Adobe Premiere Rush Code Execution Vulnerability (CNVD-2021-101125)

Adobe Premiere Rush is a set of cross-platform video editing software from the U.S. company Audobee Adobe. A security vulnerability exists in Adobe Premiere Rush, which can be exploited by an attacker to execute arbitrary code on the system...

Microsoft Edge (Chromium-Based) Multiple Vulnerabilities (Dec 2021)

This host is missing an important security update according to Microsoft Edge Chromium-Based updates. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

Patch Tuesday - December 2021

This month’s Patch Tuesday comes in the middle of a global effort to mitigate Apache Log4j CVE-2021-44228. In today’s security release, Microsoft issued fixes for 83 vulnerabilities across an array of products — including a fix for Windows Defender for IoT, which is vulnerable to CVE-2021-44228...

Microsoft & Adobe Patch Tuesday (December 2021) – Microsoft 83 Vulnerabilities with 7 Critical, 1 Actively Exploited. Adobe 60 Vulnerabilities, 28 critical.

Microsoft Patch Tuesday – December 2021 Microsoft patched 83 vulnerabilities in their December 2021 Patch Tuesday release, of which seven 7 are rated as critical severity. This months release includes one 1 Zero Day known to be actively exploited. Products impacted by Microsofts December security...

CVE-2021-4104

creationtimestamp| type| source ---|---|--- 2021-12-14 14:13:20+00:00| seen| https://t.me/cibsecurity/33912 2021-12-19 05:14:34+00:00| exploited| https://t.me/GithubRedTeam/1166 2021-12-19 10:03:53+00:00| exploited| https://t.me/BlueRedTeam/1548 2021-12-20 06:50:30+00:00| seen|...

CVE-2021-4099

creationtimestamp| type| source ---|---|--- 2021-12-14 13:04:00+00:00| exploited| https://t.me/truesecator/2439...

CVE-2021-4101

creationtimestamp| type| source ---|---|--- 2021-12-14 13:04:00+00:00| exploited| https://t.me/truesecator/2439...

CVE-2021-4100

creationtimestamp| type| source ---|---|--- 2021-12-14 13:04:00+00:00| exploited| https://t.me/truesecator/2439...

CVE-2021-4422

creationtimestamp| type| source ---|---|--- 2021-12-14 11:04:35+00:00| seen| https://t.me/NeKaspersky/1550 2022-01-11 12:34:11+00:00| exploited| https://t.me/BleepingComputer/11313 2023-07-12 12:35:39+00:00| seen| https://t.me/cibsecurity/66474 2024-10-21 16:08:53+00:00| seen|...

Fortinet FortiWeb Cross-Site Scripting Vulnerability (CNVD-2021-101133)

Fortinet FortiWeb is a web application layer firewall from Fortinet that blocks threats such as cross-site scripting, SQL injection, cookie poisoning, schema poisoning and other attacks, secures web applications and protects sensitive database content. versions 6.4.1 and earlier and 6.3.15 and...

Apache Log4j 2.0.x Multiple Vulnerabilities (TCP, Log4Shell) - Active Check

Apache Log4j is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Reprise License Manager Remote Code Execution Vulnerability

Reprise Software Reprise License Manager is a software licensing toolkit from Reprise Software, Inc. that provides local and cloud-based license management, license enforcement and product activation solutions for publishers of commercial software applications.Reprise Software Reprise License...

ZZCMS Access Control Error Vulnerability

ZZCMS is a content management system CMS from the Zzcms team in China. ZZCMS suffers from an access control error vulnerability that stems from an incorrect access control vulnerability in zzcms via admin.php, which can be exploited by an attacker to directly access the administrator console afte...

Gryphon Tower Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability exists in Gryphon Tower, a wireless router from Gryphon. The vulnerability stems from a lack of user-supplied data and output data validation filtering in the url parameter of cgi-bin/luci/siteaccess/, which can be exploited to execute client-side JavaScript...

Cross site scripting

Stored Cross-Site Scripting XSS vulnerability discovered in WordPress Comment Engine Pro plugin versions = 1.0, could be exploited by users with Editor or higher role...

CVE-2021-44228

creationtimestamp| type| source ---|---|--- 2021-12-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=700 2021-12-10 08:54:02+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus38/2021 2021-12-10 09:44:22+00:00| exploited| https://t.me/poxek/229 2021-12-1...

CISA Adds 13 Known Exploited Vulnerabilities to Catalog

CISA has added 13 new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all types and...

Jolokia Unauthorized Command Execution Vulnerability

Jolokia is a jmx remote management project implemented via http and josn. Jolokia unauthorized command execution vulnerability can be exploited by attackers to gain control of the server...

CISA Adds Thirteen Known Exploited Vulnerabilities to Catalog

CISA has added thirteen new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence that threat actors are actively exploiting the vulnerabilities listed in the table below. These types of vulnerabilities are a frequent attack vector for malicious cyber actors of all typ...

SquaredUp for SCOM Cross-Site Scripting Vulnerability

Squaredup is a Web service from Squaredup UK that provides data monitoring capabilities for cloud environments. a cross-site scripting vulnerability exists in Image Tile in SquaredUp for SCOM version 5.2.1.6654, which can be exploited by remote attackers to inject arbitrary Web scripts or HTML...