CVE-2018-19943

creationtimestamp| type| source ---|---|--- 2020-06-08 08:30:02+00:00| exploited| https://t.me/SecLabNews/7783 2023-06-14 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 22:15:20+00:00| seen| https://t.me/arpsyndicate/1042 2024-12-24 20:31:28+00:00| seen|...

Naviwebs Navigate CMS Cross-Site Scripting Vulnerability

Navigate CMS is an open source content management system CMS. A cross-site scripting vulnerability exists in the lib/packages/feeds/feed.class.php file in Navigate CMS 2.8.7 and earlier versions. The vulnerability stems from the WEB application lacking proper validation of client-side data. An...

XSS Vulnerability at jfinal cms comment feeds

jfinal cms is a java development of powerful information consulting website , using a simple and powerful JFinal as the web framework , template engine with beetl, database with mysql, front-end bootstrap framework. jfinal cms feedback at the existence of XSS vulnerability , an attacker can explo...

CVE-2019-7195

creationtimestamp| type| source ---|---|--- 2020-05-20 14:15:03+00:00| exploited| https://t.me/SecLabNews/7629 2020-05-23 19:40:04+00:00| published-proof-of-concept| https://t.me/cKure/629 2020-05-28 01:34:35+00:00| published-proof-of-concept| https://t.me/techb0ltGenona/1757 2020-06-10...

Microsoft Dynamics CRM 2011 Update Rollup 13

Microsoft Dynamics CRM 2011 Update Rollup 13 INTRODUCTION Update Rollup 13 for Microsoft Dynamics CRM 2011 is now available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

CVE-2020-11651

creationtimestamp| type| source ---|---|--- 2020-05-01 15:21:08+00:00| seen| https://t.me/thehackernews/685 2020-05-03 19:21:42+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/saltstack-salt-hallintakehikossa-kriittisia-haavoittuvuuksia 2020-05-04 12:06:14+00:00| exploited|...

CVE-2020-1631

creationtimestamp| type| source ---|---|--- 2020-04-30 10:30:02+00:00| seen| https://t.me/SecLabNews/7490 2020-10-13 06:50:38+00:00| seen| MISP/453274cf-e60d-452a-b88e-0bf6a5a6dae4 2020-10-13 15:16:18+00:00| seen| MISP/f628d96f-2958-4717-91da-e86aace4925d 2023-06-14 21:10:04+00:00| seen|...

NFL Tackles Cybersecurity Concerns Ahead of 2020 Draft Day

The NFL draft is slated to start Thursday, and thanks to the COVID-19 pandemic, it will be the first virtual version of the event ever presented. This raises a few cybersecurity concerns, according to researchers and the teams themselves — but the NFL is planning on knocking the security ball...

QRadar Community Edition 7.3.1.6 Server Side Request Forgery

------------------------------------------------------------------------ QRadar RssFeedItem Server-Side Request Forgery vulnerability ------------------------------------------------------------------------ Yorick Koster, September 2019...

CVE-2020-0968

creationtimestamp| type| source ---|---|--- 2020-04-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=468 2020-09-30 19:11:05+00:00| exploited| https://t.me/truesecator/996 2020-10-02 09:30:32+00:00| exploited| https://t.me/SecLabNews/8911 2020-10-05 11:04:07+00:00| seen|...

CVE-2020-6820

creationtimestamp| type| source ---|---|--- 2020-04-06 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=466 2021-11-08 08:58:19+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24...

CVE-2020-8468

creationtimestamp| type| source ---|---|--- 2020-03-18 10:15:02+00:00| exploited| https://t.me/SecLabNews/7124 2021-11-08 08:58:20+00:00| seen| MISP/f5030aca-7d5a-43a4-ae03-8f4ac8e85422 2021-11-20 09:53:52+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-03 19:00:03+00:00| seen|...

CVE-2020-0041

creationtimestamp| type| source ---|---|--- 2020-03-10 21:31:51+00:00| published-proof-of-concept| https://t.me/androidMalware/720 2020-03-12 04:37:48+00:00| published-proof-of-concept| https://t.me/antichat/8056 2020-03-31 00:02:42+00:00| published-proof-of-concept| https://t.me/R0Crew/1471...

CVE-2019-15949

creationtimestamp| type| source ---|---|--- 2020-03-10 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/48191 2021-03-26 23:19:21+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/nagiosxiscanner.rb 2021-04-14 00:06:12+00:00| seen...

CVE-2020-1938

creationtimestamp| type| source ---|---|--- 2020-02-28 19:26:21+00:00| published-proof-of-concept| https://t.me/thehackernews/618 2020-03-01 09:32:53+00:00| seen| https://t.me/informationsecuritychannel/35509 2020-03-03 17:01:44+00:00| exploited| https://t.me/SecLabNews/7011 2020-03-04...

[SECURITY] Fedora 31 Update: python-feedgen-0.9.0-1.fc31

Feedgenerator This module can be used to generate web feeds in both ATOM and RSS format. It has support for extensions. Included is for example an exten sion to produce Podcasts...

Fedora: Security Advisory for python-feedgen (FEDORA-2020-8493201e90)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-18426

creationtimestamp| type| source ---|---|--- 2020-02-04 21:30:02+00:00| seen| https://t.me/thehackernews/592 2020-02-04 23:18:44+00:00| seen| https://t.me/antichat/7809 2020-02-05 17:54:24+00:00| published-proof-of-concept| https://t.me/alexmakus/3268 2020-02-06 19:23:37+00:00|...

Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others

Internet-connected devices have been one of the most remarkable developments that have happened to humankind in the last decade. Although this development is a good thing, it also stipulates a high security and privacy risk to personal information. In one such recent privacy mishap, smart IP...

CVE-2014-4525

Cross-site scripting XSS vulnerability in magpie/scripts/magpieslashbox.php in the Ebay Feeds for WordPress plugin 1.1 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the rssurl parameter...