CVE-2021-21315

creationtimestamp| type| source ---|---|--- 2021-02-16 20:47:59+00:00| seen| https://t.me/cibsecurity/23665 2021-02-24 12:16:02+00:00| published-proof-of-concept| https://t.me/BleepingComputer/9188 2021-03-04 15:23:07+00:00| published-proof-of-concept| https://t.me/antichat/9338 2021-10-28...

CVE-2021-27101

Accellion FTA 912370 and earlier is affected by SQL injection via a crafted Host header in a request to documentroot.html. The fixed version is FTA912380 and later. Recent assessments: cdelafuente-r7 at March 03, 2021 6:11pm UTC reported: Accellion’s legacy File Transfer Appliance FTA is an...

Updated chromium-browser packages fix security vulnerability

The updated packages fix security vulnerabilities. One of those problems is a security issue in V8 engine that is actively exploited...

Vulnerability in Chess.com allowed access to 50 Million user records

By Saad Rajpoot The Chess.com vulnerability could have been exploited to access any account on the site including the administrator account. This is a post from HackRead.com Read the original post: Vulnerability in Chess.com allowed access to 50 Million user records...

Various Malware Lurks in Discord App to Target Gamers

A rise in online gaming, tied to pandemic-mandated social distancing, has led to a spike in criminals targeting the demographic. The latest effort to exploit the trend is malicious files planted inside the Discord platform designed to trick users into downloading malware-laced files. Researchers...

Microsoft Issues Patches for In-the-Wild 0-day and 55 Others Windows Bugs

Microsoft on Tuesday issued fixes for 56 flaws, including a critical vulnerability that's known to be actively exploited in the wild. In all, 11 are listed as Critical, 43 are listed as Important, and two are listed as Moderate in severity — six of which are previously disclosed vulnerabilities...

CVE-2021-21479

creationtimestamp| type| source ---|---|--- 2021-02-10 00:41:02+00:00| seen| https://t.me/cibsecurity/23344 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-21479.yaml 2024-09-21 16:06:46+00:00| published-proof-of-concept...

CVE-2021-22502

creationtimestamp| type| source ---|---|--- 2021-02-09 00:39:10+00:00| seen| https://t.me/cibsecurity/23262 2021-03-17 11:01:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2925 2021-04-29 18:16:56+00:00| seen|...

CVE-2021-21148

Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Recent assessments: gwillcox-r7 at February 05, 2021 4:25pm UTC reported: Reported as exploited in the wild at...

CVE-2021-3394

creationtimestamp| type| source ---|---|--- 2021-02-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49530 2021-02-09 18:40:35+00:00| seen| https://t.me/cibsecurity/23303...

FreeBSD : chromium -- heap buffer overflow in V8 (3e01aad2-680e-11eb-83e2-e09467587c17)

Chrome Releases reports : 1170176 High CVE-2021-21148: Heap buffer overflow in V8. Reported by Mattias Buelens on 2021-01-24. Google is aware of reports that an exploit for CVE-2021-21148 exists in the wild. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

CVE-2021-3122

CMCAgent in NCR Command Center Agent 16.3 on Aloha POS/BOH servers permits the submission of a runCommand parameter within an XML document sent to port 8089 that enables the remote, unauthenticated execution of an arbitrary command as SYSTEM, as exploited in the wild in 2020 and/or 2021. NOTE: th...

Cross site request forgery (csrf)

Cross Site Request Forgery vulnerability in Micro Focus Application Performance Management product, affecting versions 9.40, 9.50 and 9.51. The vulnerability could be exploited by attacker to trick the users into executing actions of the attacker's choosing...

CVE-2021-25646

creationtimestamp| type| source ---|---|--- 2021-02-05 23:22:52+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/5128 2021-02-06 07:37:08+00:00| published-proof-of-concept| https://t.me/cKure/3868 2021-02-09 12:30:57+00:00| published-proof-of-concept| https://t.me/reconshell/428...

New Chrome Browser 0-day Under Active Attack—Update Immediately!

Google has patched a zero-day vulnerability in Chrome web browser for desktop that it says is being actively exploited in the wild. The company released 88.0.4324.150 for Windows, Mac, and Linux, with a fix for a heap buffer overflow flaw CVE-2021-21148 in its V8 JavaScript rendering engine...

Realtek RTL8195A Buffer Overflow Vulnerability (CNVD-2021-56817)

The Realtek RTL8195A is an IoT microcontroller from Realtek Semiconductor Taiwan, China.A buffer overflow vulnerability exists in versions prior to the Realtek RTL8195A 2.08, which could be exploited by an attacker to inject crafted packets into a WPA2 handshake to emulate an access point and...

CVE-2021-3401

Bitcoin Core before 0.19.0 might allow remote attackers to execute arbitrary code when another application unsafely passes the -platformpluginpath argument to the bitcoin-qt program, as demonstrated by an x-scheme-handler/bitcoin handler for a .desktop file or a web browser. NOTE: the discoverer...

Google Chrome < 88.0.4324.150 Vulnerability

The version of Google Chrome installed on the remote Windows host is prior to 88.0.4324.150. It is, therefore, affected by a vulnerability as referenced in the 202102stable-channel-update-for-desktop4 advisory. - Heap buffer overflow in V8 in Google Chrome prior to 88.0.4324.150 allowed a remote...

Cisco IOS XR and Cisco NX-OS Software Access Control Error Vulnerability

Cisco NX-OS Software and Cisco IOS XR are both products of Cisco U.S.A. Cisco NX-OS Software is a suite of data center-class operating system software for switches. cisco IOS XR is a suite of operating systems developed for its network devices. cisco IOS XR and Cisco NX-OS Software is vulnerable ...

CVE-2020-2507

creationtimestamp| type| source ---|---|--- 2021-02-03 18:49:18+00:00| seen| https://t.me/cibsecurity/23013 2024-12-19 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-19 2024-12-27 00:00:00+00:00| exploited| The Shadowserver...