Import XML and RSS Feeds < 2.0.3 - Authenticated Server-side Request Forgery (SSRF)

The plugin is affected by a Server-side request forgery SSRF vulnerability via the data parameter in a moovereadxml action...

PT-2021-4542

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 90.0.4430.212 Description The issue is related to a heap buffer overflow in the Media Feeds component of Google Chrome, which can be exploited by an attacker who convinces a user to enable certain features in...

CVE-2021-27562

creationtimestamp| type| source ---|---|--- 2021-03-17 11:01:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2925 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123...

CVE-2021-27561

creationtimestamp| type| source ---|---|--- 2021-03-17 11:01:15+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2925 2021-10-15 22:28:51+00:00| seen| https://t.me/cibsecurity/30663 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20...

CVE-2021-27059

creationtimestamp| type| source ---|---|--- 2021-03-11 19:00:44+00:00| seen| https://t.me/cibsecurity/24791 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 16:56:05+00:00| seen|...

CVE-2021-27103

creationtimestamp| type| source ---|---|--- 2021-02-17 00:48:04+00:00| seen| https://t.me/cibsecurity/23688 2021-02-23 15:58:16+00:00| seen| MISP/7391b143-ed2a-4938-b1eb-1198b56048a3 2021-07-29 17:59:02+00:00| seen| https://t.me/RussianOSINT/875 2021-10-25 22:32:43+00:00| seen|...

Dependency Confusion Supply-Chain Attack Hit Over 35 High-Profile Companies

In what's a novel supply chain attack, a security researcher managed to breach over 35 major companies' internal systems, including that of Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, and achieve remote code execution. The technique, called dependency confusion or a...

Dependency Confusion Supply-Chain Attack Hit Over 35 High-Profile Companies

In what's a novel supply chain attack, a security researcher managed to breach over 35 major companies' internal systems, including that of Microsoft, Apple, PayPal, Shopify, Netflix, Yelp, Tesla, and Uber, and achieve remote code execution. The technique, called dependency confusion or a...

CVE-2019-5544

creationtimestamp| type| source ---|---|--- 2021-02-02 11:03:16+00:00| exploited| https://t.me/truesecator/1384 2021-02-03 21:05:11+00:00| exploited| https://t.me/xakepru/10338 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen|...

CVE-2019-13608

creationtimestamp| type| source ---|---|--- 2021-02-01 14:56:26+00:00| seen| MISP/40f8e511-0605-4f1c-8112-5fe43ed25af0 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:24:21+00:00|...

CVE-2020-29557

creationtimestamp| type| source ---|---|--- 2021-01-29 23:25:09+00:00| seen| https://t.me/cibsecurity/22855 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-24 07:05:52+00:00| seen|...

Warning Issued Over Hackable ADT's LifeShield Home Security Cameras

Newly discovered security vulnerabilities in ADT's Blue formerly LifeShield home security cameras could have been exploited to hijack both audio and video streams. The vulnerabilities tracked as CVE-2020-8101 were identified in the video doorbell camera by Bitdefender researchers in February 2020...

Vulnerability fixed in IBM WebSphere Application Server

A vulnerability has been fixed in IBM WebSphere Application Server. The vulnerability allows a malicious party to obtain sensitive information and to potentially cause a denial-of-service cause. The attack on this vulnerability is known as an External Entity Injection XXE attack in which rogue co...

CVE-2020-25169

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...

Information disclosure

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...

CVE-2020-25169: Cleartext Transmission of Sensitive Information

The affected Reolink P2P products do not sufficiently protect data transferred between the local device and Reolink servers. This can allow an attacker to access sensitive information, such as camera feeds...

CVE-2020-6572

creationtimestamp| type| source ---|---|--- 2021-01-15 00:50:38+00:00| seen| https://t.me/cibsecurity/22187 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:25:54+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971208 2025-02-23 02:10:27+00:00|...

CVE-2020-17530

creationtimestamp| type| source ---|---|--- 2020-12-23 17:47:29+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/struts2multievalognl.rb 2020-12-30 04:09:26+00:00| exploited| https://t.me/cKure/3504 2020-12-31 18:33:03+00:00|...

CVE-2019-3398

creationtimestamp| type| source ---|---|--- 2020-12-09 07:18:56+00:00| seen| MISP/b426aa9c-dc22-4a91-8213-f8d513405423 2021-11-08 08:58:17+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:24:34+00:00|...

CVE-2020-28949

creationtimestamp| type| source ---|---|--- 2020-11-27 06:43:35+00:00| seen| https://t.me/cKure/2991 2020-11-30 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=530 2020-12-03 06:54:15+00:00| seen| Telegram/Guk8DuU3shklMFMRI0YLGr6ZXGDXJelP33OTSQyPGBX5w 2020-12-03...