Duplication of Balance

Handle 0xsomeone Vulnerability details Impact It is possible to duplicate currently held ink or art within a Cauldron, thereby breaking the contract's accounting system minting units out of thin air. Proof of Concept The stir function of the Cauldron, which can be invoked via a Ladle operation,...

CVE-2021-33564

creationtimestamp| type| source ---|---|--- 2021-05-28 11:43:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3477 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-33564.yaml 2023-07-25...

CVE-2020-24949

creationtimestamp| type| source ---|---|--- 2021-05-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49911 2021-05-28 09:44:39+00:00| seen| https://t.me/pwnwikizhchannel/517 2025-11-11 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-11-11 2026-03-22...

CVE-2020-25671

creationtimestamp| type| source ---|---|--- 2021-05-26 20:55:23+00:00| exploited| Telegram/8RLqebcrApWhcGHQe2nYx7z3TFAx9-6cNJyUWF8sJry8pmE...

CVE-2020-25670

creationtimestamp| type| source ---|---|--- 2021-05-26 20:55:20+00:00| exploited| Telegram/X6AIEUdNJRvmbybZ41tnbQqQ1sslmJcoWJRKwnmHaigvE...

ThinkPHP Exploit Actively Exploited in the Wild

...

CVE-2021-21985

creationtimestamp| type| source ---|---|--- 2021-05-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=591 2021-05-26 07:59:34+00:00| seen| https://t.me/thehackernews/1242 2021-05-26 11:23:27+00:00| seen| https://t.me/truesecator/1751 2021-05-26 19:05:27+00:00| seen|...

TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack

We have found and confirmed close to 50,000 IPs compromised by this attack perpetrated by TeamTNT across multiple clusters. Several IPs were repeatedly exploited during the timeframe of the episode, occurring between March and May...

Google Chrome < 91.0.4472.77 Multiple Vulnerabilities

The version of Google Chrome installed on the remote macOS host is prior to 91.0.4472.77. It is, therefore, affected by multiple vulnerabilities as referenced in the 202105stable-channel-update-for-desktop25 advisory. - Insufficient policy enforcement in content security policy in Google Chrome...

Project Worlds Online Examination System Cross-Site Scripting Vulnerability

Project Worlds Online Examination System is an online examination system. version 1.0 of ProjectWorlds College Management System is vulnerable to a cross-site scripting vulnerability that could be exploited to inject malicious JavaScript code to execute and steal user credentials...

CVE-2021-28798

creationtimestamp| type| source ---|---|--- 2021-05-23 16:44:35+00:00| exploited| https://t.me/CyberGovIL/1261...

Android Issues Patches for 4 New Zero-Day Bugs Exploited in the Wild

Google on Wednesday updated its May 2021 Android Security Bulletin to disclose that four of the security vulnerabilities that were patched earlier this month by Arm and Qualcomm may have been exploited in the wild as zero-days. "There are indications that CVE-2021-1905, CVE-2021-1906,...

CVE-2020-36195

creationtimestamp| type| source ---|---|--- 2021-05-18 15:10:01+00:00| exploited| https://t.me/deeptoweb/1676...

Liferay Portal and Liferay DXP have unspecified vulnerabilities (CNVD-2021-62988)

Liferay Portal and Liferay DXP are both products of Liferay, a J2EE-based portal solution that uses EJB and JMS technologies and serves as a web publishing and shared workspace, enterprise collaboration platform, social network, etc. Liferay DXP is a digital experience collaboration platform...

Debian: Security Advisory (DLA-2663-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for chromium (FEDORA-2021-35d2bb4627)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2021-31933

creationtimestamp| type| source ---|---|--- 2021-05-14 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49867 2021-05-15 00:46:44+00:00| seen| https://t.me/pwnwikizhchannel/425...

Apple’s ‘Find My’ Network Exploited via Bluetooth

Apple’s “Find My device” function for helping people track their iOS and macOS devices can be exploited to transfer data to and from random passing devices without using the internet, a security researcher has demonstrated. Security researcher Fabian Bräunlein with Positive Security developed a...

Cisco HyperFlex HX Command Injection Vulnerabilities (cisco-sa-hyperflex-rce-TjjNrkpR)

The version of Cisco HyperFlex HX installed on the remote host is affected by multiple command injection vulnerabilities. An unauthenticated, remote attacker can exploit these to execute arbitrary commands on an affected system. Note that Nessus has not tested for this issue but has instead relie...

Microsoft Windows/Windows Server Denial of Service Vulnerability (CNVD-2021-66064)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA.Microsoft Windows is a set of operating systems for personal devices.Microsoft Windows Server is a set of server operating systems. Microsoft Windows/Windows Server suffers from a desktop bridge denial o...