Month: September 2021

A vulnerability, which was classified as problematic, has been found in Huawei EMUI and Magic UI. Affected by this issue is some unknown functionality of the component displayengine. The manipulation [...]

CVE-2023-39351 | FreeRDP up to 2.10.x/3.0.0-beta2 rfx_process_message_tileset null pointer dereference (GHSA-q9x9-cqjc-rgwq)

27 September 2023

A vulnerability was found in FreeRDP up to 2.10.x/3.0.0-beta2. It has been classified as problematic. Affected is the function rfx_process_message_tileset. The manipulation leads to null pointer dereference. This vulnerability is [...]

CVE-2023-39350 | FreeRDP up to 2.10.x/3.0.0-beta2 integer underflow (GHSA-rrrv-3w42-pffh)

27 September 2023

A vulnerability was found in FreeRDP up to 2.10.x/3.0.0-beta2 and classified as problematic. This issue affects some unknown processing. The manipulation leads to integer underflow. The identification of this vulnerability [...]

CVE-2023-40589 | FreeRDP up to 2.10.x/3.0.0-beta2 ncrush_decompress buffer overflow (GHSA-gc34-mw6m-g42x)

27 September 2023

A vulnerability has been found in FreeRDP up to 2.10.x/3.0.0-beta2 and classified as critical. This vulnerability affects the function ncrush_decompress. The manipulation leads to buffer overflow. This vulnerability was named [...]

CVE-2023-40181 | FreeRDP up to 2.10.x/3.0.0-beta2 zgfx_decompress_segment out-of-bounds (GHSA-mxp4-rx7x-h2g8)

27 September 2023

A vulnerability, which was classified as problematic, was found in FreeRDP up to 2.10.x/3.0.0-beta2. This affects the function zgfx_decompress_segment. The manipulation leads to out-of-bounds read. This vulnerability is uniquely identified [...]

CVE-2023-29447 | PTC Kepware KepServerEX/ThingWorx Kepware Server up to 6.14.263.0 insufficiently protected credentials (icsa-23-243-03)

27 September 2023

A vulnerability classified as problematic has been found in PTC Kepware KepServerEX and ThingWorx Kepware Server up to 6.14.263.0. Affected is an unknown function. The manipulation leads to insufficiently protected [...]

CVE-2023-29446 | PTC Kepware KepServerEX/ThingWorx Kepware Server up to 6.14.263.0 Project File input validation (icsa-23-243-03)

27 September 2023

A vulnerability was found in PTC Kepware KepServerEX and ThingWorx Kepware Server up to 6.14.263.0. It has been rated as problematic. This issue affects some unknown processing of the component [...]

CVE-2023-29445 | PTC Kepware KepServerEX/ThingWorx Kepware Server up to 6.14.263.0 uncontrolled search path (icsa-23-243-03)

27 September 2023

A vulnerability was found in PTC Kepware KepServerEX and ThingWorx Kepware Server up to 6.14.263.0. It has been declared as critical. This vulnerability affects unknown code. The manipulation leads to [...]

CVE-2023-29444 | PTC Kepware KepServerEX/ThingWorx Kepware Server up to 6.14.263.0 uncontrolled search path (icsa-23-243-03)

27 September 2023

A vulnerability was found in PTC Kepware KepServerEX and ThingWorx Kepware Server up to 6.14.263.0. It has been classified as critical. This affects an unknown part. The manipulation leads to [...]

CVE-2023-4487 | GE Digital CIMPLICITY 2023 Configuration File process control (icsa-23-243-02)

27 September 2023

A vulnerability was found in GE Digital CIMPLICITY 2023 and classified as critical. Affected by this issue is some unknown functionality of the component Configuration File Handler. The manipulation leads [...]

CVE-2023-4299 | Digi RealPort for Windows RealPort Protocol unknown vulnerability (icsa-23-243-04)

27 September 2023

A vulnerability has been found in Digi RealPort for Windows, RealPort for Linux, ConnectPort TS 8, ConnectPort TS 16, Passport Console Server, ConnectPort LTS 8, ConnectPort LTS 16, ConnectPort LTS [...]

CVE-2023-4485 | ARDEREG Sistemas SCADA sql injection (icsa-23-243-01)

27 September 2023

A vulnerability, which was classified as critical, was found in ARDEREG Sistemas SCADA. Affected is an unknown function. The manipulation leads to sql injection. This vulnerability is traded as CVE-2023-4485. [...]

CVE-2023-41642 | GruppoSCAI RealGimm 1.1.37p38 ErroreNonGestito.aspx VIEWSTATE cross site scripting

27 September 2023

A vulnerability was found in GruppoSCAI RealGimm 1.1.37p38. It has been classified as problematic. Affected is an unknown function of the file ErroreNonGestito.aspx. The manipulation of the argument VIEWSTATE leads [...]

