ProxyShell. The ProxyShell vulnerabilities consist of three CVEs CVE-2021-34473, CVE-2021-34523, CVE-2021-31207 affecting the following versions of on-premises Microsoft...

Solarwinds Orion Platform Cross-Site Scripting Vulnerability (CNVD-2021-69606)

Solarwinds Orion Platform is a network fault and network performance management platform from Solarwinds, Inc. Solarwinds Orion Platform is a cross-site scripting vulnerability that can be exploited by attackers to store XSS via text box hyperlinks...

CVE-2021-33544

creationtimestamp| type| source ---|---|--- 2021-09-01 16:09:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/geutebruckcmdinjectcve2021335xx.rb 2021-09-13 22:15:05+00:00| seen| https://t.me/cibsecurity/28740 2025-01-26 00:00:00+00:00| seen| T...

DRK Odenwaldkreis Testerfassung Cross-Site Scripting Vulnerability

DRK Odenwaldkreis Testerfassung is an open source solution for obtaining and recording rapid test results for corona antigens.A cross-site scripting vulnerability exists in DRK Odenwaldkreis Testerfassung March-2021, which can be exploited by attackers to inject arbitrary web script or HTML via a...

CVE-2021-36356

creationtimestamp| type| source ---|---|--- 2021-08-31 07:33:05+00:00| seen| https://t.me/cibsecurity/28061 2022-07-13 13:02:16+00:00| seen| MISP/8bf50bb8-94dd-4004-a646-5f78db6f0b6a 2023-04-27 09:58:59+00:00| confirmed|...

CVE-2021-33055

creationtimestamp| type| source ---|---|--- 2021-08-30 22:32:41+00:00| seen| https://t.me/cibsecurity/28027 2021-09-10 18:38:03+00:00| exploited| https://t.me/truesecator/2092...

Stack overflow

A stack-based buffer overflow vulnerability in Delta Electronics DOPSoft Version 4.00.11 and prior may be exploited by processing a specially crafted project file, which may allow an attacker to execute arbitrary code...

GHSA-9856-9GG9-QCMQ Ethereum Contains Consensus Flaw During Block Processing

Impact A vulnerability in the Geth EVM could cause a node to reject the canonical chain. Description A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different stateRoot when processing a maliciously crafted transaction. This, in turn, would lead...

Ethereum Contains Consensus Flaw During Block Processing

Impact A vulnerability in the Geth EVM could cause a node to reject the canonical chain. Description A memory-corruption bug within the EVM can cause a consensus error, where vulnerable nodes obtain a different stateRoot when processing a maliciously crafted transaction. This, in turn, would lead...

CVE-2021-26084

creationtimestamp| type| source ---|---|--- 2021-08-30 12:32:06+00:00| seen| https://t.me/cibsecurity/27991 2021-08-31 16:38:28+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/434 2021-09-01 02:26:37+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/440 2021-09-01...

CVE-2021-38154

Certain Canon devices manufactured in 2012 through 2020 such as imageRUNNER ADVANCE iR-ADV C5250, when Catwalk Server is enabled for HTTP access, allow remote attackers to modify an e-mail address setting, and thus cause the device to send sensitive information through e-mail to the attacker. For...

Six Apart Movable Type Cross-Site Scripting Vulnerability (CNVD-2022-22647)

Six Apart Movable Type MT is a blogging system from Six Apart, a US-based company. A cross-site scripting vulnerability exists in Six Apart Movable Type, which stems from the lack of proper validation of client-side data in the WEB application and can be exploited to inject arbitrary script or HT...

Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability (CNVD-2021-68725)

Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. The API endpoint of the Controller contains an elevation of privilege vulnerability that can be exploited by an attacker with administrator read-only credentials t...

F5 BIG-IP iControl SOAP CSRF Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. A CSRF vulnerability exists in F5 BIG-IP iControl SOAP, which could be exploited by an attacker to potentially trick...

Cisco NX-OS Software Denial of Service Vulnerability (CNVD-2021-68723)

A denial-of-service vulnerability exists in the MPLS OAM feature of Cisco NX-OS Software, which can be exploited by an attacker by sending malicious MPLS echo requests or echo reply packets to cause the MPLS OAM process to crash and restart multiple times...

F5 BIG-IP TMUI Unauthorized Access Vulnerability

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 BIG-IP TMUI Unauthorized Access vulnerability can be exploited by an authenticated attacker by sending a crafted reque...

CVE-2021-31010

A deserialization issue was addressed through improved validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 12.5.5, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. A sandboxed process may be able to circumvent sandbox restrictions. Apple was aware of a report tha...

CVE-2021-30883

A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 15.0.2 and iPadOS 15.0.2, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. An application may be able to execute arbitrary code with kernel privilege...

CVE-2021-30869

A type confusion issue was addressed with improved state handling. This issue is fixed in iOS 12.5.5, iOS 14.4 and iPadOS 14.4, macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, Security Update 2021-006 Catalina. A malicious application may be able to execute...

CVE-2021-30860

An integer overflow was addressed with improved input validation. This issue is fixed in Security Update 2021-005 Catalina, iOS 14.8 and iPadOS 14.8, macOS Big Sur 11.6, watchOS 7.6.2. Processing a maliciously crafted PDF may lead to arbitrary code execution. Apple is aware of a report that this...