CVE-2021-1870

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave, iOS 14.4 and iPadOS 14.4. A remote attacker may be able to cause arbitrary code execution. Apple is aware of a report that this...

CVE-2021-21402

creationtimestamp| type| source ---|---|--- 2021-03-23 23:38:33+00:00| seen| https://t.me/cibsecurity/25345 2021-04-06 11:01:13+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/3064 2021-04-12 11:01:12+00:00| seen| https://t.me/CyberSecurityTechnologies/3104 2021-09-21...

CVE-2018-14009

creationtimestamp| type| source ---|---|--- 2021-03-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49705 2021-09-21 06:42:52+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/98 2025-09-17 15:00:06+00:00| published-proof-of-concept|...

CVE-2021-26295

creationtimestamp| type| source ---|---|--- 2021-03-22 09:43:54+00:00| seen| https://t.me/thehackernews/1104 2021-03-22 12:32:43+00:00| seen| https://t.me/cKure/4479 2021-03-22 12:59:17+00:00| seen| https://t.me/cKure/4482 2021-03-22 15:37:06+00:00| seen| https://t.me/cibsecurity/25218 2021-03-29...

WooCommerce Help Scout < 2.9.1 - Unauthenticated Arbitrary File Upload leading to RCE

We noticed 0-day in the plugin https://woocommerce.com/products/woocommerce-help-scout/ being actively exploited. This vulnerability affects at least versions 2.6-2.8 current latest published version and allows unauthenticated users to upload any files to the site which by default will end up in...

F5 Discloses Eight Vulnerabilities—Including Four Critical Ones—in BIG-IP Systems

Update March 25, 2021: CVE-2021-22986 is now being actively exploited in the wild by a range of malicious actors. Rapid7 has in-depth technical analysis on this vulnerability, including proof-of-concept code and information on indicators of compromise, available here. On March 10, 2021, F5...

Updated chromium-browser-stable packages fix security vulnerability

The updated packages fix security vulnerabilities. At least one of them is known to be actively exploited...

MGASA-2021-0142 Updated chromium-browser-stable packages fix security vulnerability

The updated packages fix security vulnerabilities. At least one of them is known to be actively exploited...

CVE-2021-21193

Use after free in Blink in Google Chrome prior to 89.0.4389.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recent assessments: gwillcox-r7 at March 15, 2021 6:18am UTC reported: Reported as exploited in the wild at...

Chromium CVE-2021-21193: Use after free in Blink

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. This CVE has been reported to be exploited in the wild...

Tutor LMS < 1.8.3 - SQL Injection via tutor_quiz_builder_get_question_form

The tutorquizbuildergetquestionform AJAX action from the plugin was vulnerable to UNION based SQL injection that could be exploited by students. PoC python3 sqlmap.py -r /tutorunion4.txt --dbms=mysql --technique=U -p questionid --dump Where tutorunion4.txt is POST /wp-admin/admin-ajax.php HTTP/1....

Another Google Chrome 0-Day Bug Found Actively Exploited In-the-Wild

Google has addressed yet another actively exploited zero-day in Chrome browser, marking the second such fix released by the company within a month. The browser maker on Friday shipped 89.0.4389.90 for Windows, Mac, and Linux, which is expected to be rolling out over the coming days/weeks to all...

Huawei EulerOS: Security Advisory for freetype (EulerOS-SA-2021-1598)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-51467

creationtimestamp| type| source ---|---|--- 2021-03-11 18:53:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/apacheofbizdeserialization.rb 2023-12-26 16:27:07+00:00| seen| https://t.me/ctinow/159364 2023-12-27 16:45:34+00:00| seen|...

CVE-2021-26865

creationtimestamp| type| source ---|---|--- 2021-03-11 06:06:55+00:00| exploited| https://t.me/CyberSecurityTechnologies/2835 2021-03-11 18:54:27+00:00| seen| https://t.me/cibsecurity/24760 2021-04-02 11:01:09+00:00| seen| https://t.me/CyberSecurityTechnologies/3038...

SAP Stomps Out Critical RCE Flaw in Manufacturing Software

Enterprise software giant SAP pushed out fixes for a critical-severity vulnerability in its real-time data monitoring software for manufacturing operations. If exploited, the flaw could allow an attacker to access SAP databases, infect end users with malware and modify network configurations. The...

Microsoft Patch Tuesday, March 2021 Edition

On the off chance you were looking for more security to-dos from Microsoft today…the company released software updates to plug more than 82 security flaws in Windows and other supported software. Ten of these earned Microsofts "critical" rating, meaning they can be exploited by malware or...

Microsoft Office 2010 Service Pack 2 Remote Code Execution Vulnerabilities (KB4504703)

This host is missing an important security update according to Microsoft KB4504703 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

Patch Tuesday - March 2021

Another Patch Tuesday 2021-Mar is upon us and with this month comes a whopping 122 CVEs. As usual Windows tops the list of the most patched product. However, this month it’s browser vulnerabilities taking the second place, outnumbering Office vulnerabilities 3:1! Lastly, the Exchange Server...

Microsoft Patch Tuesday Updates Fix 14 Critical Bugs

Microsoft has released its regularly scheduled March Patch Tuesday updates, which address 89 security vulnerabilities overall. Included in the slew are 14 critical flaws and 75 important-severity flaws. Microsoft also included five previously disclosed vulnerabilities, which are being actively...