CVE-2021-47063

creationtimestamp| type| source ---|---|--- 2024-03-01 00:26:24+00:00| seen| https://t.me/ctinow/197158 2024-03-01 06:11:31+00:00| seen| https://t.me/ctinow/197295 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8...

China's MIIT Introduces Color-Coded Action Plan for Data Security Incidents

China's Ministry of Industry and Information Technology MIIT on Friday unveiled draft proposals detailing its plans to tackle data security events in the country using a color-coded system. The effort is designed to "improve the comprehensive response capacity for data security incidents, to ensu...

CVE-2023-24023

creationtimestamp| type| source ---|---|--- 2023-11-29 16:02:05+00:00| published-proof-of-concept| https://t.me/truesecator/5142 2023-11-29 18:09:25+00:00| published-proof-of-concept| https://t.me/SEReborn/4286 2023-11-29 18:46:00+00:00| seen|...

Magento Open Source allows Incorrect Authorization

Adobe Commerce versions 2.4.7-beta1 and earlier, 2.4.6-p2 and earlier, 2.4.5-p4 and earlier and 2.4.4-p5 and earlier are affected by an improper input validation vulnerability. An authenticated attacker can trigger an insecure direct object reference in the V1/customers/me endpoint to achieve...

GHSA-GFMM-WW6F-5MM5 Magento Open Source allows Improper Neutralization of Special Elements Used

Adobe Commerce versions 2.4.6 and earlier, 2.4.5-p2 and earlier and 2.4.4-p3 and earlier are affected by a Improper Neutralization of Special Elements Used in a Template Engine vulnerability that could lead to arbitrary code execution by an admin-privilege authenticated attacker. Exploitation of...

UBUNTU-CVE-2023-2977

A vulnerbility was found in OpenSC. This security flaw cause a buffer overrun vulnerability in pkcs15 cardoshaveverifyrcpackage. The attacker can supply a smart card package with malformed ASN1 context. The cardoshaveverifyrcpackage function scans the ASN1 buffer for 2 tags, where remaining lengt...

CVE-2022-41741 NGINX ngx_http_mp4_module vulnerability CVE-2022-41741

NGINX Open Source before versions 1.23.2 and 1.22.1, NGINX Open Source Subscription before versions R2 P1 and R1 P1, and NGINX Plus before versions R27 P1 and R26 P1 have a vulnerability in the module ngxhttpmp4module that might allow a local attacker to corrupt NGINX worker memory, resulting in...

steal 资源管理错误漏洞

steal is StealJS open source an extensible general-purpose module loader . It can load JavaScript modules defined in ES6, AMD and CommonJS formats. A security vulnerability exists in steal 2.2.4, which originates from a StealJS Regular Expression Denial of Service ReDoS via the source and...

CVE-2022-2131

OpenKM Community Edition in its 6.3.10 version and before was using XMLReader parser in XMLTextExtractor.java file without the required security flags, allowing an attacker to perform a XML external entity injection attack...

PyScript - Read Remote Python Source Code Vulnerability

Exploit Title: PyScript Remote Emscripten VMemory Python libraries Source Codes Read Exploit Author: Momen Eldawakhly Cyber Guy Vendor Homepage: https://pyscript.net/ Software Link: https://github.com/pyscript/pyscript Version: 2022-05-04-Alpha Tested on: Ubuntu Apache Server CVE : CVE-2022-30286...

CasaOS Command Injection Vulnerability

CasaOS is a simple, easy-to-use and elegant open source home cloud system. A command injection vulnerability exists in CasaOS versions prior to 0.2.7. The vulnerability stems from the failure of a networked system or product to properly filter special characters, commands, etc. from a user's inpu...

CVE-2021-38578

creationtimestamp| type| source ---|---|--- 2022-03-04 00:26:34+00:00| seen| https://t.me/cibsecurity/38394 2024-07-27 08:42:43+00:00| seen| https://vulnerability.circl.lu/comment/f5ac1ede-8d1c-409b-b6bc-ce202e11fc90 2025-04-23 19:05:19+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/13121...

BossCMS V1.1 Arbitrary File Download Vulnerability in Background

BossCMS is a safe, stable, good, permanent free open source, independent research and development of PHP framework for enterprise building system. BossCMS background arbitrary file download vulnerability, attackers can use the vulnerability to download any file in the server...

Snipe-IT Access Control Error Vulnerability

Snipe-IT is an open source IT asset/license management system. snipe-it is vulnerable to an access control error, and no details of the vulnerability are currently available...

CVE-2021-24917

creationtimestamp| type| source ---|---|--- 2021-12-06 18:20:50+00:00| seen| https://t.me/cibsecurity/33379 2021-12-15 23:35:23+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/wpwpshideloginrevealer.rb 2025-02-06 03:13:45+00:00| seen|...

CVE-2020-9273

creationtimestamp| type| source ---|---|--- 2021-08-10 17:45:17+00:00| published-proof-of-concept| Telegram/EshvxTBzDj9BA-rtoAPVbndHWSd4zkw70GiVoNCz-Z94Wo 2023-12-02 02:53:38+00:00| seen| https://t.me/arpsyndicate/884 2024-03-13 13:46:38+00:00| published-proof-of-concept|...

CVE-2020-36239

creationtimestamp| type| source ---|---|--- 2021-07-22 08:36:14+00:00| seen| https://t.me/cKure/6261 2021-07-22 18:24:23+00:00| seen| https://t.me/BleepingComputer/10187 2021-07-29 14:14:13+00:00| seen| https://t.me/cibsecurity/26565 2021-08-04 11:28:13+00:00| published-proof-of-concept|...

CVE-2021-30713

creationtimestamp| type| source ---|---|--- 2021-05-25 08:39:19+00:00| exploited| https://t.me/SecLabNews/10258 2021-05-25 12:03:30+00:00| exploited| https://t.me/truesecator/1747 2021-05-25 12:39:33+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus17/2021 2021-05-27...

Logic Flaw Vulnerability in ZZCMS Backend

ZZCMS is a completely open source based on PHP, ASP's product investment website management system , project investment website management system , enterprise website management system . ZZCMS back-end logic flaws vulnerabilities. Attackers can use the vulnerability to perform unauthorized...

Arbitrary file deletion vulnerability in Bacardi CMS pi***.php page

Bacardi CMS micro-mall is a free and open source object-oriented multi-store multi-user micro-mall PHP development framework , created in June 2014 , follow the Apache Licence2 open source agreement released , is to quickly simplify the development of enterprise micro-mall applications , to help...