CVE-2021-22911

creationtimestamp| type| source ---|---|--- 2021-06-07 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49960 2021-06-07 15:45:27+00:00| published-proof-of-concept| Telegram/tCqBhGf-ONTgPl1jNxk7jSK9BW7FRzVpc1tCk80-PQdj1g 2021-07-07 00:00:00+00:00| exploited|...

ALERT: Critical RCE Bug in VMware vCenter Server Under Active Attack

Malicious actors are actively mass scanning the internet for vulnerable VMware vCenter servers that are unpatched against a critical remote code execution flaw, which the company addressed late last month. The ongoing activity was detected by Bad Packets on June 3 and corroborated yesterday by...

CVE-2021-42840

creationtimestamp| type| source ---|---|--- 2021-06-03 14:18:38+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/suitecrmlogfilerce.rb 2021-10-22 22:39:21+00:00| seen| https://t.me/cibsecurity/31054 2021-11-17 00:00:00+00:00| exploited|...

Command injection

A command injection vulnerability has been reported to affect certain versions of Video Station. If exploited, this vulnerability allows remote attackers to execute arbitrary commands. This issue affects: QNAP Systems Inc. Video Station versions prior to 5.5.4 on QTS 4.5.2; versions prior to 5.5....

CVE-2020-11978

creationtimestamp| type| source ---|---|--- 2021-06-03 00:39:25+00:00| seen| https://t.me/pwnwikizhchannel/579 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-09-18 22:16:38+00:00| seen|...

Buffalo WSR-1166DHP3 and WSR-1166DHP4 Operating System Command Injection Vulnerability

Buffalo WSR-1166DHP3 and WSR-1166DHP4 A router from Buffalo WSR-1166DHP3 and WSR-1166DHP4 is vulnerable to operating system command injection, which can be exploited by attackers to execute arbitrary operating system commands with root privileges...

openSUSE: Security Advisory for chromium (openSUSE-SU-2021:0825-1)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Ubuntu 20.04 LTS : polkit vulnerability (USN-4980-1)

The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4980-1 advisory. Kevin Backhouse discovered that polkit incorrectly handled errors in the polkitsystembusnamegetcredssync function. A local attacker could possibly use this issue ...

CVE-2021-21389

creationtimestamp| type| source ---|---|--- 2021-06-02 16:11:31+00:00| published-proof-of-concept| Telegram/yobw8ZrvHW0fEUWSUnBhVkPFKQSqUEvC1JTEUdeXbKUw 2022-07-04 20:48:04+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3003 2023-04-27 09:58:59+00:00| confirmed|...

Microsoft Edge (Chromium) < 91.0.864.37 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 91.0.864.37. It is, therefore, affected by multiple vulnerabilities as referenced in the May 27, 2021 advisory. Note that Nessus has not tested for this issue but has instead relied only on the application's...

Fancy Product Designer < 4.6.9 - Unauthenticated Arbitrary File Upload and RCE

The plugin allows unauthenticated attackers to upload arbitrary files, resulting in remote code execution. The issue is being actively exploited, and no patch is available. Further details will be made available once pathed. PoC The Custom Product Designer plugin for WordPress offers the ability...

Duplication of Balance

Handle 0xsomeone Vulnerability details Impact It is possible to duplicate currently held ink or art within a Cauldron, thereby breaking the contract's accounting system minting units out of thin air. Proof of Concept The stir function of the Cauldron, which can be invoked via a Ladle operation,...

CVE-2021-33564

creationtimestamp| type| source ---|---|--- 2021-05-28 11:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3477 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-33564.yaml 2023-07-25...

CVE-2020-24949

creationtimestamp| type| source ---|---|--- 2021-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49911 2021-05-28 09:44:39+00:00| seen| https://t.me/pwnwikizhchannel/517 2025-11-11 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-11-11 2026-03-22...

CVE-2020-25671

creationtimestamp| type| source ---|---|--- 2021-05-26 20:55:23+00:00| exploited| Telegram/8RLqebcrApWhcGHQe2nYx7z3TFAx9-6cNJyUWF8sJry8pmE...

CVE-2020-25670

creationtimestamp| type| source ---|---|--- 2021-05-26 20:55:20+00:00| exploited| Telegram/X6AIEUdNJRvmbybZ41tnbQqQ1sslmJcoWJRKwnmHaigvE...

CVE-2021-21985

creationtimestamp| type| source ---|---|--- 2021-05-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=591 2021-05-26 07:59:34+00:00| seen| https://t.me/thehackernews/1242 2021-05-26 11:23:27+00:00| seen| https://t.me/truesecator/1751 2021-05-26 19:05:27+00:00| seen|...

ThinkPHP Exploit Actively Exploited in the Wild

...

TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack

We have found and confirmed close to 50,000 IPs compromised by this attack perpetrated by TeamTNT across multiple clusters. Several IPs were repeatedly exploited during the timeframe of the episode, occurring between March and May...

Project Worlds Online Examination System Cross-Site Scripting Vulnerability

Project Worlds Online Examination System is an online examination system. version 1.0 of ProjectWorlds College Management System is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript code to execute and steal user credentials...