CVE-2023-4238 | Prevent Files Access Plugin up to 2.5.1 on WordPress mo_media_restrict_page unrestricted upload

27 September 2023

A vulnerability was found in Prevent Files Access Plugin up to 2.5.1 on WordPress and classified as problematic. This issue affects the function mo_media_restrict_page. The manipulation leads to unrestricted upload. [...]

CVE-2023-41638 | GruppoSCAI RealGimm 1.1.37p38 Documentale Module unrestricted upload

27 September 2023

A vulnerability has been found in GruppoSCAI RealGimm 1.1.37p38 and classified as problematic. This vulnerability affects unknown code of the component Documentale Module. The manipulation leads to unrestricted upload. This [...]

CVE-2023-41717 | Zscaler Proxy up to 3.6.1.25 File unrestricted upload

27 September 2023

A vulnerability, which was classified as problematic, was found in Zscaler Proxy up to 3.6.1.25. This affects an unknown part of the component File Handler. The manipulation leads to unrestricted [...]

CVE-2022-46868 | Acronis Cyber Protect Home Office on Windows Recovery external reference

27 September 2023

A vulnerability, which was classified as problematic, has been found in Acronis Cyber Protect Home Office on Windows. Affected by this issue is some unknown functionality of the component Recovery [...]

CVE-2023-4683 | GPAC up to 2.2 null pointer dereference

27 September 2023

A vulnerability classified as problematic was found in GPAC up to 2.2. Affected by this vulnerability is an unknown functionality. The manipulation leads to null pointer dereference. This vulnerability is [...]

CVE-2023-4682 | GPAC up to 2.2 heap-based overflow

27 September 2023

A vulnerability classified as critical has been found in GPAC up to 2.2. Affected is an unknown function. The manipulation leads to heap-based buffer overflow. This vulnerability is traded as [...]

CVE-2023-4678 | GPAC up to 2.2 divide by zero

27 September 2023

A vulnerability was found in GPAC up to 2.2. It has been rated as problematic. This issue affects some unknown processing. The manipulation leads to divide by zero. The identification [...]

CVE-2023-41637 | GruppoSCAI RealGimm 1.1.37p38 Carica Immagine unrestricted upload

27 September 2023

A vulnerability was found in GruppoSCAI RealGimm 1.1.37p38. It has been declared as problematic. This vulnerability affects unknown code of the component Carica Immagine Handler. The manipulation leads to unrestricted [...]

CVE-2023-31174 | Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator prior 4.5.0.20 cross-site request forgery

27 September 2023

A vulnerability was found in Schweitzer Engineering Laboratories SEL-5037 SEL Grid Configurator. It has been classified as problematic. This affects an unknown part. The manipulation leads to cross-site request forgery. [...]

CVE-2023-4681 | GPAC up to 2.2 null pointer dereference

27 September 2023

A vulnerability was found in GPAC up to 2.2 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation leads to null pointer dereference. This vulnerability [...]

CVE-2023-41744 | Acronis Agent/Cyber Protect Library signature verification

27 September 2023

A vulnerability has been found in Acronis Agent and Cyber Protect and classified as critical. Affected by this vulnerability is an unknown functionality of the component Library Handler. The manipulation [...]

CVE-2023-41743 | Acronis Cyber Protect Home Office/Agent/Cyber Protect Driver privileges management

27 September 2023

A vulnerability, which was classified as critical, was found in Acronis Cyber Protect Home Office, Agent and Cyber Protect. Affected is an unknown function of the component Driver. The manipulation [...]

CVE-2023-44080

27 September 2023

An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component. (CVSS:0.0) (Last Update:2023-09-27 22:15:12) [...]

CVE-2023-43660

27 September 2023

Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending [...]

CVE-2023-43192

27 September 2023

SQL injection can exist in a newly created part of the JFinalcms background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy [...]

CVE-2023-4066

27 September 2023

A flaw was found in Red Hat's AMQ Broker, which stores certain passwords in a secret security-properties-prop-module, defined in ActivemqArtemisSecurity CR; however, they are shown in plaintext in the StatefulSet [...]

CVE-2023-40026

27 September 2023

Argo CD is a declarative continuous deployment framework for Kubernetes. In Argo CD versions prior to 2.3 (starting at least in v0.1.0, but likely in any version using Helm before [...]

CVE-2023-42818

27 September 2023

JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. [...]

CVE-2023-43651

27 September 2023

JumpServer is an open source bastion host. An authenticated user can exploit a vulnerability in MongoDB sessions to execute arbitrary commands, leading to remote code execution. This vulnerability may further [...]

CVE-2023-43656

27 September 2023

matrix-hookshot is a Matrix bot for connecting to external services like GitHub, GitLab, JIRA, and more. Instances that have enabled transformation functions (those that have `generic.allowJsTransformationFunctions` in their config), may [...]

CVE-2023-44048

27 September 2023

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category. (CVSS:0.0) (Last Update:2023-09-27 22:15:12) [...]

CVE-2023-44047

27 September 2023

Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection. (CVSS:0.0) (Last Update:2023-09-27 22:15:11) [...]

