CVE-2019-0863

creationtimestamp| type| source ---|---|--- 2019-05-15 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=391 2019-05-15 15:45:13+00:00| exploited| https://t.me/CyberGovIL/451 2019-05-23 15:16:05+00:00| seen| https://t.me/ctinow/11701 2019-07-04 06:07:15+00:00|...

Cynet Provides Security Responders with Free IR Tool to Validate and Respond to Active Threats

Organizations that suspect an active threat or breach have two options: calling an external incident response provider to manage the investigation and response or trying to handle it internally with their own resources. Cynet is now introducing a free IR offering that caters to both scenarios – a...

2 Million IoT Devices Vulnerable to Complete Takeover

Over 2 million IP security cameras, baby monitors and smart doorbells have serious vulnerabilities that could enable an attacker to hijack the devices and spy on their owners — and there’s currently no known patch for the shared flaws. The attack stems from peer-to-peer P2P communication technolo...

Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform

A cybersecurity professional today demonstrated a long-known unpatched weakness in Microsoft's Azure cloud service by exploiting it to take control over Windows Live Tiles, one of the key features Microsoft built into Windows 8 operating system. Introduced in Windows 8, the Live tiles feature was...

Spycams Secretly Live-Streamed 1,600 Motel Guests

Four people have been arrested for taking secret videos of guests at motels and live-streaming them to paying audiences. According to Seoul police, the perps filmed about 1,600 motel guests in the past year in various states of undress and having sex. They did so with tiny wireless spy cameras se...

CVE-2019-1003029

creationtimestamp| type| source ---|---|--- 2019-03-18 12:37:31+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/jenkinsmetaprogramming.rb 2019-05-05 19:20:03+00:00| seen| MISP/5ccf3134-ea64-43c1-a356-f9f3950d210f 2022-07-31 07:01:12+00:00|...

CVE-2019-0797

creationtimestamp| type| source ---|---|--- 2019-03-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=371 2019-03-13 10:23:16+00:00| exploited| https://t.me/CyberGovIL/381 2019-03-13 11:06:25+00:00| seen| https://t.me/ctinow/9125 2019-03-13 15:20:45+00:00| exploited|...

CVE-2018-20250

creationtimestamp| type| source ---|---|--- 2019-02-21 09:29:06+00:00| exploited| https://t.me/DC8044Info/97 2019-02-22 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46552 2019-03-20 05:01:35+00:00| exploited| https://t.me/informationsecuritychannel/25668 2019-04-10 17:08:04+00:0...

CVE-2019-6340

creationtimestamp| type| source ---|---|--- 2019-02-21 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=366 2019-02-21 10:04:49+00:00| seen| https://t.me/SecLabNews/4314 2019-02-21 16:28:00+00:00| seen| https://t.me/CyberGovIL/361 2019-02-22 14:49:00+00:00| seen|...

CVE-2018-14933

creationtimestamp| type| source ---|---|--- 2019-02-07 05:01:42+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/nuuonvrminiupgraderce.rb 2019-02-11 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/46340 2024-12-18 16:16:48+00:00|...

GitLab: Guests Will Disclose the Private Project Full Activity Via Project Activity Feeds

Hello! Here guests will disclose the complete activity of the project via feeds Reproduction Steps: Create Private Project. Invite Attacker as Guest. Next attacker will go to https://gitlab.com/victimyoursz/helloproject/activity and he access the feeds link...

The vulnerability of the Feeds component in the Oracle PeopleSoft Enterprise PeopleTools business application suite allows attackers to disclose protected information.

The vulnerability of the Feeds component in the Oracle PeopleSoft Enterprise PeopleTools business application suite is related to security mechanism failures. Exploiting this vulnerability could allow an attacker, operating remotely, to disclose sensitive information using the HTTP protocol...

CVE-2019-2408

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Feeds. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2408

CVE-2019-2408 affects the Oracle PeopleSoft Enterprise PeopleTools component, subcomponent Feeds, with affected versions 8.55, 8.56, and 8.57. The vulnerability is exploitable over a network via HTTP and unauthenticated access is possible, but exploitation requires human interaction from a user o...

Unspecified Vulnerability in Oracle PeopleSoft Enterprise PeopleTools (CNVD-2019-28459)

Oracle PeopleSoft Products is a suite of enterprise human capital management solutions from Oracle that provides human capital management, financial management, supplier relationship management, and more.PeopleSoft Enterprise PeopleTools is one of the tools and technology platform components that...

Ox App Suite 7.8.4 / 7.8.3 XSS / CSRF / Information Disclosure

Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs open-xchange, dovecot, powerdns at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH Product:...

Malcom - Malware Communications Analyzer

Malcom is a tool designed to analyze a system's network communication using graphical representations of network traffic, and cross-reference them with known malware sources. This comes handy when analyzing how certain malware species try to communicate with the outside world. What is Malcom?...

Osweep - Don't Just Search OSINT, Sweep It

If you work in IT security, then you most likely use OSINT to help you understand what it is that your SIEM alerted you on and what everyone else in the world understands about it. More than likely you are using more than one OSINT service because most of the time OSINT will only provide you with...

CVE-2018-19864

NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow, resulting in ability to read camera feeds or reconfigure the device...

CVE-2018-19864

NUUO NVRmini2 Network Video Recorder firmware through 3.9.1 allows remote attackers to execute arbitrary code or cause a denial of service buffer overflow, resulting in ability to read camera feeds or reconfigure the device...