7100 matches found
New Chrome 0-day Bug Under Active Attacks – Update Your Browser ASAP!
Exactly a month after patching an actively exploited zero-day flaw in Chrome, Google today rolled out fixes for yet another zero-day vulnerability in the world's most popular web browser that it says is being abused in the wild. Chrome 89.0.4389.72, released by the search giant for Windows, Mac,...
CVE-2021-26855
creationtimestamp| type| source ---|---|--- 2021-03-03 02:44:45+00:00| seen| https://t.me/cibsecurity/24377 2021-03-03 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=556 2021-03-03 06:30:17+00:00| seen| MISP/76591c3b-efb3-4084-a644-87a6cca8c784 2021-03-07 19:26:18+00:00|...
Google Chrome < 89.0.4389.72 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 89.0.4389.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202103stable-channel-update-for-desktop advisory. - Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a...
Google Chrome < 89.0.4389.72 Multiple Vulnerabilities
The version of Google Chrome installed on the remote macOS host is prior to 89.0.4389.72. It is, therefore, affected by multiple vulnerabilities as referenced in the 202103stable-channel-update-for-desktop advisory. - Uninitialized data in PDFium in Google Chrome prior to 89.0.4389.72 allowed a...
Six Apart Movable Type Cross-Site Scripting Vulnerability (CNVD-2022-22654)
Six Apart Movable Type is an application of Six Apart, Inc. Six Apart Movable Type has a cross-site scripting vulnerability in several of its products, which stems from the lack of proper validation of client data in the WEB application and can be exploited to inject arbitrary scripts via...
Cisco NX-OS Denial of Service Vulnerability (CNVD-2021-12829)
Cisco NX-OS is the network operating system for the Cisco Nexus family of Ethernet switches and the MDS family of Fibre Channel storage area network switches. A denial of service vulnerability exists in the Protocol Independent Multicast PIM feature of the Cisco NX-OS, which can be exploited by a...
CVE-2017-2005
creationtimestamp| type| source ---|---|--- 2021-02-24 12:35:12+00:00| exploited| https://t.me/xakepru/10416...
CVE-2021-21972
creationtimestamp| type| source ---|---|--- 2021-02-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=553 2021-02-24 10:28:10+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuuksia-vmwaren-tuotteissa-paivita-heti 2021-02-24 12:15:42+00:00| seen|...
Huawei EulerOS: Security Advisory for php-pear (EulerOS-SA-2021-1345)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kangtaike SolarView Compact SV-CPT-MC310 Arbitrary File Upload Vulnerability
Kangtaike SolarView Compact is an application system from Kangtaike Japan Inc. Kangtaike SolarView Compact SV-CPT-MC310 contains an arbitrary file upload vulnerability that can be exploited by attackers to upload arbitrary files via an unspecified carrier...
CVE-2021-21315
creationtimestamp| type| source ---|---|--- 2021-02-16 20:47:59+00:00| seen| https://t.me/cibsecurity/23665 2021-02-24 12:16:02+00:00| published-proof-of-concept| https://t.me/BleepingComputer/9188 2021-03-04 15:23:07+00:00| published-proof-of-concept| https://t.me/antichat/9338 2021-10-28...
CVE-2021-27101
Accellion FTA 912370 and earlier is affected by SQL injection via a crafted Host header in a request to documentroot.html. The fixed version is FTA912380 and later. Recent assessments: cdelafuente-r7 at March 03, 2021 6:11pm UTC reported: Accellion’s legacy File Transfer Appliance FTA is an...
Updated chromium-browser packages fix security vulnerability
The updated packages fix security vulnerabilities. One of those problems is a security issue in V8 engine that is actively exploited...
Vulnerability in Chess.com allowed access to 50 Million user records
By Saad Rajpoot The Chess.com vulnerability could have been exploited to access any account on the site including the administrator account. This is a post from HackRead.com Read the original post: Vulnerability in Chess.com allowed access to 50 Million user records...
Various Malware Lurks in Discord App to Target Gamers
A rise in online gaming, tied to pandemic-mandated social distancing, has led to a spike in criminals targeting the demographic. The latest effort to exploit the trend is malicious files planted inside the Discord platform designed to trick users into downloading malware-laced files. Researchers...
Microsoft Issues Patches for In-the-Wild 0-day and 55 Others Windows Bugs
Microsoft on Tuesday issued fixes for 56 flaws, including a critical vulnerability that's known to be actively exploited in the wild. In all, 11 are listed as Critical, 43 are listed as Important, and two are listed as Moderate in severity — six of which are previously disclosed vulnerabilities...
CVE-2021-21479
creationtimestamp| type| source ---|---|--- 2021-02-10 00:41:02+00:00| seen| https://t.me/cibsecurity/23344 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21479.yaml 2024-09-21 16:06:46+00:00| published-proof-of-concept...
CVE-2021-22502
creationtimestamp| type| source ---|---|--- 2021-02-09 00:39:10+00:00| seen| https://t.me/cibsecurity/23262 2021-03-17 11:01:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2925 2021-04-29 18:16:56+00:00| seen|...
CVE-2021-21148
Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recent assessments: gwillcox-r7 at February 05, 2021 4:25pm UTC reported: Reported as exploited in the wild at...