CVE-2023-43650

27 September 2023

JumpServer is an open source bastion host. The verification code for resetting user's password is vulnerable to brute-force attacks due to the absence of rate limiting. JumpServer provides a feature [...]

CVE-2023-4523

27 September 2023

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. [...]

CVE-2023-43652

27 September 2023

JumpServer is an open source bastion host. As an unauthenticated user, it is possible to authenticate to the core API with a username and an SSH public key without needing [...]

CVE-2023-33972

27 September 2023

Scylladb is a NoSQL data store using the seastar framework, compatible with Apache Cassandra. Authenticated users who are authorized to create tables in a keyspace can escalate their privileges to [...]

CVE-2023-20252

27 September 2023

A vulnerability in the Security Assertion Markup Language (SAML) APIs of Cisco Catalyst SD-WAN Manager Software could allow an unauthenticated, remote attacker to gain unauthorized access to the application as [...]

CVE-2023-20253

27 September 2023

A vulnerability in the command line interface (cli) management interface of Cisco SD-WAN vManage could allow an authenticated, local attacker to bypass authorization and allow the attacker to roll back [...]

CVE-2023-20254

27 September 2023

A vulnerability in the session management system of the Cisco Catalyst SD-WAN Manager multi-tenant feature could allow an authenticated, remote attacker to access another tenant that is being managed by [...]

CVE-2023-20262

27 September 2023

A vulnerability in the SSH service of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote attacker to cause a process crash, resulting in a DoS condition for SSH access [...]

CVE-2023-5184

27 September 2023

Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers. (CVSS:7.0) (Last Update:2023-09-27 18:31:27) [...]

CVE-2023-42822

27 September 2023

xrdp is an open source remote desktop protocol server. Access to the font glyphs in xrdp_painter.c is not bounds-checked . Since some of this data is controllable by the user, [...]

CVE-2023-20268

27 September 2023

A vulnerability in the packet processing functionality of Cisco access point (AP) software could allow an unauthenticated, adjacent attacker to exhaust resources on an affected device. This vulnerability is due [...]

CVE-2023-20186

27 September 2023

A vulnerability in the Authentication, Authorization, and Accounting (AAA) feature of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, remote attacker to bypass command authorization and [...]

CVE-2023-20179

27 September 2023

A vulnerability in the web-based management interface of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, remote attacker to inject HTML content. This vulnerability is due [...]

CVE-2023-20202

27 September 2023

A vulnerability in the Wireless Network Control daemon (wncd) of Cisco IOS XE Software for Wireless LAN Controllers could allow an unauthenticated, adjacent attacker to cause a denial of service [...]

CVE-2023-20187

27 September 2023

A vulnerability in the Multicast Leaf Recycle Elimination (mLRE) feature of Cisco IOS XE Software for Cisco ASR 1000 Series Aggregation Services Routers could allow an unauthenticated, remote attacker to [...]

CVE-2023-43314

27 September 2023

Buffer Overflow vulnerability in ZYXEL ZYXEL v.PMG2005-T20B allows a remote attacker to cause a denial of service via a crafted script to the uid parameter in the cgi-bin/login.asp component. [...]

CVE-2023-43320

27 September 2023

An issue in Proxmox Server Solutions GmbH Proxmox VE v.5.4 thru v.8.0, Proxmox Backup Server v.1.1 thru v.3.0, and Proxmox Mail Gateway v.7.1 thru v.8.0 allows a remote authenticated attacker [...]

CVE-2023-43233

27 September 2023

A stored cross-site scripting (XSS) vulnerability in the cms/content/edit component of YZNCMS v1.3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title [...]

CVE-2023-41452

27 September 2023

Cross Site Request Forgery vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. [...]

CVE-2023-41448

27 September 2023

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the ID parameter in the index.php component. [...]

CVE-2023-43191

27 September 2023

JFinalCMS foreground message can be embedded malicious code saved in the database. When users browse the comments, these malicious codes embedded in the HTML will be executed, and the user's [...]

CVE-2023-41449

27 September 2023

An issue in phpkobo AjaxNewsTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the reque parameter. [...]

CVE-2023-41451

27 September 2023

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the txt parameter in the index.php component. [...]

CVE-2023-41453

27 September 2023

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the cmd parameter in the index.php component. [...]

CVE-2023-41445

27 September 2023

Cross Site Scripting vulnerability in phpkobo AjaxNewTicker v.1.0.5 allows a remote attacker to execute arbitrary code via a crafted payload to the index.php component. [...]

CVE-2023-44080

27 September 2023

An issue in PGYER codefever v.2023.8.14-2ce4006 allows a remote attacker to execute arbitrary code via a crafted request to the branchList component. [...]

CVE-2023-43660

27 September 2023

Warpgate is a smart SSH, HTTPS and MySQL bastion host for Linux that doesn't need special client apps. The SSH key verification for a user can be bypassed by sending [...]

CVE-2023-43192

27 September 2023

SQL injection can exist in a newly created part of the JFinalcms background, and the parameters submitted by users are not filtered. As a result, special characters in parameters destroy [...]

