7099 matches found
CVE-2021-42840
creationtimestamp| type| source ---|---|--- 2021-06-03 14:18:38+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/suitecrmlogfilerce.rb 2021-10-22 22:39:21+00:00| seen| https://t.me/cibsecurity/31054 2021-11-17 00:00:00+00:00| exploited|...
Command injection
A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5....
CVE-2020-11978
creationtimestamp| type| source ---|---|--- 2021-06-03 00:39:25+00:00| seen| https://t.me/pwnwikizhchannel/579 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-09-18 22:16:38+00:00| seen|...
openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0825-1)
The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Buffalo WSR-1166DHP3 and WSR-1166DHP4 Operating System Command Injection Vulnerability
Buffalo WSR-1166DHP3 and WSR-1166DHP4 A router from Buffalo WSR-1166DHP3 and WSR-1166DHP4 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary operating system commands with root privileges...
Ubuntu 20.04 LTS : polkit vulnerability (USN-4980-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4980-1 advisory. Kevin Backhouse discovered that polkit incorrectly handled errors in the polkitsystembusnamegetcredssync function. A local attacker could possibly use this issue ...
CVE-2021-21389
creationtimestamp| type| source ---|---|--- 2021-06-02 16:11:31+00:00| published-proof-of-concept| Telegram/yobw8ZrvHW0fEUWSUnBhVkPFKQSqUEvC1JTEUdeXbKUw 2022-07-04 20:48:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3003 2023-04-27 09:58:59+00:00| confirmed|...
Microsoft Edge (Chromium) < 91.0.864.37 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.37. It is, therefore, affected by multiple vulnerabilities as referenced in the May 27, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...
Duplication of Balance
Handle 0xsomeone Vulnerability details Impact It is possible to duplicate currently held ink or art within a Cauldron, thereby breaking the contract's accounting system minting units out of thin air. Proof of Concept The stir function of the Cauldron, which can be invoked via a Ladle operation,...
Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE
The plugin allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution. The issue is being actively exploited, and no patch is available. Further details will be made available once pathed. PoC The Custom Product Designer plugin for WordPress offers the ability...
CVE-2021-33564
creationtimestamp| type| source ---|---|--- 2021-05-28 11:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3477 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-33564.yaml 2023-07-25...
CVE-2020-24949
creationtimestamp| type| source ---|---|--- 2021-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49911 2021-05-28 09:44:39+00:00| seen| https://t.me/pwnwikizhchannel/517 2025-11-11 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-11-11 2026-03-22...
CVE-2020-25671
creationtimestamp| type| source ---|---|--- 2021-05-26 20:55:23+00:00| exploited| Telegram/8RLqebcrApWhcGHQe2nYx7z3TFAx9-6cNJyUWF8sJry8pmE...
CVE-2020-25670
creationtimestamp| type| source ---|---|--- 2021-05-26 20:55:20+00:00| exploited| Telegram/X6AIEUdNJRvmbybZ41tnbQqQ1sslmJcoWJRKwnmHaigvE...
ThinkPHP Exploit Actively Exploited in the Wild
...
CVE-2021-21985
creationtimestamp| type| source ---|---|--- 2021-05-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=591 2021-05-26 07:59:34+00:00| seen| https://t.me/thehackernews/1242 2021-05-26 11:23:27+00:00| seen| https://t.me/truesecator/1751 2021-05-26 19:05:27+00:00| seen|...
TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack
We have found and confirmed close to 50,000 IPs compromised by this attack perpetrated by TeamTNT across multiple clusters. Several IPs were repeatedly exploited during the timeframe of the episode, occurring between March and May...
Google Chrome < 91.0.4472.77 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 91.0.4472.77. It is, therefore, affected by multiple vulnerabilities as referenced in the 202105stable-channel-update-for-desktop25 advisory. - Insufficient policy enforcement in content security policy in Google Chrome...
Project Worlds Online Examination System Cross-Site Scripting Vulnerability
Project Worlds Online Examination System is an online examination system. version 1.0 of ProjectWorlds College Management System is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript code to execute and steal user credentials...