CVE-2021-36454

Cross Site Scripting XSS vulnerability in Naviwebs Navigate Cms 2.9 via the navigate-quickse parameter to 1 backups\backups.php, 2 blocks\blocks.php, 3 brands\brands.php, 4 comments\comments.php, 5 coupons\coupons.php, 6 feeds\feeds.php, 7 functions\functions.php, 8 items\items.php, 9...

OPENSUSE-SU-2021:1091-1 Security update for MozillaThunderbird

This update for MozillaThunderbird fixes the following issues: Mozilla Thunderbird 78.12 fixed: Sending an email containing HTML links with spaces in the URL sometimes resulted in broken links fixed: Folder Pane display theme fixes for macOS fixed: Chat account settings did not always save as...

CVE-2021-36741

creationtimestamp| type| source ---|---|--- 2021-07-30 00:14:36+00:00| seen| https://t.me/cibsecurity/26581 2021-08-13 05:19:44+00:00| exploited| https://t.me/cKure/6595 2021-08-13 18:53:59+00:00| exploited| https://t.me/truesecator/2002 2021-11-08 08:58:20+00:00| seen|...

CVE-2021-36934

creationtimestamp| type| source ---|---|--- 2021-07-21 08:58:01+00:00| seen| https://t.me/thehackernews/1386 2021-07-21 12:05:02+00:00| seen| https://t.me/devukraine/178 2021-07-21 14:22:34+00:00| seen| https://t.me/CyberGovIL/1301 2021-07-21 15:18:22+00:00| published-proof-of-concept|...

ARTIF - An Advanced Real Time Threat Intelligence Framework To Identify Threats And Malicious Web Traffic On The Basis Of IP Reputation And Historical Data.

ARTIF is a new advanced real time threat intelligence framework built that adds another abstraction layer on the top of MISP to identify threats and malicious web traffic on the basis of IP reputation and historical data. It also performs automatic enrichment and threat scoring by collecting,...

CVE-2021-34448

creationtimestamp| type| source ---|---|--- 2021-07-14 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=608 2021-07-14 16:59:39+00:00| seen| https://t.me/truesecator/1917 2021-07-15 10:13:10+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus21/2021...

CVE-2021-35211

creationtimestamp| type| source ---|---|--- 2021-07-13 03:58:06+00:00| exploited| https://t.me/alexmakus/4168 2021-07-13 06:01:30+00:00| exploited| https://t.me/thehackernews/1360 2021-07-13 10:04:42+00:00| exploited| https://t.me/cKure/6165 2021-07-13 11:03:35+00:00| seen|...

Exploit for Server-Side Request Forgery in Mooveagency Import_Xml_And_Rss_Feeds

CVE-2020-24148 Server-side request forgery SSRF in the Impo...

CVE-2020-24148

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

CVE-2020-24148

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

Server side request forgery (ssrf)

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

CVE-2020-24148

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

CVE-2020-24148

The CVE-2020-24148 entry is concrete: WordPress Import XML and RSS Feeds (import-xml-feed) plugin is affected up to version 2.0.1. The flaw is a server-side request forgery (SSRF) via the data parameter in the moove_read_xml action, implemented when the plugin fetches a URL using data as input (v...

CVE-2020-24148: Server-Side Request Forgery (SSRF)

Server-side request forgery SSRF in the Import XML and RSS Feeds import-xml-feed plugin 2.0.1 for WordPress via the data parameter in a moovereadxml action...

Use of deprecated Chainlink API

Handle 0xRajeev Vulnerability details Impact The contracts use Chainlink’s deprecated API latestAnswer. Such functions might suddenly stop working if Chainlink stopped supporting deprecated APIs. Impact: Deprecated API stops working. Prices cannot be obtained. Protocol stops and contracts have to...

CVE-2021-1675

creationtimestamp| type| source ---|---|--- 2021-06-29 16:49:28+00:00| exploited| https://t.me/truesecator/1866 2021-06-29 17:45:58+00:00| published-proof-of-concept| https://t.me/antichat/9768 2021-06-29 19:16:26+00:00| seen| https://t.me/ctinow/36051 2021-06-30 10:31:32+00:00|...

PT-2021-19981

Name of the Vulnerable Software and Affected Versions ThroughTek P2P products versions prior to 3.1.5 ThroughTek P2P products with nossl tag ThroughTek P2P products with device firmware not using AuthKey for IOTC connection ThroughTek P2P products with firmware using AVAPI module without enabling...

CVE-2021-30761

creationtimestamp| type| source ---|---|--- 2021-06-15 07:49:16+00:00| exploited| https://t.me/cKure/5915 2021-06-16 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=599 2021-06-21 17:35:35+00:00| exploited| https://t.me/androidMalware/1231 2021-11-08 08:58:17+00:00| seen|...

CVE-2021-30762

creationtimestamp| type| source ---|---|--- 2021-06-15 07:49:16+00:00| exploited| https://t.me/cKure/5915 2021-06-16 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=599 2021-06-21 17:35:35+00:00| exploited| https://t.me/androidMalware/1231 2021-11-08 08:58:17+00:00| seen|...

ThroughTek P2P SDK

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: ThroughTek Equipment: P2P SDK Vulnerability: Cleartext Transmission of Sensitive Information 2. RISK EVALUATION ThroughTek supplies multiple original equipment manufacturers of IP cameras with P2P...