CVE-2023-4066

27 September 2023

CVE-2023-42818

27 September 2023

JumpServer is an open source bastion host. When users enable MFA and use a public key for authentication, the Koko SSH server does not verify the corresponding SSH private key. [...]

CVE-2023-43651

27 September 2023

CVE-2023-43656

27 September 2023

CVE-2023-40026

27 September 2023

Argo CD is a declarative continuous deployment framework for Kubernetes. In Argo CD versions prior to 2.3 (starting at least in v0.1.0, but likely in any version using Helm before [...]

CVE-2023-44048

27 September 2023

Sourcecodester Expense Tracker App v1 is vulnerable to Cross Site Scripting (XSS) via add category. [...]

CVE-2023-44047

27 September 2023

Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection. [...]

CVE-2023-43652

27 September 2023

JumpServer is an open source bastion host. As an unauthenticated user, it is possible to authenticate to the core API with a username and an SSH public key without needing [...]

CVE-2023-4523

27 September 2023

Real Time Automation 460 Series products with versions prior to v8.9.8 are vulnerable to cross-site scripting, which could allow an attacker to run any JavaScript reference from the URL string. [...]

CVE-2023-43650

27 September 2023

CVE-2023-33972

27 September 2023

CVE-2023-5184

27 September 2023

Â Two potential signed to unsigned conversion errors and buffer overflow vulnerabilities at the following locations in the Zephyr IPM drivers. [...]

VU#347067: Multiple BGP implementations are vulnerable to improperly formatted BGP updates

12 September 2023

Overview Multiple BGP implementations have been identified as vulnerable to specially crafted Path Attributes of a BGP UPDATE. Instead of ignoring invalid updates they reset the underlying TCP connection for [...]

VU#304455: Authentication Bypass in Tenda N300 Wireless N VDSL2 Modem Router

6 September 2023

Overview An authentication bypass vulnerability exists in the N300 Wireless N VDSL2 Modem Router manufactured by Tenda. This vulnerability allows a remote, unauthenticated user to access sensitive information. Description CVE-2023-4498 [...]

VU#757109: Groupnotes Inc. Videostream Mac client allows for privilege escalation to root account

28 August 2023

Overview Groupnotes Inc. Videostream Mac client installs a LaunchDaemon that runs with root privileges. The daemon is vulnerable to a race condition that allows for arbitrary file writes. A low [...]

VU#287122: Parsec Remote Desktop App is prone to a local elevation of privilege due to a logical flaw in its code integrity verification process

16 August 2023

Overview Parsec updater for Windows was prone to a local privilege escalation vulnerability, this vulnerability allowed a local user with Parsec access to gain NT_AUTHORITY/SYSTEM privileges. Description The vulnerability is [...]

VU#127587: Python Parsing Error Enabling Bypass CVE-2023-24329

11 August 2023

Overview urllib.parse is a very basic and widely used basic URL parsing function in various applications. Description An issue in the urllib.parse component of Python before v3.11 allows attackers to [...]

VU#947701: Freewill Solutions IFIS new trading web application vulnerable to unauthenticated remote code execution

7 August 2023

Overview Freewill Solutions IFIS new trading web application version 20.01.01.04 is vulnerable to unauthenticated remote code execution. Successful exploitation of this vulnerability allows an attacker to run arbitrary shell commands [...]

VU#813349: Software driver for D-Link Wi-Fi USB Adapter vulnerable to service path privilege escalation

27 July 2023

Overview The software driver for D-Link DWA-117 AC600 MU-MIMO Wi-Fi USB Adapter contains a unquoted service path privilege escalation vulnerability. In certain conditions, this flaw can lead to a local [...]

VU#653767: Perimeter81 macOS Application Multiple Vulnerabilities

20 July 2023

Overview A command injection vulnerability can be used in the Perimeter81 macOS application to run arbitrary commands with administrative privileges. Description At the time, the latest Perimeter81 MacOS application (10.0.0.19) [...]

VU#913565: Hard-coded credentials in Technicolor TG670 DSL gateway router

11 July 2023

Overview The Technicolor TG670 DSL Gateway Router includes a hard-coded service account that allows for authentication over services on the WAN interface, using HTTP, SSH, or TELNET. The authenticated user [...]

VU#782720: TCG TPM2.0 implementations vulnerable to memory corruption

28 February 2023

Overview Two buffer overflow vulnerabilities were discovered in the Trusted Platform Module (TPM) 2.0 reference library specification, currently at Level 00, Revision 01.59 November 2019. An attacker who has access [...]

VU#572615: Vulnerabilities in TP-Link routers, WR710N-V1-151022 and Archer C5 V2

17 January 2023

Overview TP-Link router WR710N-V1-151022 running firmware published 2015-10-22 and Archer-C5-V2-160201 running firmware published 2016-02-01 are susceptible to two vulnerabilities: A buffer overflow during HTTP Basic Authentication allowing a remote attacker [...]

