5839 matches found
CVE-2022-3365
creationtimestamp| type| source ---|---|--- 2022-10-04 17:04:11+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/remotemouserce.rb 2025-01-28 00:32:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113903163811923872 2025-01-28...
25 Years of Nmap: Happy Scan-iversary!
I didn't know it then, but on September 1, 1997, my life changed. That was the day that Fyodor's Nmap was first released to the world, courtesy of the venerable Phrack magazine. By the way, check out our recent podcast with Fyodor himself if you haven’t yet. At the time, I had just started my...
CVE-2021-4217
creationtimestamp| type| source ---|---|--- 2022-08-24 20:23:07+00:00| seen| https://t.me/cibsecurity/48671 2023-11-15 16:53:03+00:00| published-proof-of-concept| https://t.me/BABATATASASA/5977 2025-07-08 07:10:42+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115...
Imperva Earns Three Cyber Defense Global InfoSec Awards for 2022
The Cyber Defense Awards in conjunction with Cyber Defense Magazine recently announced the winners of their prestigious annual Global Infosec Awards for 2022. We are proud to say that Imperva earned three Global Infosec Awards; as Most Innovative for Application Security, Cutting Edge for Cloud...
CVE-2021-45461
creationtimestamp| type| source ---|---|--- 2022-07-18 20:36:45+00:00| exploited| https://t.me/truesecator/3189 2026-01-29 14:36:26+00:00| seen| https://threatintel.cc/2026/01/29/unveiling-the-weaponized-web-shell.html 2026-01-29 14:42:05+00:00| seen| MISP/30dbf7d0-e101-412c-b155-26c5c47a7558...
Get to Know Fred House
Meet Fred House Senior Director, Product Detection and Research By Trellix · July 12, 2022 This blog was written by Michael Alicea At Trellix, we celebrate and champion our people. For a long time now, I’ve been looking forward to connecting with Fred House, a Senior Director at Trellix Threat La...
CVE-2022-25845
creationtimestamp| type| source ---|---|--- 2022-06-12 11:50:33+00:00| seen| https://t.me/cibsecurity/44225 2022-06-16 13:08:32+00:00| seen| https://t.me/thehackernews/2289 2022-06-17 10:33:58+00:00| seen| https://t.me/itsecnews/841 2022-06-17 14:20:30+00:00| published-proof-of-concept|...
CVE-2022-30075
creationtimestamp| type| source ---|---|--- 2022-06-07 23:29:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/2463 2022-06-08 10:22:55+00:00| published-proof-of-concept| https://t.me/proxybar/866 2022-06-08 10:34:14+00:00| published-proof-of-concept|...
Exploit for Expression Language Injection in Atlassian Confluence_Data_Center
Exploit for CVE-2022-26134: Confluence Pre-Auth Remote Code Ex...
Skeletons in the Closet: Security 101 Takes a Backseat to 0-days
Rarely a month goes by without the infosec industry being plagued by a new zero-day apocalypse. Most recently in December 2021, the world was swept by a series of vulnerabilities in Log4J – a popular logging system used by thousands of systems around the world. While writing this article, the...
Cyber Security WEBINAR — How to Ace Your InfoSec Board Deck
Communication is a vital skill for any leader at an organization, regardless of seniority. For security leaders, this goes double. Communicating clearly works on multiple levels. On the one hand, security leaders and CISOs must be able to communicate strategies clearly – instructions, incident...
Information disclosure
Bluedon Information Security Technologies Co.,Ltd Internet Access Detector v1.0 was discovered to contain an information leak which allows attackers to access the contents of the password file via unspecified vectors...
Information disclosure
A missing permission check in Jenkins Extended Choice Parameter Plugin 346.vd87693c5a86c and earlier allows attackers with Overall/Read permission to connect to an attacker-specified URL...
Let’s Encrypt to revoke “mis-issued” certificates
If you use a Let’s Encrypt SSL/TLS certificate, you may wish to check your account over the coming days. Revocation is coming, and you’ve only got until tomorrow to figure things out. What’s the deal with free certificates? If you’re running a website, you want to make sure that it’s HTTPs. It...
CVE-2022-20685
creationtimestamp| type| source ---|---|--- 2022-01-21 14:22:39+00:00| seen| https://t.me/truesecator/2544 2022-04-21 10:06:40+00:00| seen| https://t.me/ctinow/50589 2024-11-15 15:38:30+00:00| seen| https://infosec.exchange/users/cve/statuses/113487715368664115...
Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
vuln4japi A vulnerable Java based REST API for demonstrating C...
CVE-2021-39637
The CVE-2021-39637 entry describes an out-of-bounds read in CreateDeviceInfo of trusty_remote_provisioning_context.cpp due to a missing bounds check. This vulnerability could allow local information disclosure with system privileges required, and is exploitable without user interaction. Affected ...
Not with a Bang but a Whisper: The Shift to Stealthy C2
As defensive tools have evolved to detect more and more traditional attack techniques, it should come as no surprise that attackers have shifted tactics. This ever-evolving arms race between offensive security toolsets, bespoke advanced persistent threat APT malware and the billion-dollar infosec...
Join us at InfoSec Jupyterthon 2021
We’re excited to invite our community of infosec analysts and engineers to the second annual InfoSec Jupyterthon taking place on December 2-3, 2021. This is an online event organized by our friends in the Open Threat Research Forge, together with folks from the Microsoft Threat Intelligence Cente...
Join us at InfoSec Jupyterthon 2021
We’re excited to invite our community of infosec analysts and engineers to the second annual InfoSec Jupyterthon taking place on December 2-3, 2021. This is an online event organized by our friends in the Open Threat Research Forge, together with folks from the Microsoft Threat Intelligence Cente...