Rancher Labs Rancher 安全漏洞

Rancher Labs Rancher is an open source, enterprise-class container management platform from Rancher Labs, U.S. Rancher Labs Rancher is vulnerable to an information disclosure vulnerability that stems from exposing repository credentials to an external third-party source, which could be exploited ...

Artificial Intelligence and Cybersecurity

Artificial Intelligence AI and Machine Learning ML are essentials in modern cybersecurity. Both can automated the process of analyzing internet content and categorize it while identifying and mitigating threats such as malware, ransomware, phishing and botnets. AI and ML technologies are constant...

CVE-2021-45046

creationtimestamp| type| source ---|---|--- 2021-12-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=700 2021-12-14 22:14:54+00:00| exploited| https://t.me/cibsecurity/33979 2021-12-15 05:50:40+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/1081 2021-12-15...

Machine Learning Testing for Data Scientists

In one software development project after another, it has been proven that testing saves time. Does this hold true for machine learning projects? Should data scientists write tests? Will it make their work better and/or faster? We believe the answer is YES! In this post we describe a full...

CVE-2021-26857

creationtimestamp| type| source ---|---|--- 2021-03-03 02:44:45+00:00| seen| https://t.me/cibsecurity/24377 2021-03-03 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=556 2021-03-03 06:30:38+00:00| seen| MISP/76591c3b-efb3-4084-a644-87a6cca8c784 2021-03-03 15:38:55+00:00|...

CVE-2020-8260

creationtimestamp| type| source ---|---|--- 2020-12-17 22:50:44+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/pulsesecuregziprce.rb 2021-04-16 11:17:08+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/194 2021-04-21...

DEBIAN-CVE-2020-11986

To be able to analyze gradle projects, the build scripts need to be executed. Apache NetBeans follows this pattern. This causes the code of the build script to be invoked at load time of the project. Apache NetBeans up to and including 12.0 did not request consent from the user for the analysis o...

CVE-2019-16928

creationtimestamp| type| source ---|---|--- 2019-09-29 14:20:11+00:00| published-proof-of-concept| https://t.me/antichat/6642 2019-09-30 13:06:40+00:00| seen| https://t.me/SecLabNews/5895 2019-09-30 14:26:39+00:00| seen| https://t.me/thehackernews/483 2019-09-30 14:42:41+00:00| seen|...

Cross-Site Scripting in Language Pack Handling

Failing to properly encode information from external sources, language pack handling in the install tool is vulnerable to cross-site scripting...

CVE-2018-8611

creationtimestamp| type| source ---|---|--- 2018-12-12 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=347 2018-12-12 05:50:02+00:00| seen| https://t.me/securixykz/317 2018-12-12 08:38:31+00:00| exploited| https://t.me/SecLabNews/3830 2018-12-12 09:37:10+00:00| seen|...

CVE-2018-0802

creationtimestamp| type| source ---|---|--- 2018-01-12 22:03:40+00:00| published-proof-of-concept| https://t.me/canyoupwnme/3025 2018-03-22 14:09:48+00:00| seen| MISP/5ab3b89e-7514-41b4-b842-402f02de0b81 2018-03-27 09:03:26+00:00| seen| MISP/5aba062a-8118-4885-afe0-469402de0b81 2018-03-27...

CVE-2017-12617

creationtimestamp| type| source ---|---|--- 2017-10-05 13:18:32+00:00| seen| https://t.me/informationsecuritychannel/9627 2017-10-05 21:40:16+00:00| seen| https://t.me/informationsecuritychannel/9655 2017-10-09 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/42966 2017-10-09...

Cross-site Scripting (XSS)

Moodle is vulnerable to cross-site scripting XSS attacks. These attacks are possible because badge details from external sources are not being filtered...

Open-Xchange App Suite 7.8.2 Cross Site Scripting

Product: OX App Suite Vendor: OX Software GmbH Internal reference: 46484 Bug ID Vulnerability type: Cross Site Scripting CWE-80 Vulnerable version: 7.8.2 and earlier Vulnerable component: frontend Report confidence: Confirmed Solution status: Fixed by Vendor Fixed version: 7.6.2-rev46, 7.6.3-rev1...

CVE-2015-3113

creationtimestamp| type| source ---|---|--- 2015-06-26 22:07:31+00:00| seen| MISP/558d76ff-2988-4a8d-9a85-4660950d210b 2015-07-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37536 2015-07-30 06:59:08+00:00| seen| MISP/558dc697-c7d4-48b7-bff6-552f18689696 2015-07-31...

CVE-2014-4113

creationtimestamp| type| source ---|---|--- 2014-10-15 09:30:45+00:00| seen| MISP/543e3e82-40c8-4443-900d-7b77950d210b 2014-10-19 09:29:28+00:00| seen| MISP/5443841b-98c0-4fd2-9fa6-47fb950d2109 2014-10-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/35101 2014-11-25...

CVE-2013-2251

creationtimestamp| type| source ---|---|--- 2013-07-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27135 2014-01-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44583 2015-08-20 01:37:24+00:00| seen| MISP/55d52f22-cc38-49d7-8d51-20f10a00020f 2018-05-29...

CVE-2013-3660

creationtimestamp| type| source ---|---|--- 2013-05-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25611 2013-06-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25912 2013-07-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26554 2015-05-28...

CVE-2013-2423

creationtimestamp| type| source ---|---|--- 2013-04-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24976 2013-08-13 06:02:56+00:00| seen| MISP/5209cb81-3db0-4715-83e7-3de1950d2109 2013-08-22 12:36:06+00:00| seen| MISP/52160415-d274-42f8-85b4-665fac1d4fa4 2014-08-01...

CVE-2010-4345

creationtimestamp| type| source ---|---|--- 2010-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16925 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/smtp/exim4stringformat.rb 2023-06-14 21:10:03+00:00| seen|...