VU#986018: New Netcomm router models NF20MESH, NF20, and NL1902 vulnerabilities

17 January 2023

Overview Netcomm router models NF20MESH, NF20, and NL1902 running software versions earlier than R6B035 contain two vulnerabilities. The first is an authentication bypass vulnerability that allows an unauthenticated user to [...]

VU#709991: Netatalk contains multiple error and memory management vulnerabilities

16 November 2022

Overview There are six new vulnerabilities in the latest release of Netatalk (3.1.12) that could allow for Remote Code Execution as well as Out-of-bounds Read. Description Below are the new [...]

VU#434994: Multiple race conditions due to TOCTOU flaws in various UEFI Implementations

8 November 2022

Overview Multiple Unified Extensible Firmware Interface (UEFI) implementations are vulnerable to code execution in System Management Mode (SMM) by an attacker who gains administrative privileges on the local machine. An [...]

VU#794340: OpenSSL 3.0.0 to 3.0.6 decodes some punycode email addresses in X.509 certificates improperly

1 November 2022

Overview Two buffer overflow vulnerabilities were discovered in OpenSSL versions 3.0.0 through 3.0.6. These vulnerabilities were introduced in version 3.0.0 with the inclusion of support for punycode email address parsing [...]

ISC Stormcast For Wednesday, September 27th, 2023 https://isc.sans.edu/podcastdetail/8676, (Wed, Sep 27th)

27 September 2023

Apple Releases MacOS Sonoma Including Numerous Security Patches, (Tue, Sep 26th)

26 September 2023

As expected, Apple today released macOS Sonoma (14.0). This update, in addition to new features, provides patches for about 60 different vulnerabilities. Older MacOS versions received updates addressing these vulnerabilities [...]

ISC Stormcast For Tuesday, September 26th, 2023 https://isc.sans.edu/podcastdetail/8674, (Tue, Sep 26th)

26 September 2023

A new spin on the ZeroFont phishing technique, (Tue, Sep 26th)

26 September 2023

Last week, I came across an interesting phishing e-mail, in which a text written in a font with zero-pixel size was used in quite a novel way. [...]

ISC Stormcast For Monday, September 25th, 2023 https://isc.sans.edu/podcastdetail/8672, (Mon, Sep 25th)

25 September 2023

YARA Support for .LNK Files, (Sun, Sep 24th)

24 September 2023

The upcoming version of YARA 4.4.0 will include a new module for .lnk files. [...]

Scanning for Laravel - a PHP Framework for Web Artisants, (Sat, Sep 23rd)

23 September 2023

Today while reviewing my honeypot logs, I noticed an HTTP request for a directory this week I had not noticed before that included Laravel: [...]

ISC Stormcast For Friday, September 22nd, 2023 https://isc.sans.edu/podcastdetail/8670, (Fri, Sep 22nd)

22 September 2023

Apple Patches Three New 0-Day Vulnerabilities Affecting iOS/iPadOS/watchOS/macOS, (Thu, Sep 21st)

21 September 2023

This update patches three already exploited vulnerabilities: [...]

ISC Stormcast For Thursday, September 21st, 2023 https://isc.sans.edu/podcastdetail/8668, (Thu, Sep 21st)

21 September 2023

[tool] WatchGuard Firebox Web Update Unpacker

25 September 2023

Posted by retset on Sep 25A small utility for extracting file system images from "sysa-dl" update files. https://github.com/ret5et/Watchguard_WebUI_Unpacker [...]

APPLE-SA-2023-09-21-6 macOS Ventura 13.6

23 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-6 macOS Ventura 13.6 macOS Ventura 13.6 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213931. [...]

APPLE-SA-2023-09-21-7 macOS Monterey 12.7

23 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-7 macOS Monterey 12.7 macOS Monterey 12.7 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213932. [...]

APPLE-SA-2023-09-21-5 watchOS 9.6.3

23 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-5 watchOS 9.6.3 watchOS 9.6.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213929. Apple maintains [...]

APPLE-SA-2023-09-21-4 watchOS 10.0.1

23 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-4 watchOS 10.0.1 watchOS 10.0.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213928. Apple maintains [...]

APPLE-SA-2023-09-21-3 iOS 16.7 and iPadOS 16.7

23 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-3 iOS 16.7 and iPadOS 16.7 iOS 16.7 and iPadOS 16.7 addresses the following issues. Information about the security content is [...]

APPLE-SA-2023-09-21-2 iOS 17.0.1 and iPadOS 17.0.1

23 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-2 iOS 17.0.1 and iPadOS 17.0.1 iOS 17.0.1 and iPadOS 17.0.1 addresses the following issues. Information about the security content is [...]

APPLE-SA-2023-09-21-1 Safari 16.6.1

23 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 22APPLE-SA-2023-09-21-1 Safari 16.6.1 Safari 16.6.1 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213930. Apple maintains [...]

