CVE-2021-1048

creationtimestamp| type| source ---|---|--- 2021-11-03 06:32:12+00:00| exploited| https://t.me/thehackernews/1629 2021-11-03 06:47:11+00:00| exploited| https://t.me/BlackHutEgy/287 2021-11-03 13:19:19+00:00| seen| https://t.me/truesecator/2282 2021-11-03 20:58:12+00:00| seen|...

MochiCSSRv0.update() Does Not Operate Correctly On Bluechip Assets

Handle leastwood Vulnerability details Impact Mochi vaults query price feeds for updates via the update function in MochiCSSRv0.sol. If the asset to be queried is a bluechip asset, the function will call getPrice on an adapter which adheres to the ICSSRAdapter interface. If the adapter is not...

The vulnerability of the Media Feeds component in the Google Chrome web browser involves an operation that goes beyond the acceptable data buffer limits. This allows attackers to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Media Feeds component in the Google Chrome web browser relates to the execution of operations beyond the allowed data buffer limits. Exploiting this vulnerability could allow an attacker to gain access to confidential data, compromise its integrity, and cause service...

A Guide to Doing Cyberintelligence on a Restricted Budget

For those in the industry, it comes as no surprise that many cybersecurity programs have been impacted by loss of revenue during the pandemic. From cutting tooling and feed budgets to reduction in staff, it’s been challenging at best. In a recent SANS 2021 survey, “Threat Hunting In Uncertain...

HackTools

This is a web browser extension for penetration testing, called HackTools. It is a comprehensive toolset for web application security testing, providing various features such as: Dynamic shell generation PHP, Bash, Ruby, Python, Perl, Netcat XSS payload generation Common SQL injection payloads...

UBUNTU-CVE-2021-41136

Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using puma with a proxy which forwards HTTP header values which contain the LF character could allow HTTP request smugggling. A client could smuggle a request through a proxy, causing the proxy to send a...

CVE-2021-41136

Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using puma with a proxy which forwards HTTP header values which contain the LF character could allow HTTP request smugggling. A client could smuggle a request through a proxy, causing the proxy to send a...

CVE-2021-30869

creationtimestamp| type| source ---|---|--- 2021-09-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=658 2021-09-24 06:47:09+00:00| exploited| https://t.me/thehackernews/1537 2021-09-24 07:45:25+00:00| exploited| https://t.me/auraxchan/26994 2021-09-24 11:00:34+00:00|...

CVE-2021-22017

creationtimestamp| type| source ---|---|--- 2021-09-23 16:29:48+00:00| seen| https://t.me/cibsecurity/29284 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 02:09:02+00:00| seen| https://t.me/arpsyndicate/1364 2024-12-24 20:25:55+00:00| seen|...

CVE-2021-22941

creationtimestamp| type| source ---|---|--- 2021-09-21 12:50:00+00:00| published-proof-of-concept| https://t.me/ptswarm/73 2021-09-21 23:19:50+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/5672 2021-09-22 08:23:35+00:00| published-proof-of-concept| https://t.me/HackerOne/3190...

CVE-2021-24511 Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

The fetchproductajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a productid POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-30633

creationtimestamp| type| source ---|---|--- 2021-09-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=647 2021-09-14 10:58:48+00:00| exploited| https://t.me/truesecator/2098 2021-09-14 13:18:38+00:00| exploited| https://t.me/SecLabNews/10863 2021-09-17 04:00:00+00:00| see...

CVE-2021-30860

creationtimestamp| type| source ---|---|--- 2021-09-13 17:41:24+00:00| exploited| https://t.me/alexmakus/4286 2021-09-13 20:48:27+00:00| exploited| https://t.me/cKure/7075 2021-09-13 21:38:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2021 2021-09-14 00:07:44+00:00|...

CVE-2021-30858

creationtimestamp| type| source ---|---|--- 2021-09-13 17:41:24+00:00| exploited| https://t.me/alexmakus/4286 2021-09-13 21:38:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2021 2021-09-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=646...

Important: Red Hat Security Advisory: cyrus-imapd security update

An update for cyrus-imapd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Power Apps OData Feeds Detected

Microsoft Power Apps is a low-code development platform designed to help users build rich web and mobile applications. Power Apps enables users to publish table data as OData feeds, providing a RESTful web service by default available to any user. The scanner detected the presence of public data ...

CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

Remote code execution

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...