CVE-2021-34356

creationtimestamp| type| source ---|---|--- 2021-10-01 17:10:00+00:00| exploited| https://t.me/truesecator/2171...

Chromium: CVE-2021-37975 Use after free in V8

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This vulnerability is known to be exploited in the wild...

Chromium: CVE-2021-37976 Information leak in core

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This vulnerability is known to be exploited in the wild...

Google Emergency Update Fixes Two Chrome Zero Days

Google has pushed out an emergency Chrome update to fix yet another pair of zero days – the second pair this month – that are being exploited in the wild. This hoists this year’s total number of zero days found in the browser up to a dozen. “Google is aware the exploits for CVE-2021-37975 and...

CVE-2021-41293

creationtimestamp| type| source ---|---|--- 2021-09-30 14:37:58+00:00| seen| https://t.me/cibsecurity/29708 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-41293.yaml 2025-01-26 00:00:00+00:00| seen| The Shadowserver...

Irfanview Buffer Overflow Vulnerability (CNVD-2021-76099)

IrfanView is an image viewer that supports image browsing, image editing, image format conversion, etc. Irfanview is vulnerable to a buffer error that can be exploited by attackers to execute arbitrary code via a crafted RLE file...

CVE-2021-34348

creationtimestamp| type| source ---|---|--- 2021-09-28 16:34:39+00:00| exploited| https://t.me/truesecator/2153 2021-09-28 18:23:32+00:00| seen| https://t.me/informationsecuritychannel/45370...

CVE-2021-34349

creationtimestamp| type| source ---|---|--- 2021-09-28 16:34:39+00:00| exploited| https://t.me/truesecator/2153...

VMware vCenter Server File Upload Vulnerability

Vmware VMware vCenter Server is a suite of server and virtualization management software from Vmware, Inc. The software provides a centralized platform for managing VMware vSphere environments, automating the implementation and delivery of virtual infrastructure. vCenter Server is vulnerable to a...

IBM Edge Information Disclosure Vulnerability

Edge is a Node.js logic and template engine that contains batteries. IBM Edge is vulnerable to an information disclosure vulnerability that stems from the program allowing web pages to be stored locally, which could be exploited by an attacker to read those pages...

Cisco IOS and Cisco IOS XE Software Denial of Service Vulnerability

Cisco IOS and Cisco IOS XE Software are both products of Cisco, a U.S. company. Cisco IOS is a set of operating systems developed for its network devices. A single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network...

Cisco IOS and Cisco IOS XE Software Denial of Service Vulnerability (CNVD-2021-80666)

Cisco IOS and Cisco IOS XE Software are both products of the U.S. company Cisco IOS is a set of operating systems developed for its network devices.Cisco IOS XE Software is an operating system. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN,...

Mozilla Rust Memory Corruption Vulnerability (CNVD-2021-85283)

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. playXE/cgc for Mozilla Rust suffers from a memory corruption vulnerability that can be exploited by attackers to cause data contention...

Mozilla Rust memory leak vulnerability

Rust is a general-purpose, compiled programming language from the Mozilla Foundation. Mozilla Rust is vulnerable to a memory leak that could be exploited by attackers to read memory from an uninitialized buffer...

Unpatched Apple Zero-Day Allows Code Execution

A zero-day security vulnerability in Apple’s macOS Finder system could allow remote attackers to trick users into running arbitrary commands, according to researchers – and a silent patch hasn’t fixed it. For those not in the Apple camp, the macOS Finder is the default file manager and GUI...

CVE-2021-22005

creationtimestamp| type| source ---|---|--- 2021-09-22 05:17:02+00:00| seen| https://t.me/thehackernews/1528 2021-09-22 14:26:45+00:00| exploited| https://t.me/ctinow/40137 2021-09-22 22:32:08+00:00| exploited| https://t.me/BleepingComputer/10542 2021-09-22 23:56:16+00:00| seen|...

CVE-2020-12080

A Denial of Service vulnerability has been identified in FlexNet Publisher's lmadmin.exe version 11.16.6. A certain message protocol can be exploited to cause lmadmin to crash...

CVE-2020-21601

libde265 v1.0.4 contains a stack buffer overflow in the putqpelfallback function, which can be exploited via a crafted a file...

CVE-2021-40438

creationtimestamp| type| source ---|---|--- 2021-09-16 18:22:49+00:00| seen| https://t.me/cibsecurity/28988 2021-10-14 13:22:35+00:00| published-proof-of-concept| https://t.me/cKure/7605 2021-10-15 13:16:10+00:00| published-proof-of-concept| https://t.me/ptswarm/82 2021-10-15 13:37:04+00:00| seen...

Apple fixes the zero-day vulnerabilities exploited by Pegasus spyware named “FORCEDENTRY”

THREAT LEVEL: Red. For a detailed advisory, download the pdf file here. Two actively exploited vulnerabilities CVE-2021-30858 and CVE-2021-30860 have been fixed in Apples iOS 14.8, iPadOS 14.8, watchOS 7.6.2, macOS Big Sur 11.6, and Safari 14.1.2 releases. The NSO group carried out the attack by...