Advisory X41-2023-001: Two Vulnerabilities in OPNsense

23 September 2023

Posted by X41 D-Sec GmbH Advisories via Fulldisclosure on Sep 22Advisory X41-2023-001: Two Vulnerabilities in OPNsense =========================================================== Highest Severity Rating: High Confirmed Affected Versions: 23.1.11_1, 23.7.3, 23.7.4 Confirmed Patched Versions: [...]

SEC Consult SA-20230918-0 :: Authenticated Remote Code Execution and Missing Authentication in Atos Unify OpenScape

18 September 2023

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Sep 18SEC Consult Vulnerability Lab Security Advisory < 20230918-0 > ======================================================================= title: Authenticated Remote Code Execution and Missing Authentication product: [...]

SEC Consult SA-20230829-0 :: Reflected Cross-Site Scripting (XSS) in PTC - Codebeamer (ALM Solution)

18 September 2023

Posted by SEC Consult Vulnerability Lab, Research via Fulldisclosure on Sep 18SEC Consult Vulnerability Lab Security Advisory < 20230829-0 > ======================================================================= title: Reflected Cross-Site Scripting (XSS) product: PTC - Codebeamer [...]

APPLE-SA-2023-09-11-3 macOS Big Sur 11.7.10

18 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 18APPLE-SA-2023-09-11-3 macOS Big Sur 11.7.10 macOS Big Sur 11.7.10 addresses the following issues. Information about the security content is also available [...]

APPLE-SA-2023-09-11-2 macOS Monterey 12.6.9

18 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 18APPLE-SA-2023-09-11-2 macOS Monterey 12.6.9 macOS Monterey 12.6.9 addresses the following issues. Information about the security content is also available at https://support.apple.com/kb/HT213914. [...]

APPLE-SA-2023-09-11-1 iOS 15.7.9 and iPadOS 15.7.9

18 September 2023

Posted by Apple Product Security via Fulldisclosure on Sep 18APPLE-SA-2023-09-11-1 iOS 15.7.9 and iPadOS 15.7.9 iOS 15.7.9 and iPadOS 15.7.9 addresses the following issues. Information about the security content is [...]

[SYSS-2023-002] Razer Synapse - Local Privilege Escalation

18 September 2023

Posted by Oliver Schwarz via Fulldisclosure on Sep 18Advisory ID: SYSS-2023-002 Product: Razer Synapse Manufacturer: Razer Inc. Affected Version(s): Versions before 3.8.0428.042117 (20230601) Tested Version(s): 3.8.0228.022313 (20230315) under Windows 10 [...]

taskhub 2.8.7 - SQL Injection

25 September 2023

Topic: taskhub 2.8.7 - SQL Injection Risk: Medium Text:# Exploit Title: taskhub 2.8.7 - SQL Injection # Exploit Author: CraCkEr # Date: 05/09/2023 # Vendor: Infinitie Technologies [...]

OPNsense 23.1.11_1 / 23.7.3 / 23.7.4 Cross Site Scripting / Privilege Escalation

25 September 2023

Topic: OPNsense 23.1.11_1 / 23.7.3 / 23.7.4 Cross Site Scripting / Privilege Escalation Risk: Medium Text:Advisory X41-2023-001: Two Vulnerabilities in OPNsense == Highest Severity Rating: High Confirmed Affecte [...]

Elasticsearch 8.5.3 Stack Overflow

24 September 2023

Topic: Elasticsearch 8.5.3 Stack Overflow Risk: High Text:# Exploit Author: TOUHAMI KASBAOUI # Vendor Homepage: https://elastic.co/ # Version: 8.5.3 / OpenSearch # Tested on: Ubuntu [...]

TOTOLINK Wireless Routers Remote Command Execution

24 September 2023

Topic: TOTOLINK Wireless Routers Remote Command Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit- [...]

PHP Type Confusion Vulnerability Leading to Administrator Account Takeover via Authentication Bypass

24 September 2023

Topic: PHP Type Confusion Vulnerability Leading to Administrator Account Takeover via Authentication Bypass Risk: Medium Text:# CVE-2023-43154 - Macs Framework v1.1.4f CMS Type Confusion Vulnerability ## Table of Contents 1. [...]

Taskhub 2.8.8 Cross Site Scripting

24 September 2023

Topic: Taskhub 2.8.8 Cross Site Scripting Risk: Low Text:## Title: TASKHUB-2.8.8-XSS-Reflected ## Author: nu11secur1ty ## Date: 09/22/2023 ## Vendor: https://codecanyon.net/user/inf [...]

Pegasus X DLL hijacking

21 September 2023

Topic: Pegasus X DLL hijacking Risk: Low Text:#include // Define the window class WNDCLASSEX wcex; wcex.cbSize = sizeof(WNDCLASSEX); wcex.style = CS_HREDRAW [...]

Academy LMS 6.2 SQL Injection

20 September 2023

Topic: Academy LMS 6.2 SQL Injection Risk: Medium Text:# Exploit Title: Academy LMS 6.2 - SQL Injection # Exploit Author: CraCkEr # Date: 29/08/2023 # Vendor: Creativeitem # Vend [...]

