CVE-2019-14062

creationtimestamp| type| source ---|---|--- 2020-06-25 08:55:30+00:00| seen| https://t.me/cibsecurity/13041 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-14094

creationtimestamp| type| source ---|---|--- 2020-06-25 08:55:21+00:00| seen| https://t.me/cibsecurity/13035 2026-01-20 08:04:57+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

Speaking at security events

I don't claim to be an amazing speaker; I'm still in awe of great infosec speakers such as Mikko Hypponen, Charlie Miller, Mudge and many others. However, I do keep being invited back to speak at events, so I guess I'm doing something right. Sometimes it's a minor slot at a big event, but the...

Remote spring: the rise of RDP bruteforce attacks

With the spread of COVID-19, organizations worldwide have introduced remote working, which is having a direct impact on cybersecurity and the threat landscape. Alongside the higher volume of corporate traffic, the use of third-party services for data exchange, and employees working on home...

CVE-2019-10609

creationtimestamp| type| source ---|---|--- 2020-04-16 17:02:25+00:00| seen| https://t.me/cibsecurity/11335 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-14007

creationtimestamp| type| source ---|---|--- 2020-04-16 16:02:04+00:00| seen| https://t.me/cibsecurity/11324 2026-01-20 08:05:02+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2018-5802

An out-of-bounds read flaw was found in the way LibRaw processed images. An attacker could potentially use this flaw to crash applications using LibRaw by tricking them into processing crafted images...

Managing Team Burn Out

According to the World Health Organization: “Burn-out is a syndrome conceptualized as resulting from chronic workplace stress that has not been successfully managed. It is characterized by three dimensions: feelings of energy depletion or exhaustion increased mental distance from one’s job, or...

Redis - Replication Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Redis Replication Code Execution', 'Description' = %q This module can be used to leverage the extension functionality added since Redis 4.0.0 to...

CVE-2019-20633

creationtimestamp| type| source ---|---|--- 2020-03-30 09:47:43+00:00| seen| https://t.me/cibsecurity/10818 2025-07-08 07:10:41+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2018-6952

creationtimestamp| type| source ---|---|--- 2020-03-30 09:47:43+00:00| seen| https://t.me/cibsecurity/10818 2020-03-30 10:20:16+00:00| seen| https://t.me/VulnerabilityNews/13420 2025-07-08 07:10:39+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08...

Securing the MSP: best practices for vetting cybersecurity vendors

Ironically, to keep costs low for their enterprise and mid-market clients, managed service providers MSPs are some of the most reliant on third-party vendors—including those providing security. While this is generally not an indication of dysfunction or vulnerability, the responsible MSP will be...

CVE-2019-10552

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:08+00:00| seen| https://t.me/cibsecurity/10307 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-10553

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:07+00:00| seen| https://t.me/cibsecurity/10306 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-10554

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:06+00:00| seen| https://t.me/cibsecurity/10305 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

vitalsupport.cz Cross Site Scripting vulnerability

Security Researcher passc0de Helped patch 22 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting vitalsupport.cz website and its users. Following coordinated and responsible...

CVE-2019-20288

This CVE entry is rejected/not used and does not represent an active vulnerability.

Podcast: The Roadblocks and Opportunities For Women in Cybersecurity

In 2019, diversity in the cybersecurity was thrust to the forefront with recognition from both vendors and experts. The tech industry is facing challenges around diversity in general, but women are particularly underrepresented. And with an estimated 3.5 million jobs are expected to remain unfill...

Top Zero Days, Data Breaches and Security Stories of 2019: News Wrap

From data breaches and the ransomware epidemic to new regulation and an outcry around data privacy, 2019 has been a wild ride for the infosec community. Threatpost breaks down the top news stories, trends and topics for this year. Listen to the full podcast or download direct. For a lightly-edite...

CVE-2019-1374

An information disclosure vulnerability exists in how Windows Error Reporting (WER) handles objects in memory. Multiple sources (NVD and Red Hat/SUSE advisories) identify it as a Windows in-memory handling issue that can expose sensitive information to an attacker with local access and user inter...