CVE-2021-1879

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been...

CVE-2021-1879

CVE-2021-1879 affects Apple WebKit/WebKit-based parsing in iOS/iPadOS/watchOS (WebKit component). The issue is a cross-site scripting vulnerability triggered by processing malicious web content, potentially leading to universal XSS. Root cause: improved management of object lifetimes in WebKit/CS...

CVE-2021-1871

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...

CVE-2021-1870

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...

CVE-2021-1782

A race condition was addressed with improved locking. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, watchOS 7.3, tvOS 14.4, iOS 14.4 and iPadOS 14.4. A malicious application may be able to elevate privileges. Apple is aware of a...

CVE-2021-1879

This issue was addressed by improved management of object lifetimes. This issue is fixed in iOS 12.5.2, iOS 14.4.2 and iPadOS 14.4.2, watchOS 7.3.3. Processing maliciously crafted web content may lead to universal cross site scripting. Apple is aware of a report that this issue may have been...

CVE-2021-23987

Mozilla developers and community members reported memory safety bugs present in Firefox 86 and Firefox ESR 78.8. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects...

CVE-2021-21975

creationtimestamp| type| source ---|---|--- 2021-03-30 19:05:12+00:00| seen| https://t.me/ptswarm/18 2021-03-31 09:59:09+00:00| seen| https://t.me/truesecator/1577 2021-03-31 14:23:13+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/66 2021-04-02 11:01:09+00:00|...

Ubuntu: Security Advisory (USN-4894-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2020-17453

creationtimestamp| type| source ---|---|--- 2021-03-29 03:08:41+00:00| published-proof-of-concept| https://t.me/infobes/305 2022-06-01 02:33:44+00:00| seen| https://t.me/CyberSecurityTechnologies/3007 2022-09-12 12:22:19+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/30...

CVE-2021-21087

creationtimestamp| type| source ---|---|--- 2021-03-29 03:08:41+00:00| published-proof-of-concept| https://t.me/infobes/305 2022-06-01 02:33:44+00:00| seen| https://t.me/CyberSecurityTechnologies/3007 2025-02-02 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-02...

Apple Issues Urgent Patch Update for Another Zero‑Day Under Attack

Merely weeks after releasing out-of-band patches for iOS, iPadOS, macOS and watchOS, Apple has issued yet another security update for iPhone, iPad, and Apple Watch to fix a critical zero-day weakness that it says is being actively exploited in the wild. Tracked as CVE-2021-1879 , the vulnerabilit...

Apple Issues Urgent Patch Update for Another Zero‑Day Under Attack

Merely weeks after releasing out-of-band patches for iOS, iPadOS, macOS and watchOS, Apple has issued yet another security update for iPhone, iPad, and Apple Watch to fix a critical zero-day weakness that it says is being actively exploited in the wild. Tracked as CVE-2021-1879, the vulnerability...

Mozilla: Angle graphics library out of date

The Mozilla Foundation Security Advisory describes this issue as: An out of date graphics library Angle likely contained vulnerabilities that could potentially be exploited...

CVE-2021-1870

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...

CVE-2021-21402

creationtimestamp| type| source ---|---|--- 2021-03-23 23:38:33+00:00| seen| https://t.me/cibsecurity/25345 2021-04-06 11:01:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3064 2021-04-12 11:01:12+00:00| seen| https://t.me/CyberSecurityTechnologies/3104 2021-09-21...

CVE-2018-14009

creationtimestamp| type| source ---|---|--- 2021-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49705 2021-09-21 06:42:52+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/98 2025-09-17 15:00:06+00:00| published-proof-of-concept|...

CVE-2021-26295

creationtimestamp| type| source ---|---|--- 2021-03-22 09:43:54+00:00| seen| https://t.me/thehackernews/1104 2021-03-22 12:32:43+00:00| seen| https://t.me/cKure/4479 2021-03-22 12:59:17+00:00| seen| https://t.me/cKure/4482 2021-03-22 15:37:06+00:00| seen| https://t.me/cibsecurity/25218 2021-03-29...

WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE

We noticed 0-day in the plugin https://woocommerce.com/products/woocommerce-help-scout/ being actively exploited. This vulnerability affects at least versions 2.6-2.8 current latest published version and allows unauthenticated users to upload any files to the site which by default will end up in...

F5 Discloses Eight Vulnerabilities—Including Four Critical Ones—in BIG-IP Systems

Update March 25, 2021: CVE-2021-22986 is now being actively exploited in the wild by a range of malicious actors. Rapid7 has in-depth technical analysis on this vulnerability, including proof-of-concept code and information on indicators of compromise, available here. On March 10, 2021, F5...