SFTP/FTP Password Exposure via sftp-config.json

20 September 2023

Topic: SFTP/FTP Password Exposure via sftp-config.json Risk: Low Text: [...]

Atos Unify OpenScape Code Execution / Missing Authentication

20 September 2023

Topic: Atos Unify OpenScape Code Execution / Missing Authentication Risk: High Text:SEC Consult Vulnerability Lab Security Advisory == title: Authenticated [...]

Lexmark Device Embedded Web Server Remote Code Execution

20 September 2023

Topic: Lexmark Device Embedded Web Server Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit- [...]

WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection

20 September 2023

Topic: WordPress Essential Blocks 4.2.0 / Essential Blocks Pro 1.1.0 PHP Object Injection Risk: Medium Text:Vulnerability Summary from Wordfence Intelligence Description: Insecure Deserialization/PHP Object Injection via queries [...]

Taskhub 2.8.7 SQL Injection

20 September 2023

Topic: Taskhub 2.8.7 SQL Injection Risk: Medium Text:# Exploit Title: taskhub 2.8.7 - SQL Injection # Exploit Author: CraCkEr # Date: 05/09/2023 # Vendor: Infinitie Technologies [...]

Windows Common Log File System Driver (clfs.sys) Privilege Escalation

20 September 2023

Topic: Windows Common Log File System Driver (clfs.sys) Privilege Escalation Risk: Medium Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit- [...]

Super Store Finder 3.7 Remote Command Execution

20 September 2023

Topic: Super Store Finder 3.7 Remote Command Execution Risk: High Text:# Vulnerability : Authenticated Arbitrary PHP Code Injection lead to Remote Code Execution # Researcher : Etharus # Vendor : [...]

WordPress Theme My Login 2FA Brute Force

20 September 2023

Topic: WordPress Theme My Login 2FA Brute Force Risk: Low Text:The theme my login plugin before 1.2 does not check how often a 2FA code was wrongly entered, allowing a [...]

WinRAR Remote Code Execution

18 September 2023

Topic: WinRAR Remote Code Execution Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit- [...]

Conception & Réalisation MGSD - Blind Sql Injection Vulnerability

18 September 2023

Topic: Conception & Réalisation MGSD - Blind Sql Injection Vulnerability Risk: Medium Text:********************************************************* #Exploit Title: Conception & Réalisation MGSD - Blind Sql Injection [...]

Night Club Booking Software 1.0 Cross Site Scripting

18 September 2023

Topic: Night Club Booking Software 1.0 Cross Site Scripting Risk: Low Text:## Title: Night Club Booking Software-1.0 XSS-Reflected ## Author: nu11secur1ty ## Date: 09/09/2023 ## Vendor: https://www.p [...]

Academy LMS 6.2 - Reflected XSS

18 September 2023

Topic: Academy LMS 6.2 - Reflected XSS Risk: Low Text:# Exploit Title: Academy LMS 6.2 - Reflected XSS # Exploit Author: CraCkEr # Date: 29/08/2023 # Vendor: Creativeitem # Vend [...]

Italia Mediasky CMS 2.0 Cross Site Scripting

18 September 2023

Topic: Italia Mediasky CMS 2.0 Cross Site Scripting Risk: Low Text: | # Title : İtalia Mediasky CMS v2.0 XSS Vulnerability [...]

SNDK Technologies - Blind Sql Injection

18 September 2023

Topic: SNDK Technologies - Blind Sql Injection Risk: Medium Text:********************************************************* #Exploit Title: SNDK Technologies - Blind Sql Injection #Date: 2023 [...]

CMS united - Blind Sql Injection

18 September 2023

Topic: CMS united - Blind Sql Injection Risk: Medium Text:********************************************************* #Exploit Title: CMS united - Blind Sql Injection #Date: 2023-09-16 [...]

PTC - Codebeamer Cross Site Scripting

18 September 2023

Topic: PTC - Codebeamer Cross Site Scripting Risk: Low Text:SEC Consult Vulnerability Lab Security Advisory == title: Reflected Cros [...]

Ivanti Avalanche MDM Buffer Overflow

18 September 2023

Topic: Ivanti Avalanche MDM Buffer Overflow Risk: High Text:## # This module requires Metasploit: https://metasploit.com/download # Current source: https://github.com/rapid7/metasploit- [...]

1.545

27 September 2023

Newly Added (14)Microsoft Edge CVE-2023-36562 Privilege Elevation VulnerabilitySolarwinds DameWare Mini Remote Control CVE-2019-9017 Out-of-bounds Write VulnerabilityCisco Jabber CVE-2022-20917 Resource Exposure VulnerabilityAdobe Digital Edition CVE-2020-3798 Information Disclosure VulnerabilityDocker Desktop CVE-2020-11492 Privilege [...]

1.544

23 September 2023

Newly Added (2)Trend Micro Apex One CVE-2023-41179 Arbitrary Code Execution VulnerabilityTrend Micro Worry-Free Business Security CVE-2023-41179 Arbitrary Code Execution Vulnerability [...]

