UBUNTU-CVE-2021-41136

Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using puma with a proxy which forwards HTTP header values which contain the LF character could allow HTTP request smugggling. A client could smuggle a request through a proxy, causing the proxy to send a...

CVE-2021-41136

Puma is a HTTP 1.1 server for Ruby/Rack applications. Prior to versions 5.5.1 and 4.3.9, using puma with a proxy which forwards HTTP header values which contain the LF character could allow HTTP request smugggling. A client could smuggle a request through a proxy, causing the proxy to send a...

CVE-2021-30869

creationtimestamp| type| source ---|---|--- 2021-09-24 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=658 2021-09-24 06:47:09+00:00| exploited| https://t.me/thehackernews/1537 2021-09-24 07:45:25+00:00| exploited| https://t.me/auraxchan/26994 2021-09-24 11:00:34+00:00|...

CVE-2021-22017

creationtimestamp| type| source ---|---|--- 2021-09-23 16:29:48+00:00| seen| https://t.me/cibsecurity/29284 2023-06-14 21:10:04+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-12-05 02:09:02+00:00| seen| https://t.me/arpsyndicate/1364 2024-12-24 20:25:55+00:00| seen|...

CVE-2021-22941

creationtimestamp| type| source ---|---|--- 2021-09-21 12:50:00+00:00| published-proof-of-concept| https://t.me/ptswarm/73 2021-09-21 23:19:50+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/5672 2021-09-22 08:23:35+00:00| published-proof-of-concept| https://t.me/HackerOne/3190...

CVE-2021-24511 Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

The fetchproductajax functionality in the Product Feed on WooCommerce WordPress plugin before 3.3.1.0 uses a productid POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection...

CVE-2021-30633

creationtimestamp| type| source ---|---|--- 2021-09-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=647 2021-09-14 10:58:48+00:00| exploited| https://t.me/truesecator/2098 2021-09-14 13:18:38+00:00| exploited| https://t.me/SecLabNews/10863 2021-09-17 04:00:00+00:00| see...

CVE-2021-30858

creationtimestamp| type| source ---|---|--- 2021-09-13 17:41:24+00:00| exploited| https://t.me/alexmakus/4286 2021-09-13 21:38:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2021 2021-09-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=646...

CVE-2021-30860

creationtimestamp| type| source ---|---|--- 2021-09-13 17:41:24+00:00| exploited| https://t.me/alexmakus/4286 2021-09-13 20:48:27+00:00| exploited| https://t.me/cKure/7075 2021-09-13 21:38:00+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus27/2021 2021-09-14 00:07:44+00:00|...

Important: Red Hat Security Advisory: cyrus-imapd security update

An update for cyrus-imapd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability fr...

Power Apps OData Feeds Detected

Microsoft Power Apps is a low-code development platform designed to help users build rich web and mobile applications. Power Apps enables users to publish table data as OData feeds, providing a RESTful web service by default available to any user. The scanner detected the presence of public data ...

CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

Remote code execution

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

CVE-2021-40531: Unrestricted Upload of File with Dangerous Type

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app...

PT-2021-22925

Name of the Vulnerable Software and Affected Versions Sketch versions prior to 75 Description The issue allows library feeds to be used to bypass file quarantine, resulting in remote code execution. This can be achieved by using a CommandString in a terminal profile to Terminal.app, allowing file...

Army Testing Facial Recognition in Child-Care Centers

Live video feeds of daycare centers are common, but the Army wants to take their kid-monitoring capabilities to the next level. Under a new pilot program being rolled out at a Fort Jackson, S.C. child-care center, the military is looking for service providers to layer commercially available facia...

Create WooCommerce Product Feeds For 40+ Merchants < 3.3.1.0 - Authenticated SQL Injection

The fetchproductajax functionality in the plugin uses a productid POST parameter which is not properly sanitised, escaped or validated before inserting to a SQL statement, leading to SQL injection. POST /wp-admin/admin-ajax.php HTTP/1.1 Content-Length: 162 Accept: / X-Requested-With: XMLHttpReque...

CVE-2021-36948

creationtimestamp| type| source ---|---|--- 2021-08-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=628 2021-08-11 18:46:50+00:00| seen| https://t.me/truesecator/1993 2021-08-12 15:03:50+00:00| seen| https://t.me/sysodmins/12669 2021-08-12 22:39:58+00:00| seen|...