Facebook bug changed 14 million users' default privacy settings to public

Facebook admits as many as 14 millions of its users who thought they're sharing content privately with only friends may have inadvertently shared their posts with everyone because of a software bug. Facebook said in front of Congress in March over the Cambridge Analytica scandal that "every piece...

CVE-2015-3760

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/osx/local/dyldprinttofileroot.rb 2019-03-13 07:34:18+00:00| exploited| https://t.me/informationsecuritychannel/25462 2025-02-06 03:13:42+00:00|...

CVE-2017-18369

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/trueonlinebillion5200wrce.rb 2019-05-02 20:26:38+00:00| seen| https://t.me/cibsecurity/4082 2025-02-06 03:13:43+00:00| seen|...

CVE-2005-3498

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/options.rb 2025-02-06 03:13:38+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:13+00:00| seen|...

CVE-2011-2750

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/admin/http/novellfilereporterfiledelete.rb 2025-02-06 03:13:40+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:56+00:00...

CVE-2015-5958

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/phpfilemanagerrce.rb 2025-02-06 03:13:42+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:41+00:00| seen|...

CVE-2014-3888

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/scada/yokogawabkfsimvhfd.rb 2025-02-06 03:13:41+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:09:28+00:00| seen|...

CVE-2009-2335

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wordpressloginenum.rb 2025-02-06 03:13:39+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:08:38+00:00| seen|...

CVE-2010-1429

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/jbossvulnscan.rb 2018-05-29 15:50:33+00:00| seen|...

Malicious Package

Overview Version 0.3.0 of react-dates-sc contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.0 of this module is found...

GHSA-446M-MV8F-Q348 Regular Expression Denial of Service in moment

Affected versions of moment are vulnerable to a low severity regular expression denial of service when parsing dates as strings. Recommendation Update to version 2.19.3 or later...

CVE-2018-6892

creationtimestamp| type| source ---|---|--- 2018-02-13 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44027 2018-02-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44175 2018-05-29 15:50:33+00:00| seen|...

CVE-2017-18046

creationtimestamp| type| source ---|---|--- 2018-02-11 13:20:49+00:00| seen| MISP/5a8042be-fe8c-4071-a140-414502de0b81 2025-03-15 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-03-15 2026-03-23 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities -...

Qualys Cloud Suite 8.12 New Features

This new release of the Qualys Cloud Suite, version 8.12 adds new reporting options for the PC Report, allowing you to include new summaries in the remediation section of the report for control failures. Feature Highlights Qualys Policy Compliance PC/SCAP PC Report: Failure Summary Section – You...

CVE-2018-3810

creationtimestamp| type| source ---|---|--- 2018-01-03 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43420 2021-07-30 10:09:34+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/207 2024-06-22 09:33:24+00:00| published-proof-of-concept|...

calendarioslaborales.com XSS vulnerability

Open Bug Bounty ID: OBB-451550 Description| Value ---|--- Affected Website:| calendarioslaborales.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Preventio...

magpul.com XSS vulnerability

Open Bug Bounty ID: OBB-448067 Description| Value ---|--- Affected Website:| magpul.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat Sheet...

CVE-2017-5817

creationtimestamp| type| source ---|---|--- 2017-11-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43195 2018-01-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/43492 2018-05-29 15:50:33+00:00| seen|...

ubuy.qa XSS vulnerability

Vulnerable URL: https://www.ubuy.qa/en/search/?cat=name==US-store='-confirm/OPENBUGBOUNTY/-' Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 170335 VIP website status:| No Coordinated Disclosure Timeline:...

linkomanija.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-413767 Description| Value ---|--- Affected Website:| linkomanija.net Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Remediation Guide:| OWASP Open Redirect Cheat Sheet...