Siemens SIMATIC PCS 7 Security Bypass Vulnerability

Siemens SIMATIC PCS 7 is a process control system from Siemens, Germany. A security vulnerability exists in Siemens SIMATIC PCS 7, which can be exploited by an attacker to alter the contents of certain metafiles...

Advantech R-SeeNet Cross-Site Scripting Vulnerability (CNVD-2021-92259)

Advantech R-SeeNet is an industrial monitoring software from Advantech, Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.A cross-site scripting vulnerability exists in Advantech R-SeeNet. The vulnerability stems fr...

Weak password vulnerability in AR2240 of Huawei Technologies Co.

Huawei AR2240 is an enterprise router product developed by Huawei. A weak password vulnerability exists in the Huawei Technologies AR2240 series, which can be exploited by attackers to obtain sensitive information...

Advantech R-SeeNet telnet_form.php Cross-Site Scripting Vulnerability

Advantech R-SeeNet is an industrial monitoring software from Advantech Taiwan, China. The software is based on the snmp protocol for monitoring platforms and is available for Linux and Windows platforms.Advantech R-SeeNet telnetform.php in v2.4.12 contains a cross-site scripting vulnerability tha...

Critical SQL Injection Vulnerability Patched in WooCommerce

Update: The article originally credited Tommy DeVoss dawgyg for the discovery. Weve since been contacted by Tommy, who let us know that the credit should go to another researcher, Josh from DOS Development Operations Security On July 14, 2021, WooCommerce released an emergency patch for a SQL...

Google Details iOS, Chrome, IE Zero-Day Flaws Exploited Recently in the Wild

Threat intelligence researchers from Google on Wednesday shed more light on four in-the-wild zero-days in Chrome, Safari, and Internet Explorer browsers that were exploited by malicious actors in different campaigns since the start of the year. What's more, three of the four zero-days were...

Pillow Buffer Overflow Vulnerability (CNVD-2021-54028)

Pillow is a Python-based image processing library. A buffer overflow vulnerability exists in Pillow, which stems from the failure of the product's convert.c to validate the security of parameters, and could be exploited to trigger a denial of service or remote code execution by triggering a buffe...

Google Chrome < 91.0.4472.164 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 91.0.4472.164. It is, therefore, affected by multiple vulnerabilities as referenced in the 202107stable-channel-update-for-desktop advisory. - Heap buffer overflow in WebXR in Google Chrome prior to 91.0.4472.164 allowed ...

Tale blog has a file read vulnerability

Tale blog is a java development blog system. Tale blog has a file read vulnerability that can be exploited by attackers to obtain sensitive information...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-56848)

DocuCom PDF Reader is a powerful PDF file reader. DocuCom PDF Reader has a binary vulnerability that can be exploited by attackers to cause a denial of service...

Microsoft Windows/Windows Server Remote Code Execution Vulnerability (CNVD-2021-62478)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. A remote code execution vulnerability exists in Media Foundation in Microsoft...

Unauthorized Access Vulnerability in HIM Basic Platform Management System of Beijing Zhongchuang Vision Technology Co., Ltd (CNVD-2021-56793)

Ltd. is a high-tech company specializing in the research and development of video conference system hardware and software. An unauthorized access vulnerability exists in the management system of the HIM infrastructure platform of Beijing CCTV Technology Co. Ltd, which can be exploited by attacker...

Binary Vulnerability in DocuCom PDF Reader (CNVD-2021-54055)

DocuCom PDF Reader is a powerful PDF file reader. DocuCom PDF Reader has a binary vulnerability that can be exploited by attackers to cause a denial of service...

CVE-2021-33771

Windows Kernel Elevation of Privilege Vulnerability Recent assessments: gwillcox-r7 at July 14, 2021 5:35pm UTC reported: Update : Looks like this was used by the exploit brokerage company Candiru along with CVE-2021-31979 to deliver spyware to targeted users, which according to Microsoft’s blog...

Microsoft Crushes 116 Bugs, Three Actively Exploited

Three bugs under active exploit were squashed by Microsoft Tuesday, part of its July security roundup of fixes for Windows, Microsoft Office, SharePoint Server and Exchange Server. In all, Microsoft patched 116 bugs. Twelve bugs are rated critical, 103 rated important and one classified as modera...

Threat Actors are actively exploiting a SolarWinds Zero-Day Vulnerability

THREAT LEVEL: Amber. For a detailed advisory, download the pdf file here. A zero-day vulnerability CVE-2021-35211 that impacts the Serv-U Managed File Transfer and Serv-U Secure FTP, is been exploited by multiple threat actors. The PoC of this exploited vulnerability was given to SolarWinds by...

KB5004307: Windows 7 and Windows Server 2008 R2 Security Update (July 2021)

The remote Windows host is missing security update 5004307. It is, therefore, affected by multiple vulnerabilities. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the Microsoft Security Updates API. The text itself i...

CVE-2021-30119

creationtimestamp| type| source ---|---|--- 2021-07-12 12:51:43+00:00| exploited| https://t.me/truesecator/1905 2026-08-14 05:00:22+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f6f77605-ffb8-4279-9cf0-fa12793bb4b7...

CVE-2021-30120

creationtimestamp| type| source ---|---|--- 2021-07-12 12:51:43+00:00| exploited| https://t.me/truesecator/1905 2026-08-14 05:00:21+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/843ff541-9302-430e-8eb7-fd41b9c1ca1e 2026-08-14 09:10:55+00:00| seen|...

Command Execution Vulnerability in NBR2000D of Beijing StarNet Ruijie Network Technology Co.

NBR1500D is an enterprise router from Beijing StarNet Ruijie Network Technology Co. A command execution vulnerability exists in the NBR2000D of Beijing StarNet Ruijie Network Technology Co. that can be exploited by an attacker to execute commands...