Army Testing Facial Recognition in Child-Care Centers

Live video feeds of daycare centers are common, but the Army wants to take their kid-monitoring capabilities to the next level. Under a new pilot program being rolled out at a Fort Jackson, S.C. child-care center, the military is looking for service providers to layer commercially available facia...

Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

The fetchproductajax functionality in the plugin uses a productid POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. POST /wp-admin/admin-ajax.php HTTP/1.1 Content-Length: 162 Accept: / X-Requested-With: XMLHttpReque...

CVE-2021-36948

creationtimestamp| type| source ---|---|--- 2021-08-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=628 2021-08-11 18:46:50+00:00| seen| https://t.me/truesecator/1993 2021-08-12 15:03:50+00:00| seen| https://t.me/sysodmins/12669 2021-08-12 22:39:58+00:00| seen|...

CVE-2021-36454

Cross Site Scripting XSS vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1 backups\backups.php, 2 blocks\blocks.php, 3 brands\brands.php, 4 comments\comments.php, 5 coupons\coupons.php, 6 feeds\feeds.php, 7 functions\functions.php, 8 items\items.php, 9...

OPENSUSE-SU-2021:1091-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.12 fixed: Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links fixed: Folder Pane display theme fixes for macOS fixed: Chat account settings did not always save as...

CVE-2021-36741

creationtimestamp| type| source ---|---|--- 2021-07-30 00:14:36+00:00| seen| https://t.me/cibsecurity/26581 2021-08-13 05:19:44+00:00| exploited| https://t.me/cKure/6595 2021-08-13 18:53:59+00:00| exploited| https://t.me/truesecator/2002 2021-11-08 08:58:20+00:00| seen|...

CVE-2021-36934

creationtimestamp| type| source ---|---|--- 2021-07-21 08:58:01+00:00| seen| https://t.me/thehackernews/1386 2021-07-21 12:05:02+00:00| seen| https://t.me/devukraine/178 2021-07-21 14:22:34+00:00| seen| https://t.me/CyberGovIL/1301 2021-07-21 15:18:22+00:00| published-proof-of-concept|...

ARTIF - An Advanced Real Time Threat Intelligence Framework To Identify Threats And Malicious Web Traffic On The Basis Of IP Reputation And Historical Data.

ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collecting,...

CVE-2021-34448

creationtimestamp| type| source ---|---|--- 2021-07-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=608 2021-07-14 16:59:39+00:00| seen| https://t.me/truesecator/1917 2021-07-15 10:13:10+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus21/2021...

CVE-2021-35211

creationtimestamp| type| source ---|---|--- 2021-07-13 03:58:06+00:00| exploited| https://t.me/alexmakus/4168 2021-07-13 06:01:30+00:00| exploited| https://t.me/thehackernews/1360 2021-07-13 10:04:42+00:00| exploited| https://t.me/cKure/6165 2021-07-13 11:03:35+00:00| seen|...

Exploit for Server-Side Request Forgery in Mooveagency Import_Xml_And_Rss_Feeds

CVE-2020-24148 Server-side request forgery SSRF in the Impo...

CVE-2020-24148

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

CVE-2020-24148

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

Server side request forgery (ssrf)

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

CVE-2020-24148

The CVE-2020-24148 entry is concrete: WordPress Import XML and RSS Feeds (import-xml-feed) plugin is affected up to version 2.0.1. The flaw is a server-side request forgery (SSRF) via the data parameter in the moove_read_xml action, implemented when the plugin fetches a URL using data as input (v...

CVE-2020-24148

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

Use of deprecated Chainlink API

Handle 0xRajeev Vulnerability details Impact The contracts use Chainlink’s deprecated API latestAnswer. Such functions might suddenly stop working if Chainlink stopped supporting deprecated APIs. Impact: Deprecated API stops working. Prices cannot be obtained. Protocol stops and contracts have to...

CVE-2021-1675

creationtimestamp| type| source ---|---|--- 2021-06-29 16:49:28+00:00| exploited| https://t.me/truesecator/1866 2021-06-29 17:45:58+00:00| published-proof-of-concept| https://t.me/antichat/9768 2021-06-29 19:16:26+00:00| seen| https://t.me/ctinow/36051 2021-06-30 10:31:32+00:00|...

CVE-2021-30762

creationtimestamp| type| source ---|---|--- 2021-06-15 07:49:16+00:00| exploited| https://t.me/cKure/5915 2021-06-16 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=599 2021-06-21 17:35:35+00:00| exploited| https://t.me/androidMalware/1231 2021-11-08 08:58:17+00:00| seen|...

CVE-2021-30761

creationtimestamp| type| source ---|---|--- 2021-06-15 07:49:16+00:00| exploited| https://t.me/cKure/5915 2021-06-16 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=599 2021-06-21 17:35:35+00:00| exploited| https://t.me/androidMalware/1231 2021-11-08 08:58:17+00:00| seen|...