Dahua Security NVR NVR50XX, NVR52XX, NVR54XX, and NVR58XX Improper Authentication (CVE-2017-9314)

Authentication vulnerability found in Dahua NVR models NVR50XX, NVR52XX, NVR54XX, NVR58XX with software before DHNVR5xxxEngPV2.616.0000.0.R.20171102. Attacker could exploit this vulnerability to gain access to additional operations by means of forging json message. This plugin only works with...

CVE-2025-213877

creationtimestamp| type| source ---|---|--- 2025-02-11 18:19:24+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0050...

India's RBI Introduces Exclusive "bank.in" Domain to Combat Digital Banking Fraud

India's central bank, the Reserve Bank of India RBI, said it's introducing an exclusive "bank.in" internet domain for banks in the country to combat digital financial fraud. "This initiative aims to reduce cyber security threats and malicious activities like phishing; and, streamline secure...

CVE-2021-30862

creationtimestamp| type| source ---|---|--- 2025-02-05 10:00:06+00:00| published-proof-of-concept| Telegram/tROXu-VoDvIGOcLcpszl-EBZ8Ot5WUMl6WIZHqWkyLe8WA0 2025-02-15 21:02:35+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3liami6bo5x2a 2025-06-11 02:18:04+00:00|...

CVE-2021-31324

creationtimestamp| type| source ---|---|--- 2025-01-16 09:29:58+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-31324.yaml 2025-01-20 21:01:59+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lg7ad57fo42d...

CVE-2025-22751

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in farinspace Partners partners allows Reflected XSS.This issue affects Partners: from n/a through = 0.2.0...

CVE-2024-11848

creationtimestamp| type| source ---|---|--- 2025-01-15 12:16:27+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfrqmsfhfn2s 2025-01-15 12:22:07+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/1736 2025-01-15 12:47:44+00:00| seen|...

CVE-2025-213447

creationtimestamp| type| source ---|---|--- 2025-01-14 18:15:33+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0012...

CVE-2025-213617

creationtimestamp| type| source ---|---|--- 2025-01-14 18:15:33+00:00| seen| https://advisories.ncsc.nl/advisory?id=NCSC-2025-0012...

CVE-2024-39789

creationtimestamp| type| source ---|---|--- 2025-01-14 15:18:37+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpkdnlxjl2b 2025-01-14 15:50:00+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/113827499186971506 2025-01-14 17:20:32+00:00| seen|...

PT-2025-1168 · Microsoft · Windows

The Windows Telephony Service is affected by a remote code execution issue, which can be exploited by attackers to execute arbitrary code and impact the system. This issue is critical and can have significant consequences if exploited. The vulnerable software is Windows, but no specific versions...

PT-2025-4217 · Microsoft · Windows

The Microsoft Windows Installer Service is affected by a local privilege escalation issue, which can be exploited by attackers to gain elevated privileges on a system. This issue is related to a link following flaw in the Windows Installer Service. The vulnerable software is Microsoft Windows. An...

CISA: STS Scenarios Workshop 1 Scenario 4 New Wave of Cooperation

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: Strategies for Effectively Blending Cyber and Physical Security within Critical Infrastructure

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CISA: DHS OSAI-OBP Partnership Fact Sheet

System About Files News Vote Help | Services API Advertise Contact | Account Join Login ---|---|---...

CVE-2024-43661

creationtimestamp| type| source ---|---|--- 2025-01-09 08:16:55+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfcagxwjoi25 2025-01-09 08:47:56+00:00| seen| https://infosec.exchange/users/cve/statuses/113797527995004670 2025-01-09 10:13:50+00:00| seen|...

Blurring the Lines: How Nation-States and Organized Cybercriminals Are Becoming Alike

Blurring the Lines: How Nation-States and Organized Cybercriminals Are Becoming Alike By Tomer Shloman · January 7, 2025 The distinction between nation-state actors and organized cybercriminals is becoming increasingly blurred in our rapidly evolving cyber landscape. Historically, these groups ha...

2024 in AI: It’s changed the world, but it’s not all good

A popular saying is: “To err is human, but to really foul things up you need a computer.” Even though the saying is older than you might think, it did not come about earlier than the concept of artificial intelligence AI. And as long as we have been waiting for AI technology to become commonplace...

CVE-2024-52535

creationtimestamp| type| source ---|---|--- 2024-12-25 15:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3le5atoyh4j25 2024-12-25 17:09:26+00:00| seen| https://t.me/cvedetector/13626 2024-12-26 13:58:43+00:00| seen|...

5 Practical Techniques for Effective Cyber Threat Hunting

Addressing cyber threats before they have a chance to strike or inflict serious damage is by far the best security approach any company can embrace. Achieving this takes a lot of research and proactive threat hunting. The problem here is that it is easy to get stuck in endless arrays of data and...