The Internet did my homework

By Jaeson Schultz and Matt Valites. As students return to school for in-person and virtual learning, Cisco Talos discovered an increase in DNS requests coming into Umbrella resolving domains we classify as "academic fraud." Data from Pew Research on back-to-school dates aligns with the growth we...

Arbitrary Code Execution

libxml2.so is vulnerable to arbitrary code execution. An integer overflow occurs when comparing schema dates. This could potentially result in arbitrary code execution on the host OS...

naplessimplyexciting.com Cross Site Scripting vulnerability OBB-1301704

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Malicious Package

react-dates-sc is a malicious package. The library contains code that when executed in the browser, would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl=...

GHSA-5645-GC7H-98H8 Malicious Package in react-dates-sc

Version 0.3.0 of react-dates-sc contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.0 of this module is found installed you...

Malicious Package in react-dates-sc

Version 0.3.0 of react-dates-sc contained malicious code. The code when executed in the browser would enumerate password, cvc, cardnumber fields from forms and send the extracted values to https://js-metrics.com/minjs.php?pl= Recommendation If version 0.3.0 of this module is found installed you...

CVE-2020-16138

creationtimestamp| type| source ---|---|--- 2020-08-11 11:07:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1569 2020-08-21 20:54:51+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/dos/cisco/cisco7937gdos.py 2025-02-06...

CVE-2020-13382

creationtimestamp| type| source ---|---|--- 2020-07-04 15:40:00+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/webapp/opensischainexec.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:23+00:00| seen|...

CVE-2020-10177

creationtimestamp| type| source ---|---|--- 2020-06-25 22:55:23+00:00| seen| https://t.me/cibsecurity/13070 2020-07-01 11:55:29+00:00| seen| https://t.me/cibsecurity/13160 2020-07-01 14:55:23+00:00| seen| https://t.me/cibsecurity/13171...

CVE-2020-12004

creationtimestamp| type| source ---|---|--- 2020-06-25 16:25:27+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/scada/inductiveignitionrce.rb 2024-10-31 02:05:38+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1355 2025-02-0...

CVE-2020-7356

creationtimestamp| type| source ---|---|--- 2020-06-18 15:43:56+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/cayinxpostsqlrce.rb 2025-02-06 03:13:44+00:00| seen| MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd 2025-02-23 04:10:30+00:00| seen|...

CVE-2020-0543

creationtimestamp| type| source ---|---|--- 2020-06-10 15:05:51+00:00| seen| https://t.me/thehackernews/726 2020-07-20 08:49:20+00:00| seen| https://t.me/SecLabNews/7808 2024-10-28 15:29:36+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1245...

CVE-2020-6081

creationtimestamp| type| source ---|---|--- 2020-05-08 11:40:02+00:00| seen| https://t.me/SecLabNews/7540 2024-10-23 16:33:08+00:00| seen| https://t.me/CyberSecurityTechnologies/1089...

CVE-2020-8899

creationtimestamp| type| source ---|---|--- 2020-05-07 05:27:01+00:00| seen| https://t.me/alexmakus/3453 2020-05-07 08:40:02+00:00| seen| https://t.me/SecLabNews/7526 2020-05-08 16:09:00+00:00| seen| https://t.me/N0iSeBit/453 2021-01-11 13:47:06+00:00| exploited| https://t.me/androidMalware/935...

Qualys Cloud Platform 3.0 New Features

This release of the Qualys Cloud Platform version 3.0 includes updates and new features for Vulnerability Management, highlights as follows. Vulnerability Management The following features apply to all subscriptions that are currently using the Vulnerability Management Dashboard beta. With this...

Security Bulletin: IBM Integration Bus is affected by Apache Tomcat vulnerability (CVE-2014-0230)

Summary IBM Integration Bus is affected by Apache Tomcat vulnerability. Vulnerability Details CVEID: CVE-2014-0230 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by missing limitations on request body size. By sending a specially crafted request to the server, an attacker...

Security Bulletin: IBM Integration Bus and WebSphere Message Broker SOAP FLOWS are vulnerable to XML external entity attack (CVE-2016-9706)

Summary IBM Integration Bus and WebSphere Message Broker SOAP FLOWS are vulnerable to XML external entity attack. Vulnerability Details CVEID: CVE-2016-9706 DESCRIPTION: IBM Integration Bus and WebSphere Message Broker SOAP FLOWS are vulnerable to a denial of service attack, caused by an XML...

Security Bulletin: Integration server HTTP listener exposes stack trace in WebSphere Message Broker and IBM Integration Bus

Summary Integration server HTTP listener exposes stack trace in WebSphere Message Broker and IBM Integration Bus Vulnerability Details CVEID: CVE-2016-2961 DESCRIPTION: IBM Integration Bus uses the Apache Tomcat server for serving HTTP requests for the HTTPInput and SOAPInput nodes. A vulnerabili...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect WebSphere Message Broker and IBM Integration Bus (CVE-2016-3485)

Summary Multiple security vulnerabilities exist in the IBM® Runtime Environment Java™ Technology Edition 6.0.16.26 and earlier used by WebSphere Message Broker, and the IBM® Runtime Environment Java™ Technology Edition 7.0.9.40 and earlier used by WebSphere Message Broker and IBM Integration Bus,...

CVE-2019-18988

creationtimestamp| type| source ---|---|--- 2020-02-07 15:33:38+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/post/windows/gather/credentials/teamviewerpasswords.rb 2020-02-21 03:55:25+00:00| exploited| https://t.me/informationsecuritychannel/35219 2021-11-08...