CVE-2022-34709

creationtimestamp| type| source ---|---|--- 2022-08-10 00:31:13+00:00| seen| https://t.me/cibsecurity/47827 2022-08-16 00:38:19+00:00| seen| https://t.me/cibsecurity/48182 2022-09-14 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/6796 2022-10-04 19:24:05+00:00|...

CVE-2022-35783

creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...

CVE-2022-35802

creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...

CVE-2022-35801

creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...

CVE-2022-35787

creationtimestamp| type| source ---|---|--- 2022-08-10 00:25:03+00:00| seen| https://t.me/cibsecurity/47801 2022-08-10 00:31:03+00:00| seen| https://t.me/cibsecurity/47820...

CVE-2022-37393

creationtimestamp| type| source ---|---|--- 2022-08-09 16:39:19+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/zimbraslapperprivesc.rb 2022-08-17 14:35:04+00:00| published-proof-of-concept| Telegram/RSu8n7LvnC9xeCRU6JhJsfiUmeq682EnNiL5z7-ptljY...

MrKaplan - Tool Aimed To Help Red Teamers To Stay Hidden By Clearing Evidence Of Execution

MrKaplan is a tool aimed to help red teamers to stay hidden by clearing evidence of execution. It works by saving information such as the time it ran, snapshot of files and associate each evidence to the related user. This tool is inspired by MoonWalk, a similar tool for Unix machines. You can re...

CVE-2022-31660

creationtimestamp| type| source ---|---|--- 2022-08-03 22:11:28+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/local/vmwareworkspaceoneaccesscertproxylpe.rb 2022-08-05 20:20:50+00:00| seen| https://t.me/cibsecurity/47627 2022-08-13 21:00:43+00:00|...

LofyLife: malicious npm packages steal Discord tokens and bank card data

On July 26, using the internal automated system for monitoring open-source repositories, we identified four suspicious packages in the Node Package Manager npm repository. All these packages contained highly obfuscated malicious Python and JavaScript code. We dubbed this malicious campaign...

geruestbau-toelke.de Cross Site Scripting vulnerability OBB-2803090

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2022-30526

creationtimestamp| type| source ---|---|--- 2022-07-19 12:40:30+00:00| seen| https://t.me/cibsecurity/46528 2022-07-29 11:01:17+00:00| seen| https://t.me/poxek/2124 2022-08-31 13:26:23+00:00| seen|...

CLSA-2022-1658171011 Fixed CVE-2016-10012 in openssh

CVE-2016-10012: re-remove pre-authentication compression and potentially unsecure shared memory manager used by zlib - Move not yet valid timestamps for certs to 2030-2040 range, make sure all tests are passed and add %check unset DISPLAY section...

CLSA-2022-1657816793 Fixed CVEs in openssl: CVE-2022-1292, CVE-2022-2068

CVE-2022-1292: crehash: Do not use shell to invoke openssl to prevent command injection - CVE-2022-2068: crehash: Fix file operations to prevent command injection - Update expired SCT certificates...

CVE-2022-22047

creationtimestamp| type| source ---|---|--- 2022-07-12 20:46:06+00:00| seen| https://t.me/truesecator/3164 2022-07-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=833 2022-07-14 06:07:21+00:00| published-proof-of-concept| https://t.me/cKure/9958 2022-07-17 08:53:31+00:0...

CVE-2022-31137

creationtimestamp| type| source ---|---|--- 2022-07-09 00:22:27+00:00| seen| https://t.me/cibsecurity/45849 2022-07-25 21:30:57+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/roxywiexec.rb 2022-12-26 15:30:06+00:00| seen|...

CVE-2022-31129

creationtimestamp| type| source ---|---|--- 2022-07-06 22:14:40+00:00| seen| https://t.me/cibsecurity/45699 2023-01-05 00:18:24+00:00| seen| https://t.me/cibsecurity/55920 2023-02-16 11:40:08+00:00| seen| https://t.me/truesecator/4074 2024-10-22 18:30:05+00:00| seen| https://t.me/truesecator/6347...

CVE-2022-34877

creationtimestamp| type| source ---|---|--- 2022-07-05 20:13:34+00:00| seen| https://t.me/cibsecurity/45606 2022-09-22 15:12:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/vicidialmultiplesqli.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2022-2294

creationtimestamp| type| source ---|---|--- 2022-07-05 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=828 2022-07-05 04:57:49+00:00| exploited| https://t.me/thehackernews/2341 2022-07-05 06:27:47+00:00| exploited| https://t.me/androidMalware/1587 2022-07-05 09:35:16+00:00...

vollfrei.de Cross Site Scripting vulnerability OBB-2717299

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2020-9907

creationtimestamp| type| source ---|---|--- 2022-06-24 19:34:31+00:00| seen| https://t.me/truesecator/3099 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-04 09:32:43+00:00| seen| https://t.me/arpsyndicate/1168 2024-12-24 20:32:32+00:00| seen|...