741 matches found
Concrete CMS Login Panel Detected
Concrete CMS Login Panel has been detected on the target web application. This may present an attacker with an exploit vector which could be leveraged using other techniques, such as a Brute-Force or Dictionary Attack, allowing an attacker to gain access to administrative functionality. No source...
Client Certificate Authentication Detected
This is an informational notice that the scanner was able to detect that the target requires a client certificate authentication. No source data...
kernel: igb: Fix igb_down hung on surprise removal
In the Linux kernel, the following vulnerability has been resolved: igb: Fix igbdown hung on surprise removal In a setup where a Thunderbolt hub connects to Ethernet and a display through USB Type-C, users may experience a hung task timeout when they remove the cable between the PC and the...
casasentampa.com Cross Site Scripting vulnerability OBB-3919564
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
UBUNTU-CVE-2024-26776
In the Linux kernel, the following vulnerability has been resolved: spi: hisi-sfc-v3xx: Return IRQNONE if no interrupts were detected Return IRQNONE from the interrupt handler when no interrupt was detected. Because an empty interrupt will cause a null pointer error: Unable to handle kernel NULL...
Lazarus Hackers Exploited Windows Kernel Flaw as Zero-Day in Recent Attacks
The notorious Lazarus Group actors exploited a recently patched privilege escalation flaw in the Windows Kernel as a zero-day to obtain kernel-level access and disable security software on compromised hosts. The vulnerability in question is CVE-2024-21338 CVSS score: 7.8, which can permit an...
CVE-2021-46931
In the Linux kernel, the following vulnerability has been resolved: net/mlx5e: Wrap the tx reporter dump callback to extract the sq Function mlx5etxreporterdumpsq casts its void argument to struct mlx5etxqsq , but in TX-timeout-recovery flow the argument is actually of type struct mlx5etxtimeoutc...
Meta Data and Taxonomies Filter Plugin for WordPress < 1.3.1 Cross-Site Scripting
The WordPress Meta Data and Taxonomies Filter Plugin installed on the remote host is affected by an authenticated reflected Cross-Site Scripting XSS due to an incorrect usage of the core function eschtml. Note that the scanner has not tested for these issues but has instead relied only on the...
Critical Exchange Server Flaw (CVE-2024-21410) Under Active Exploitation
Microsoft on Wednesday acknowledged that a newly disclosed critical security flaw in Exchange Server has been actively exploited in the wild, a day after it released fixes for the vulnerability as part of its Patch Tuesday updates. Tracked as CVE-2024-21410 CVSS score: 9.8, the issue has been...
Microsoft Entra ID Detected
This is an informational notice that the scanner was able to detect that the target application is using Microsoft Entra ID. No source data...
Google Cloud Platform Detected
This is an informational notice that the scanner was able to detect that the target application is using an Google Cloud cloud service. No source data...
Amazon Web Services Detected
This is an informational notice that the scanner was able to detect that the target application is using an Amazon Web Services cloud service. No source data...
CVE-2023-38019
creationtimestamp| type| source ---|---|--- 2024-02-02 05:21:33+00:00| seen| https://t.me/ctinow/177919 2024-02-24 13:11:35+00:00| seen| https://t.me/ctinow/192573...
gRPC Detected
This is an informational notice that the scanner was able to detect a gRPC request/response. No source data...
SOAP API Detected
This is an informational notice that the scanner was able to detect a SOAP API. No source data...
Web Server Configuration File Detected
A web server configuration file has been detected on the target host. This may expose privileged information or configurations to a malicious actor. No source data...
Web Services Description Language (WSDL) File Detected
A Web Services Description Language WSDL file has been detected on this url. No source data...
CVE-2024-23892
creationtimestamp| type| source ---|---|--- 2024-01-26 12:21:50+00:00| seen| https://t.me/ctinow/174185 2024-02-19 16:56:19+00:00| seen| https://t.me/ctinow/187815...
YahooPOPs 1.6 Denial Of Service
use IO::Socket; sub intro print q ,--, / /| ,;' , // // '--; ' \ | ^ ^ ^ + YahooPOPs 1.6 - SMTP - Denial of Service DoS Coded by Fernando Mengali @ e-mail: [email protected] intro; if !$ARGV0 print "\nUsage: $0 \n"; exit0; my $host = $ARGV0; my $username = $ARGV1; my $password = $ARGV2;...