WordPress Import XML and RSS Feeds plugin <= 2.0.1 - Server-Side Request Forgery (SSRF) vulnerability

Server-Side Request Forgery SSRF vulnerability discovered by Suzhou Aurora Infinity Information Technology Co., Ltd. in WordPress Import XML and RSS Feeds plugin versions = 2.0.1. Solution Update the WordPress Import XML and RSS Feeds plugin to the latest available version at least 2.0.2...

Speed 2 – The Poseidon Adventure – Part Two

This post is a companion to the DEF CON 28 video available here Part One is available here Issue 3: Time and Tide Wait for No VLAN As mentioned the cabin switch appeared to be the key to all our access requirements. From that we could get to the trunk network, and all those TV, VOIP, and Wi-Fi...

CVE-2020-3566

creationtimestamp| type| source ---|---|--- 2020-08-31 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=507 2020-08-31 12:08:04+00:00| seen| https://t.me/icscert/337 2020-08-31 16:28:28+00:00| exploited| https://t.me/informationsecuritychannel/40069 2020-08-31 17:21:12+00:0...

CVE-2020-5741

creationtimestamp| type| source ---|---|--- 2020-07-16 15:38:10+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/http/plexunpickledictrce.rb 2021-03-20 16:59:08+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/2942 2023-06-1...

Popular TP-Link Family of Kasa Security Cams Vulnerable to Attack

A popular consumer-grade security camera made by TP-Link and sold under the Kasa brand has bevy of bugs that open the hardware to remote attacks, such as giving hackers access to private video feeds and the ability to change device settings. The researcher Jason Kent, with Cequence Security,...

CVE-2018-19943

creationtimestamp| type| source ---|---|--- 2020-06-08 08:30:02+00:00| exploited| https://t.me/SecLabNews/7783 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 22:15:20+00:00| seen| https://t.me/arpsyndicate/1042 2024-12-24 20:31:28+00:00| seen|...

Naviwebs Navigate CMS Cross-Site Scripting Vulnerability

Navigate CMS is an open source content management system CMS. A cross-site scripting vulnerability exists in the lib/packages/feeds/feed.class.php file in Navigate CMS 2.8.7 and earlier versions. The vulnerability stems from the WEB application lacking proper validation of client-side data. An...

CVE-2020-13798: Improper Neutralization of Input During Web Page Generation

An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php...

XSS Vulnerability at jfinal cms comment feeds

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms feedback at the existence of XSS vulnerability , an attacker can explo...

CVE-2019-7195

creationtimestamp| type| source ---|---|--- 2020-05-20 14:15:03+00:00| exploited| https://t.me/SecLabNews/7629 2020-05-23 19:40:04+00:00| published-proof-of-concept| https://t.me/cKure/629 2020-05-28 01:34:35+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/1757 2020-06-10...

Microsoft Dynamics CRM 2011 Update Rollup 13

Microsoft Dynamics CRM 2011 Update Rollup 13 INTRODUCTION Update Rollup 13 for Microsoft Dynamics CRM 2011 is now available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

CVE-2020-11651

creationtimestamp| type| source ---|---|--- 2020-05-01 15:21:08+00:00| seen| https://t.me/thehackernews/685 2020-05-03 19:21:42+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/saltstack-salt-hallintakehikossa-kriittisia-haavoittuvuuksia 2020-05-04 12:06:14+00:00| exploited|...

CVE-2020-1631

creationtimestamp| type| source ---|---|--- 2020-04-30 10:30:02+00:00| seen| https://t.me/SecLabNews/7490 2020-10-13 06:50:38+00:00| seen| MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4 2020-10-13 15:16:18+00:00| seen| MISP/f628d96f-2958-4717-91da-e86aace4925d 2023-06-14 21:10:04+00:00| seen|...

NFL Tackles Cybersecurity Concerns Ahead of 2020 Draft Day

The NFL draft is slated to start Thursday, and thanks to the COVID-19 pandemic, it will be the first virtual version of the event ever presented. This raises a few cybersecurity concerns, according to researchers and the teams themselves — but the NFL is planning on knocking the security ball...

QRadar Community Edition 7.3.1.6 Server Side Request Forgery

------------------------------------------------------------------------ QRadar RssFeedItem Server-Side Request Forgery vulnerability ------------------------------------------------------------------------ Yorick Koster, September 2019...

CVE-2020-0968

creationtimestamp| type| source ---|---|--- 2020-04-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=468 2020-09-30 19:11:05+00:00| exploited| https://t.me/truesecator/996 2020-10-02 09:30:32+00:00| exploited| https://t.me/SecLabNews/8911 2020-10-05 11:04:07+00:00| seen|...

CVE-2020-6820

creationtimestamp| type| source ---|---|--- 2020-04-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=466 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24...

CVE-2020-8468

creationtimestamp| type| source ---|---|--- 2020-03-18 10:15:02+00:00| exploited| https://t.me/SecLabNews/7124 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 19:00:03+00:00| seen|...

CVE-2020-0041

creationtimestamp| type| source ---|---|--- 2020-03-10 21:31:51+00:00| published-proof-of-concept| https://t.me/androidMalware/720 2020-03-12 04:37:48+00:00| published-proof-of-concept| https://t.me/antichat/8056 2020-03-31 00:02:42+00:00| published-proof-of-concept| https://t.me/R0Crew/1471...

CVE-2019-15949

creationtimestamp| type| source ---|---|--- 2020-03-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48191 2021-03-26 23:19:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nagiosxiscanner.rb 2021-04-14 00:06:12+00:00| seen...