Apache Struts 2 Demo Application Detected

The scanner has detected a publicly accessible Apache Struts 2 default demo application. Known and unknown vulnerabilities could be more easily exploited via this kind of application. No source data...

Fedora: Security Advisory for kernel (FEDORA-2021-6b0f287b8b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

WordPress Plugins Sensitive Files Detected

WordPress Plugins sensitive files have been detected on the target WordPress installation. This may present an attacker with sensitive information to mount further attacks, such as keys, credentials, internal host names, database tables & SQL queries, security logs, full path disclosures,...

CVE-2020-29552

creationtimestamp| type| source ---|---|--- 2020-12-23 19:25:33+00:00| seen| https://t.me/cibsecurity/21234 2024-11-14 06:07:40+00:00| seen| MISP/6a079369-d681-4501-8900-e3e90a37e1ae...

CVE-2020-20139

creationtimestamp| type| source ---|---|--- 2020-12-18 02:43:27+00:00| seen| https://t.me/cibsecurity/21046 2024-11-14 06:07:33+00:00| seen| MISP/8e734b77-0b7c-4b6a-b027-d18d4bcb48e8...

CVE-2020-17528

creationtimestamp| type| source ---|---|--- 2020-12-09 20:32:31+00:00| seen| https://t.me/cibsecurity/17988 2020-12-09 20:35:33+00:00| seen| https://t.me/cibsecurity/18008 2020-12-09 20:44:29+00:00| seen| https://t.me/cibsecurity/18027...

CVE-2020-25014

creationtimestamp| type| source ---|---|--- 2020-11-27 20:50:17+00:00| seen| https://t.me/cibsecurity/16897 2020-12-09 07:32:07+00:00| seen| https://t.me/cibsecurity/17442...

IT threat evolution Q3 2020. Non-mobile statistics

These statistics are based on detection verdicts of Kaspersky products received from users who consented to provide statistical data. Quarterly figures According to Kaspersky Security Network, in Q3: Kaspersky solutions blocked 1,416,295,227 attacks launched from online resources across the globe...

Cross-Site Scripting through Fluid view helper arguments

Three XSS vulnerabilities have been detected in Fluid:...

SSL/TLS Server Cipher Suite Preference Not Detected

The remote server is not configured with a SSL/TLS cipher suite preference list, making the cipher suite selection during the negotiation use the ordered list from the client. No source data...

cesdweb.aori.u-tokyo.ac.jp Cross Site Scripting vulnerability OBB-1295118

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

Microsoft Patch Tuesday August 2020: vulnerabilities with Detected Exploitation, useful for phishing and others

This time I would like to review not only the vulnerabilities that were published in the last August Microsoft Patch Tuesday, but also the CVEs that were published on other, not Patch Tuesday, days. Of course, if there are any. But lets start with the vulnerabilities that were presented on MS Pat...

CVE-2020-1571

creationtimestamp| type| source ---|---|--- 2020-08-15 15:55:01+00:00| published-proof-of-concept| https://t.me/cKure/1854 2020-08-16 13:56:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1591 2021-10-08 16:50:48+00:00| exploited|...

CVE-2020-8210

creationtimestamp| type| source ---|---|--- 2020-08-12 04:42:19+00:00| exploited| https://t.me/cKure/1810 2020-08-14 06:54:22+00:00| seen| https://t.me/informationsecuritychannel/39832...

Oracle WebLogic UDDI Explorer Detected

Oracle WebLogic UDDI Explorer allows authorized users to access and modify information about the web services published in the private WebLogic Server UDDI registries. The scanner has been able to detect that this service is exposed on the target web application and could be leveraged by an...

CVE-2019-13101

creationtimestamp| type| source ---|---|--- 2020-05-12 13:27:31+00:00| seen| https://t.me/Ninjutsuos/134 2020-05-12 13:27:34+00:00| seen| https://t.me/Ninjutsuos/739 2020-08-27 17:04:45+00:00| seen| https://t.me/Ninjutsuos/6563 2020-08-27 17:04:45+00:00| seen| https://t.me/Ninjutsuos/343 2025-08-...

tmsmind.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1137403 Security Researcher geeknik Helped patch 8696 vulnerabilities Received 8 Coordinated Disclosure badges Received 20 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting tmsmind.com website and it...

embarazo10.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1135852 Security Researcher ianf0ns3c Helped patch 27 vulnerabilities Received 1 Coordinated Disclosure badges Received 3 recommendations , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting embarazo10.com website and...

Dell EMC Data Protection Central Web Interface Detected

Binary data dellemcdataprotectioncentralwebdetect.nbin...

Laravel Log File Detected

Laravel log file /storage/logs/laravel.log has been detected on the target web application. This file may contain sensitive information about application and server configuration debug and stack trace and could help an attacker conduct further attacks. No source data...