CVE-2021-21985

creationtimestamp| type| source ---|---|--- 2021-05-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=591 2021-05-26 07:59:34+00:00| seen| https://t.me/thehackernews/1242 2021-05-26 11:23:27+00:00| seen| https://t.me/truesecator/1751 2021-05-26 19:05:27+00:00| seen|...

Google Chrome < 91.0.4472.77 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 91.0.4472.77. It is, therefore, affected by multiple vulnerabilities as referenced in the 202105stable-channel-update-for-desktop25 advisory. - Insufficient policy enforcement in content security policy in Google Chrome...

TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack

We have found and confirmed close to 50,000 IPs compromised by this attack perpetrated by TeamTNT across multiple clusters. Several IPs were repeatedly exploited during the timeframe of the episode, occurring between March and May...

Project Worlds Online Examination System Cross-Site Scripting Vulnerability

Project Worlds Online Examination System is an online examination system. version 1.0 of ProjectWorlds College Management System is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript code to execute and steal user credentials...

CVE-2021-28798

creationtimestamp| type| source ---|---|--- 2021-05-23 16:44:35+00:00| exploited| https://t.me/CyberGovIL/1261...

Android Issues Patches for 4 New Zero-Day Bugs Exploited in the Wild

Google on Wednesday updated its May 2021 Android Security Bulletin to disclose that four of the security vulnerabilities that were patched earlier this month by Arm and Qualcomm may have been exploited in the wild as zero-days. "There are indications that CVE-2021-1905, CVE-2021-1906,...

CVE-2020-36195

creationtimestamp| type| source ---|---|--- 2021-05-18 15:10:01+00:00| exploited| https://t.me/deeptoweb/1676...

Liferay Portal and Liferay DXP have unspecified vulnerabilities (CNVD-2021-62988)

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...

Debian: Security Advisory (DLA-2663-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for chromium (FEDORA-2021-35d2bb4627)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-31933

creationtimestamp| type| source ---|---|--- 2021-05-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49867 2021-05-15 00:46:44+00:00| seen| https://t.me/pwnwikizhchannel/425...

Apple’s ‘Find My’ Network Exploited via Bluetooth

Apple’s “Find My device” function for helping people track their iOS and macOS devices can be exploited to transfer data to and from random passing devices without using the internet, a security researcher has demonstrated. Security researcher Fabian Bräunlein with Positive Security developed a...

Cisco HyperFlex HX Command Injection Vulnerabilities (cisco-sa-hyperflex-rce-TjjNrkpR)

The version of Cisco HyperFlex HX installed on the remote host is affected by multiple command injection vulnerabilities. An unauthenticated, remote attacker can exploit these to execute arbitrary commands on an affected system. Note that Nessus has not tested for this issue but has instead relie...

Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66064)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Microsoft Windows/Windows Server suffers from a desktop bridge denial o...

Hackers Leverage Adobe Zero-Day Bug Impacting Acrobat Reader

Adobe is warning customers of a critical zero-day bug actively exploited in the wild that affects its ubiquitous Adobe Acrobat PDF reader software. A patch is available, as part of the company’s Tuesday roundup of 43 fixes for 12 of its products, including Adobe Creative Cloud Desktop Application...

Atlassian Jira Server and Data Center has an unspecified vulnerability (CNVD-2021-55942)

Atlassian JIRA Server and Atlassian JIRA Data Center are both products of Atlassian Australia, Atlassian JIRA Server is a server version of a defect tracking management system. Atlassian JIRA Data Center is the data center version of Atlassian JIRA, which is a security vulnerability that could be...

CVE-2021-32030

creationtimestamp| type| source ---|---|--- 2021-05-07 17:47:26+00:00| seen| Telegram/364D1NteulD3hI6yvTR5Wv3Y4GwSn37bdCzEYQa2B5avU0 2021-05-09 19:48:10+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3331 2023-04-27 09:58:59+00:00| confirmed|...

Proxylogon: A Coinminer, a Ransomware, and a Botnet Join the Party

Our telemetry showed three malware families taking advantage of the ProxyLogon vulnerability beginning in March: the coinminer LemonDuck was sighted first, quickly followed by the ransomware BlackKingdom, then the Prometei botnet...

Tenda G1 and G3 Buffer Overflow Vulnerability (CNVD-2022-10754)

Tenda G1 and G3 is a router from Tenda, China. Tenda G1 and G3 is vulnerable to a buffer overflow vulnerability, which can be exploited by attackers to execute arbitrary code via a crafted action IPMacBindIndex request...

Apple Releases Urgent Security Patches For Zero‑Day Bugs Under Active Attacks

Apple on Monday released security updates for iOS, macOS, and watchOS to address three zero-day flaws and expand patches for a fourth vulnerability that the company said might have been exploited in the wild. The weaknesses all concern WebKit, the browser engine which powers Safari and other...