Vulnerabilities

CVE-2021-24146

March 24, 2021

Lack of authorisation checks in the Modern Events Calendar Lite WordPress plugin, versions before 5.16.5, did not properly restrict access to the export files, allowing unauthenticated users to exports all events data in CSV or XML format for example.

Summary:

Reference Links(if available):

https://wpscan.com/vulnerability/c7b1ebd6-3050-4725-9c87-0ea525f8fecc

CVSS Score (if available)

v2: / MEDIUM

v3: /

Links to Exploits(if available)

Tags: CONFIRM, CVE, CVE-2021-24146, exploit, vulnerability

CVE-2021-24146

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts

CISA: CISA Releases Three Industrial Control Systems Advisories

Summary:

Reference Links(if available):

CVSS Score (if available)

Links to Exploits(if available)

You may have missed

Active Exploitation of Vulnerabilities in Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) Products.

CACTUS Ransomware Victim: https://www[.]ghimli[.]com /

Cisco Products Multiple Vulnerabilities

T2 – 94,584 breached accounts

CISA: CISA Releases Three Industrial Control Systems Advisories