PT-2023-20005 · Stimulsoft · Stimulsoft Reporting Designer +1

Name of the Vulnerable Software and Affected Versions: Stimulsoft Designer Web version 2023.1.3 Description: The issue allows an attacker to perform Server Side Request Forgery SSRF attacks. The Reporting Designer Web can embed sources from external locations, and when a user chooses such a...

CVE-2022-31765

creationtimestamp| type| source ---|---|--- 2022-10-11 14:26:06+00:00| seen| https://t.me/cibsecurity/51113 2026-04-14 03:04:52+00:00| seen| https://www.acn.gov.it/portale/w/aggiornamenti-per-prodotti-siemens-20 2026-04-14 13:10:23+00:00| seen|...

Hardcoded cUSDT and cUSDC prices are dangerous to the system when those stablecoins depeg

Lines of code Vulnerability details Proof of Concept function getUnderlyingPriceCToken ctoken external override view returnsuint address underlying; //manual scope to pop symbol off of stack string memory symbol = ctoken.symbol; if compareStringssymbol, "cCANTO" underlying = addresswcanto; return...

PT-2022-3474 · Schneider Electric · Conext Combox

Name of the Vulnerable Software and Affected Versions: Conext ComBox All Versions Description: A Cross-Site Request Forgery CSRF issue exists, potentially allowing an attacker to override system configurations and cause a reboot loop through a specially crafted POST request. This could lead to a...

execute() and executeWithBatch1155() functions are susceptible to DoS

Lines of code Vulnerability details Impact execute and executeWithBatch1155 are external functions. Both functions run for loops, boundary of which are determined by the function arguments. Anytime there's a loop where the input comes from an external source there's the possibility of unbounded...

Rancher Labs Rancher 安全漏洞

Rancher Labs Rancher is an open source, enterprise-class container management platform from Rancher Labs, U.S. Rancher Labs Rancher is vulnerable to an information disclosure vulnerability that stems from exposing repository credentials to an external third-party source, which could be exploited ...

Artificial Intelligence and Cybersecurity

Artificial Intelligence AI and Machine Learning ML are essentials in modern cybersecurity. Both can automated the process of analyzing internet content and categorize it while identifying and mitigating threats such as malware, ransomware, phishing and botnets. AI and ML technologies are constant...

CVE-2021-45046

creationtimestamp| type| source ---|---|--- 2021-12-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=700 2021-12-14 22:14:54+00:00| exploited| https://t.me/cibsecurity/33979 2021-12-15 05:50:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1081 2021-12-15...

Machine Learning Testing for Data Scientists

In one software development project after another, it has been proven that testing saves time. Does this hold true for machine learning projects? Should data scientists write tests? Will it make their work better and/or faster? We believe the answer is YES! In this post we describe a full...

CVE-2021-26857

creationtimestamp| type| source ---|---|--- 2021-03-03 02:44:45+00:00| seen| https://t.me/cibsecurity/24377 2021-03-03 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=556 2021-03-03 06:30:38+00:00| seen| MISP/76591c3b-efb3-4084-a644-87a6cca8c784 2021-03-03 15:38:55+00:00|...

CVE-2020-8260

creationtimestamp| type| source ---|---|--- 2020-12-17 22:50:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pulsesecuregziprce.rb 2021-04-16 11:17:08+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/194 2021-04-21...

DEBIAN-CVE-2020-11986

To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to be invoked at load time of the project. Apache NetBeans up to and including 12.0 did not request consent from the user for the analysis o...

CVE-2019-16928

creationtimestamp| type| source ---|---|--- 2019-09-29 14:20:11+00:00| published-proof-of-concept| https://t.me/antichat/6642 2019-09-30 13:06:40+00:00| seen| https://t.me/SecLabNews/5895 2019-09-30 14:26:39+00:00| seen| https://t.me/thehackernews/483 2019-09-30 14:42:41+00:00| seen|...

Cross-Site Scripting in Language Pack Handling

Failing to properly encode information from external sources, language pack handling in the install tool is vulnerable to cross-site scripting...

CVE-2018-8611

creationtimestamp| type| source ---|---|--- 2018-12-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=347 2018-12-12 05:50:02+00:00| seen| https://t.me/securixykz/317 2018-12-12 08:38:31+00:00| exploited| https://t.me/SecLabNews/3830 2018-12-12 09:37:10+00:00| seen|...

CVE-2018-0802

creationtimestamp| type| source ---|---|--- 2018-01-12 22:03:40+00:00| published-proof-of-concept| https://t.me/canyoupwnme/3025 2018-03-22 14:09:48+00:00| seen| MISP/5ab3b89e-7514-41b4-b842-402f02de0b81 2018-03-27 09:03:26+00:00| seen| MISP/5aba062a-8118-4885-afe0-469402de0b81 2018-03-27...

CVE-2017-12617

creationtimestamp| type| source ---|---|--- 2017-10-05 13:18:32+00:00| seen| https://t.me/informationsecuritychannel/9627 2017-10-05 21:40:16+00:00| seen| https://t.me/informationsecuritychannel/9655 2017-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42966 2017-10-09...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. These attacks are possible because badge details from external sources are not being filtered...

Open-Xchange App Suite 7.8.2 Cross Site Scripting

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 46484 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.8.2 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.6.2-rev46, 7.6.3-rev1...

CVE-2015-3113

creationtimestamp| type| source ---|---|--- 2015-06-26 22:07:31+00:00| seen| MISP/558d76ff-2988-4a8d-9a85-4660950d210b 2015-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37536 2015-07-30 06:59:08+00:00| seen| MISP/558dc697-c7d4-48b7-bff6-552f18689696 2015-07-31...