3624 matches found
PT-2022-7613 · Linux +3 · Linux Kernel +3
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to the fix commit Description: The issue is related to a NULL pointer dereference in the zynq qspi exec mem op function. This occurs because kzalloc is directly used in memset, which could lead to a NULL pointer...
CVE-2021-44427
creationtimestamp| type| source ---|---|--- 2021-11-30 00:33:35+00:00| seen| https://t.me/cibsecurity/33073 2024-01-15 12:15:47+00:00| seen| https://t.me/arpsyndicate/2782 2024-11-22 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-22 2024-12-24 00:00:00+00:00| see...
CVE-2021-35534
creationtimestamp| type| source ---|---|--- 2021-11-18 20:15:48+00:00| seen| https://t.me/cibsecurity/32632 2025-03-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-065-02...
CVE-2021-39211
creationtimestamp| type| source ---|---|--- 2021-09-15 20:22:08+00:00| seen| https://t.me/cibsecurity/28921 2024-11-04 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-04 2024-11-05 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-11-05...
Design/Logic Flaw
A Shell Metacharacter Injection vulnerability in result.php in DRK Odenwaldkreis Testerfassung March-2021 allow an attacker with a valid token of a COVID-19 test result to execute shell commands with the permissions of the web server...
CVE-2021-35061
Multiple cross-site scripting XSS vulnerabilities in DRK Odenwaldkreis Testerfassung March-2021 allow remote attackers to inject arbitrary web script or HTML via all parameters to HTML form fields in all components...
DRK Odenwaldkreis Testerfassung 操作系统命令注入漏洞
DRK Odenwaldkreis Testerfassung is an open source solution for obtaining and documenting corona antigen rapid test results. DRK Odenwaldkreis Testerfassung March-2021 An operating system command injection vulnerability, which originates in the application's results.php Shell metacharacter injecti...
CVE-2021-29441
creationtimestamp| type| source ---|---|--- 2021-08-25 13:22:18+00:00| seen| https://t.me/truesecator/2035 2021-10-28 16:23:30+00:00| published-proof-of-concept| https://github.com/google/tsunami-security-scanner-plugins/tree/master/community/detectors/nacoscve202129441 2023-12-08 13:07:04+00:00|...
Titan Framework <= 1.12.1 - Reflected Cross-Site Scripting (XSS)
Description The iframe-font-preview.php file of the titan-framework does not properly escape the font-weight and font-family GET parameters before outputting them back in an href attribute, leading to Reflected Cross-Site Scripting issues Edit WPScanTeam: - The original report mentioned the issue...
August 3, 2021, update for Visio 2016 (KB4504718)
None None...
CVE-2021-21985
creationtimestamp| type| source ---|---|--- 2021-05-26 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=591 2021-05-26 07:59:34+00:00| seen| https://t.me/thehackernews/1242 2021-05-26 11:23:27+00:00| seen| https://t.me/truesecator/1751 2021-05-26 19:05:27+00:00| seen|...
Audio equipment giant Bose hit by ransomware attack, data breach
By Deeba Ahmed The audio equipment manufacturer Bose has confirmed that it was a victim of a ransomware attack and experience a data breach on 7 March 2021. This is a post from HackRead.com Read the original post: Audio equipment giant Bose hit by ransomware attack, data breach...
TeamTNT Targets Kubernetes, Nearly 50,000 IPs Compromised in Worm-like Attack
We have found and confirmed close to 50,000 IPs compromised by this attack perpetrated by TeamTNT across multiple clusters. Several IPs were repeatedly exploited during the timeframe of the episode, occurring between March and May...
WordPress Captchinoo, Google recaptcha for admin login page plugin <= 2.3 - Arbitrary Plugin Installation and Activation vulnerability
Arbitrary Plugin Installation and Activation vulnerability discovered by Bugbang in WordPress Captchinoo, Google recaptcha for admin login page plugin versions = 2.3. Solution This plugin has been closed as of March 23, 2021 and is not available for download. This closure is temporary, pending a...
Gambling, Streaming Traffic Up During Men's College Basketball Tourney
Gambling industry-related web traffic delivered by Akamai jumped 31% over the category average for all of Q4 2020 on March 31st...
A Spike in BazarCall and IcedID Activity Detected in March
We discuss the cases of BazarCall and IcedID we observed in March. Both are known for the use of spam to deliver their payloads...
Gigaset Android Update Server Hacked to Install Malware on Users' Devices
Gigaset has revealed a malware infection discovered in its Android devices was the result of a compromise of a server belonging to an external update service provider. Impacting older smartphone models — GS100, GS160, GS170, GS180, GS270 plus, and GS370 plus series — the malware took the form of...
Threat Roundup for March 26 to April 2
Today, Talos is publishing a glimpse into the most prevalent threats we've observed between March 26 and April 2. As with previous roundups, this post isn't meant to be an in-depth analysis. Instead, this post will summarize the threats we've observed by highlighting key behavioral...
