Remote spring: the rise of RDP bruteforce attacks

With the spread of COVID-19, organizations worldwide have introduced remote working, which is having a direct impact on cybersecurity and the threat landscape. Alongside the higher volume of corporate traffic, the use of third-party services for data exchange, and employees working on home...

CVE-2019-10609

creationtimestamp| type| source ---|---|--- 2020-04-16 17:02:25+00:00| seen| https://t.me/cibsecurity/11335 2026-01-20 08:04:52+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-14007

creationtimestamp| type| source ---|---|--- 2020-04-16 16:02:04+00:00| seen| https://t.me/cibsecurity/11324 2026-01-20 08:05:02+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2018-5802

An out-of-bounds read flaw was found in the way LibRaw processed images. An attacker could potentially use this flaw to crash applications using LibRaw by tricking them into processing crafted images...

Managing Team Burn Out

According to the World Health Organization: “Burn-out is a syndrome conceptualized as resulting from chronic workplace stress that has not been successfully managed. It is characterized by three dimensions: feelings of energy depletion or exhaustion increased mental distance from one’s job, or...

Redis - Replication Code Execution (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Redis Replication Code Execution', 'Description' = %q This module can be used to leverage the extension functionality added since Redis 4.0.0 to...

CVE-2019-20633

creationtimestamp| type| source ---|---|--- 2020-03-30 09:47:43+00:00| seen| https://t.me/cibsecurity/10818 2025-07-08 07:10:41+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2018-6952

creationtimestamp| type| source ---|---|--- 2020-03-30 09:47:43+00:00| seen| https://t.me/cibsecurity/10818 2020-03-30 10:20:16+00:00| seen| https://t.me/VulnerabilityNews/13420 2025-07-08 07:10:39+00:00| seen| https://infosec.exchange/users/certvde/statuses/114816361290443115 2025-07-08...

Securing the MSP: best practices for vetting cybersecurity vendors

Ironically, to keep costs low for their enterprise and mid-market clients, managed service providers MSPs are some of the most reliant on third-party vendors—including those providing security. While this is generally not an indication of dysfunction or vulnerability, the responsible MSP will be...

CVE-2019-10552

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:08+00:00| seen| https://t.me/cibsecurity/10307 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-10553

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:07+00:00| seen| https://t.me/cibsecurity/10306 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

CVE-2019-10554

creationtimestamp| type| source ---|---|--- 2020-03-05 14:07:06+00:00| seen| https://t.me/cibsecurity/10305 2026-01-20 08:04:55+00:00| seen| https://infosec.exchange/users/certvde/statuses/115926387351405846...

vitalsupport.cz Cross Site Scripting vulnerability

Security Researcher passc0de Helped patch 22 vulnerabilities Received 1 Coordinated Disclosure badges , a holder of 1 badges for responsible and coordinated disclosure, found a security vulnerability affecting vitalsupport.cz website and its users. Following coordinated and responsible...

CVE-2019-20288

This CVE entry is rejected/not used and does not represent an active vulnerability.

Podcast: The Roadblocks and Opportunities For Women in Cybersecurity

In 2019, diversity in the cybersecurity was thrust to the forefront with recognition from both vendors and experts. The tech industry is facing challenges around diversity in general, but women are particularly underrepresented. And with an estimated 3.5 million jobs are expected to remain unfill...

Top Zero Days, Data Breaches and Security Stories of 2019: News Wrap

From data breaches and the ransomware epidemic to new regulation and an outcry around data privacy, 2019 has been a wild ride for the infosec community. Threatpost breaks down the top news stories, trends and topics for this year. Listen to the full podcast or download direct. For a lightly-edite...

CVE-2019-1374

An information disclosure vulnerability exists in how Windows Error Reporting (WER) handles objects in memory. Multiple sources (NVD and Red Hat/SUSE advisories) identify it as a Windows in-memory handling issue that can expose sensitive information to an attacker with local access and user inter...

Restaurant Management System 1.0 - Remote Code Execution Exploit

Exploit for php platform in category web applications Exploit Title: Restaurant Management System 1.0 - Remote Code Execution Exploit Author: Ibad Shah Vendor Homepage: https://www.sourcecodester.com/users/lewa Software Link:...

What The Actual WAF!?

InfoSec Family, we need to talk!! Every so often, there is a technological shift in the information security industry. Sometimes it is due to new cyberattack discovery, aka a Zero-day. Many times, the catalyst is legacy technology. When a legacy technology no longer adequately responds to the...

DEF CON 27 retrospective: badge life redux

Kickstarter or DEF CON attendee? Be forewarned, this light overview contains some mild spoilers. If you want the purest “Da Bomb” experience with no web-based OSINT hints, read no further. I’m not revealing any earth-shattering secrets here, but figured it was worth mentioning. Also DEF CON is ov...