ThroughTek P2P SDK

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: ThroughTek Equipment: P2P SDK Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION ThroughTek supplies multiple original equipment manufacturers of IP cameras with P2P...

CVE-2021-31201

creationtimestamp| type| source ---|---|--- 2021-06-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=593 2021-06-09 04:51:08+00:00| seen| https://t.me/alexmakus/4121 2021-11-08 08:58:18+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| see...

CVE-2021-31955

creationtimestamp| type| source ---|---|--- 2021-06-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=593 2021-06-09 04:51:08+00:00| seen| https://t.me/alexmakus/4121 2021-06-10 08:24:58+00:00| seen| MISP/df23874b-e926-4e6f-b80e-c8a58279bcb0 2021-06-15 10:49:56+00:00| see...

CVE-2021-33739

creationtimestamp| type| source ---|---|--- 2021-06-09 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=593 2021-06-09 04:51:08+00:00| seen| https://t.me/alexmakus/4121 2021-07-01 11:03:01+00:00| seen| https://t.me/CyberSecurityTechnologies/3732 2021-09-24 03:37:01+00:00|...

The vulnerability of the /core/feeds/custom.php component of the BigTree CMS content management system allows a hacker to execute arbitrary SQL queries.

The vulnerability of the /core/feeds/custom.php component of the BigTree CMS content management system is related to the lack of measures taken to protect the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL queries remotely...

Insecure Verication

libgrss is has insecure verification. The vulnerability exists due to a default behavior of SoupSessionSync which allows remote attackers to manipulate the contents of feeds without detection...

DEBIAN-CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

Heap overflow

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

UBUNTU-CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30508

Heap buffer overflow in Media Feeds in Google Chrome prior to 90.0.4430.212 allowed an attacker who convinced a user to enable certain features in Chrome to potentially exploit heap corruption via a crafted HTML page...

CVE-2021-30508

CVE-2021-30508 is a heap buffer overflow in Chrome/Chromium’s Media Feeds component, affecting Chromium before version 90.0.4430.212. The vulnerability could allow a remote attacker to trigger heap corruption via a crafted HTML page, potentially enabling arbitrary code execution. Public advisorie...

Fastspot BigTree SQL注入漏洞

BigTree CMS is an open source content management system based on PHP and MySQL. A SQL injection vulnerability exists in /core/feeds/custom.php in BigTree CMS 4.4.10 and earlier versions. An attacker can exploit this vulnerability to inject malicious SQL queries into the application via the 'Creat...

CVE-2020-12812

creationtimestamp| type| source ---|---|--- 2021-05-27 19:49:44+00:00| seen| MISP/98c0be2f-eadc-4ce5-9072-82ceacaea9c6 2021-07-29 17:59:02+00:00| seen| https://t.me/RussianOSINT/875 2021-10-25 22:30:42+00:00| seen| MISP/63ddead6-4b82-414c-ad8e-c516b950b446 2021-11-08 08:58:17+00:00| seen|...

CVE-2016-20011

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync...

CVE-2016-20011

libgrss through 0.7.0 fails to perform TLS certificate verification when downloading feeds, allowing remote attackers to manipulate the contents of feeds without detection. This occurs because of the default behavior of SoupSessionSync...