13601 matches found
CVE-2020-26975
creationtimestamp| type| source ---|---|--- 2021-01-07 16:40:33+00:00| seen| https://t.me/cibsecurity/21738...
Sarenka - OSINT Tool - Data From Services Like Shodan, Censys Etc. In One Place
SARENKA is an Open Source Intelligence OSINT tool which helps you obtaining and understanding Attack Surface. The main goal is to gathering infromation from search engines for Internet-connected devices https://censys.io/ , https://www.shodan.io/. It scraps data about Common Vulnerabilities and...
CVE-2020-36172
creationtimestamp| type| source ---|---|--- 2021-01-06 18:39:23+00:00| seen| https://t.me/cibsecurity/21668...
CVE-2020-35493
creationtimestamp| type| source ---|---|--- 2021-01-04 19:10:48+00:00| seen| https://t.me/cibsecurity/21548...
CVE-2020-36112
creationtimestamp| type| source ---|---|--- 2021-01-04 19:10:47+00:00| seen| https://t.me/cibsecurity/21547 2024-11-04 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-04 2025-01-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...
DEBIAN-CVE-2020-35678
Autobahn|Python before 20.12.3 allows redirect header injection...
CVE-2020-35713
creationtimestamp| type| source ---|---|--- 2020-12-26 07:26:31+00:00| seen| https://t.me/cibsecurity/21314 2022-11-09 07:53:43+00:00| published-proof-of-concept| https://t.me/technicalprivatecat/310 2022-11-15 12:28:38+00:00| published-proof-of-concept| https://t.me/technicalprivatecat/308...
CVE-2020-35708
creationtimestamp| type| source ---|---|--- 2020-12-25 12:55:48+00:00| seen| https://t.me/cibsecurity/21299...
CVE-2020-28188
creationtimestamp| type| source ---|---|--- 2020-12-24 18:55:46+00:00| seen| https://t.me/cibsecurity/21288 2021-05-07 09:09:49+00:00| seen| https://t.me/pwnwikizhchannel/382 2023-06-09 23:11:26+00:00| seen|...
CVE-2020-9200
There has a CSV injection vulnerability in iManager NetEco 6000 versions V600R021C00. An attacker with common privilege may exploit this vulnerability through some operations to inject the CSV files. Due to insufficient input validation of some parameters, the attacker can exploit this...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
Virtuozzo 6 : python / python-devel / python-libs / python-test / etc (VZLSA-2019-1467)
An update for python is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
Security Bulletin: Apache Poi as used by IBMQRadar SIEM is vulnerable to information disclosure (CVE-2019-12415, CVE-2017-12626)
Summary Apache Poi as used by IBMQRadar SIEM is vulnerable to information disclosure Vulnerability Details CVEID: CVE-2019-12415 DESCRIPTION: Apache POI could allow a remote attacker to obtain sensitive information, caused by an XML external entity XXE error when processing XML data by tool...
Prototype Pollution in yowainwright/common-utilities
Description @common-utilities/merge-objects is vulnerable to Prototype Pollution. Proof of Concept 1. Create the following PoC file: // poc.js var a = require"@common-utilities/merge-objects" const payload = JSON.parse'"proto":"polluted":"Yes! Its Polluted"'; var obj = console.log"Before : " +...
Amazon Linux AMI : vim-common (ALAS-2020-1468) (deprecated)
The version of tested product installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the ALAS-2020-1468 advisory. - In Vim before 8.1.0881, users can circumvent the rvim restricted mode and execute arbitrary OS commands via scriptin...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...
new package: kmod-redhat-oracleasm
An update is available for kmod-redhat-oracleasm. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The kmod-redhat-oracleasm package contains the kernel driver...
Security Advisory - Use after Free Vulnerability in Huawei Product
There is a use after free vulnerability on Huawei smartphones. A module does not deal with specific message properly, which makes a function refer to memory after it has been freed. Attackers can exploit this vulnerability by running a crafted application with common privilege. This would...
CVE-2020-10770
creationtimestamp| type| source ---|---|--- 2020-12-15 22:40:56+00:00| seen| https://t.me/cibsecurity/20877 2023-09-29 12:42:29+00:00| seen| https://t.me/cibsecurity/71269 2025-02-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-05 2025-03-09 00:00:00+00:00| see...