EUVD-2021-12399

Malware in sbrugna...

Security Updates for Microsoft Excel Products C2R (November 2021)

The Microsoft Excel Products are missing security updates. It is, therefore, affected by multiple vulnerabilities: - A security feature bypass vulnerability exists. An attacker can exploit this and bypass the security feature and perform unauthorized actions compromising the integrity of the...

Rebirth of Emotet: New Features of the Botnet and How to Detect it

One of the most dangerous and infamous threats is back again. In January 2021, global officials took down the botnet. Law enforcement sent a destructive update to the Emotet's executables. And it looked like the end of the trojan's story. But the malware never ceased to surprise. November 2021, i...

Azure File Sync Agent v14.1 Release – November 2021 (KB5001873)

Update for Azure File Sync agent version 14.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Azure File Sync Agent v14.1 Release – November 2021 (KB5001873)

Update for Azure File Sync agent version 14.1.0.0. For more details, see the associated Microsoft Knowledge Base article...

Security Updates for Exchange (November 2021) (Remote)

The Microsoft Exchange Server installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A session spoofing vulnerability exists. An attacker can exploit this to perform actions with the privileges of another user. CVE-2021-41349,...

The Bug Report November 2021 Edition

The Bug Report — November 2021 Edition By Mark Bereza · November 30, 2021 Your Cybersecurity Comic Relief CVE-2021-20322: Of all the words of mice and men, the saddest are, “it was DNS again.” Why am I here? For all our newcomers, welcome to the Advanced Threat Research team’s monthly bug report ...

CVE-2021-42364

creationtimestamp| type| source ---|---|--- 2021-11-29 22:33:44+00:00| seen| https://t.me/cibsecurity/33065...

webmail.alestraune.net.mx Cross Site Scripting vulnerability OBB-2287985

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

animalshelter.org Cross Site Scripting vulnerability OBB-2286893

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

moodle.tatc.ac.th Cross Site Scripting vulnerability OBB-2286879

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

inmobiliariacostaazul.com Cross Site Scripting vulnerability OBB-2285144

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

imagesretailme.com Cross Site Scripting vulnerability OBB-2284748

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

th.1lib.limited Cross Site Scripting vulnerability OBB-2284707

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

zaiger.ru Cross Site Scripting vulnerability OBB-2284675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

helipartool.com Cross Site Scripting vulnerability OBB-2284558

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-2442

creationtimestamp| type| source ---|---|--- 2021-11-25 10:36:56+00:00| seen| https://t.me/BlueRedTeam/1224 2021-11-25 11:00:21+00:00| seen| https://t.me/CyberSecurityTechnologies/4828...

ickamsterdam.com Cross Site Scripting vulnerability OBB-2283275

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

fitnesstopractise.cardiff.ac.uk Cross Site Scripting vulnerability OBB-2282492

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

cyprus.gov.cy Cross Site Scripting vulnerability OBB-2280680

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...