PT-2021-12976 · Juniper Networks · Junos

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 18.1R3-S11 Juniper Networks Junos OS versions prior to 18.2R3-S5 Juniper Networks Junos OS versions prior to 18.3R2-S4, 18.3R3-S3 Juniper Networks Junos OS versions prior to 18.4R2-S5, 18.4R3-S3...

CVE-2021-3493

creationtimestamp| type| source ---|---|--- 2021-04-21 10:26:15+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/222 2021-04-26 11:02:21+00:00| seen| https://t.me/CyberSecurityTechnologies/3219 2021-05-08 12:54:09+00:00| published-proof-of-concept|...

CVE-2021-20021

creationtimestamp| type| source ---|---|--- 2021-04-21 01:32:05+00:00| seen| https://t.me/cKure/4953 2021-04-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=572 2021-04-22 15:55:13+00:00| exploited| https://t.me/NeKaspersky/777 2021-11-08 08:58:19+00:00| seen|...

CVE-2021-20023

creationtimestamp| type| source ---|---|--- 2021-04-21 01:32:05+00:00| seen| https://t.me/cKure/4953 2021-04-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=572 2021-04-22 15:55:13+00:00| exploited| https://t.me/NeKaspersky/777 2021-11-08 08:58:19+00:00| seen|...

PT-2022-2220

Name of the Vulnerable Software and Affected Versions Python versions prior to 3.10.0b1 Python versions prior to 3.9.5 Python versions prior to 3.8.11 Python versions prior to 3.7.11 Python versions prior to 3.6.14 Description The issue involves the urllib.parse module in Python, which does not...

CVE-2021-21220

creationtimestamp| type| source ---|---|--- 2021-04-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=568 2021-04-15 13:59:21+00:00| published-proof-of-concept| https://t.me/NeKaspersky/737 2021-04-16 11:01:26+00:00| published-proof-of-concept|...

CVE-2021-28310

creationtimestamp| type| source ---|---|--- 2021-04-13 19:42:23+00:00| exploited| https://t.me/ctinow/31796 2021-04-13 19:42:24+00:00| exploited| https://t.me/ctinow/31797 2021-04-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=567 2021-04-14 04:19:35+00:00| exploited|...

CVE-2021-33766

creationtimestamp| type| source ---|---|--- 2021-04-13 05:00:00+00:00| seen| https://msrc.microsoft.com/blog/2021/04/april-2021-update-tuesday-packages-now-available/ 2021-08-30 20:48:52+00:00| seen| https://t.me/cibsecurity/28015 2021-08-30 21:16:05+00:00| seen| https://t.me/cKure/6874 2021-08-3...

Price feed can be manipulated

Vulnerability details Anyone can trigger an update to the price feed by calling PriceAware.getCurrentPriceInPegtoken, inAmount, forceCurBlock=true. If the update window has passed, the price will be computed by simulating a Uniswap-like trade with the amounts. This simulation uses the reserves of...

UBUNTU-CVE-2021-28940

Because of a incorrect escaped exec command in MagpieRSS in 0.72 in the /extlib/Snoopy.class.inc file, it is possible to add a extra command to the curl binary. This creates an issue on the /scripts/magpiedebug.php and /scripts/magpiesimple.php page that if you send a specific https url in the RS...

CVE-2019-20464

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...

Default credentials

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...

CVE-2019-20464

CVE-2019-20464 affects the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317. The issue is that while the mobile-application streaming over UDP requires a password, other RTSP-based streaming services exposed by the device do not, allowing an unauthenticated attacker to access the video fe...

CVE-2019-20464

An issue was discovered on Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices. By default, a mobile application is used to stream over UDP. However, the device offers many more services that also enable streaming. Although the service used by the mobile application requires a...

PT-2021-9029 · Sannce · Sannce Smart Hd Wifi Security Camera

Name of the Vulnerable Software and Affected Versions: Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 affected versions not specified Description: An issue was discovered in the Sannce Smart HD Wifi Security Camera, where the device offers multiple streaming services. Although the servi...

de Consumentenbond Sannce Smart HD Baby Monitor 授权问题漏洞

The de Consumentenbond Sannce Smart HD Baby Monitor is a webcam from de Consumentenbond in the Netherlands. It provides monitoring functionality. A security vulnerability exists in the Sannce Smart HD Wifi Security Camera EAN 2 950004 595317 devices, which can be exploited by an attacker to gain...

zeek -- null-pointer dereference vulnerability

Jon Siwek of Corelight reports: Fix null-pointer dereference when encountering an invalid enum name in a config/input file that tries to read it into a setenum. For those that have such an input feed whose contents may come from external/remote sources, this is a potential DoS vulnerability...

CVE-2020-11261

creationtimestamp| type| source ---|---|--- 2021-03-23 06:29:47+00:00| exploited| https://t.me/cKure/4487 2021-03-23 10:14:49+00:00| exploited| https://t.me/truesecator/1547 2021-03-23 15:12:29+00:00| exploited| https://t.me/informationsecuritychannel/43681 2021-03-23 16:35:11+00:00| exploited|...

CVE-2021-24123

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...

CVE-2021-24123

Arbitrary file upload in the PowerPress WordPress plugin, versions before 8.3.8, did not verify some of the uploaded feed images such as the ones from Podcast Artwork section, allowing high privilege accounts admin+ being able to upload arbitrary files, such as php, leading to RCE...