1.543

22 September 2023

Newly Added (3)Microsoft Edge CVE-2023-36735 Elevation of Privilege VulnerabilityMicrosoft Edge CVE-2023-36727 Spoofing VulnerabilityNodejs CVE-2023-32005 Information Disclosure Vulnerability [...]

1.542

21 September 2023

Newly Added (7)PaperCut NG CVE-2023-4568 Authentication Bypass VulnerabilityZoom Client CVE-2023-39215 Authentication Bypass VulnerabilityRazer Synapse CVE-2022-47631 Race Condition VulnerabilityAdobe Lightroom CVE-2021-43753 Privilege Escalation VulnerabilityAdobe Connect APSB23-33 Arbitrary Code Execution VulnerabilityFortiClient CVE-2021-43204 [...]

1.541

20 September 2023

Newly Added (12)OpenSSL CVE-2023-4807 Denial of Score VulnerabilityVisual Studio Code CVE-2023-36742 Remote Code Execution VulnerabilityNodejs CVE-2023-32558 Security Page Traversal VulnerabilitySiemens JT2Go CVE-2023-38072 Out of Bounds Write VulnerabilitySiemens JT2Go CVE-2023-38070 Buffer [...]

1.540

19 September 2023

Newly Added (4)Rockwell Automation Pavilion8 CVE-2023-29463 Authentication Bypass VulnerabilitySecurity Vulnerability CVE-2022-28463 for ImageMagickSecurity Vulnerability CVE-2021-3962 for ImageMagickSecurity Vulnerability CVE-2021-3574 for ImageMagickModified (1)Security update available for Adobe Acrobat APSB23-01 [...]

1.539

16 September 2023

Newly Added (5)SAP PowerDesigner CVE-2023-40621 Code Injection VulnerabilitySAP PowerDesigner CVE-2023-37484 Information Disclosure VulnerabilityN-able Take Control Agent CVE-2023-27470 Race Condition VulnerabilityAdobe InDesign APSB22-23 Arbitrary Code Execution VulnerabilityQEMU CVE-2023-42467 Denial of Service [...]

1.538

15 September 2023

Newly Added (12)Golang crypto/tls Denial of Service VulnerabilityGolang cmd/go Code Injection VulnerabilityGolang html/template Cross-site Scripting VulnerabilityWibu-Systems CodeMeter Runtime CVE-2023-3935 Remote Code Execution VulnerabilitySecurity Vulnerabilities fixed in Firefox ESR 115.2Security Vulnerabilities [...]

1.537

14 September 2023

Newly Added (1)Security Update 2023-09-12 from Google Chrome [...]

1.536

13 September 2023

Newly Added (53)Adobe Premiere Pro Arbitrary APSB21-117 Code Execution VulnerabilitySecurity Update 2023-09-11 from Google ChromeAdobe After Effects CVE-2021-44195 Elevation of Privilege VulnerabilityAdobe After Effects CVE-2021-44192 Elevation of Privilege VulnerabilityAdobe After [...]

CVE-2022-36123 – A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not clear statically allocated variables in the block starting symbol (.bss) due to a failed early_xen_iret_patch leading to an asm_exc_page_fault, or arbitrary code execution

29 July 2022

Title A vulnerability in Linux kernel mainline v5.18-rc1 through v5.19-rc6 does not clear statically allocated variables in the block starting symbol (.bss) due to a failed early_xen_iret_patch leading to an [...]

CVE-2022-35414 – QEMU 4.1.50 through QEMU 7.0.0 – address_space_translate_for_iotlb allows a guest user to crash a host resulting in a denial of service.

11 July 2022

Title CVE-2022-35414 – QEMU 4.1.50 through QEMU 7.0.0 – address_space_translate_for_iotlb allows a guest user to crash a host resulting in a denial of service. CVE ID CVE-2022-35414 CVSS Score N/A [...]

Sick Codes @ DEF CON 30 August 11-14 2022!

30 June 2022

Pleased to announce we will be speaking at this year’s DEF CON 30 conference in Las Vegas, which will be an in-person event! You can purchase tickets at: https://defcon.org/ and [...]

CVE-2021-33318 IpMatcher v1.0.4.1 and below for .NET Core 2.0 and .NET Framework 4.5.2. incorrectly validates octal & hexadecimal input data, leading to indeterminate SSRF, LFI, RFI, and DoS vectors.

15 May 2022

Title CVE-2021-33318 IpMatcher v1.0.4.1 and below for .NET Core 2.0 and .NET Framework 4.5.2. incorrectly validates octal & hexadecimal input data, leading to indeterminate SSRF, LFI, RFI, and DoS vectors. [...]

CVE-2022-28345 – Signal client for iOS version 5.33.2 and below are vulnerable to RTLO Injection URI Spoofing using malicious URLs such as gepj.net/selif#/moc.elpmaxe which would appear as example.com/#files/ten.jpeg

14 April 2022

Title CVE-2022-28345 – Signal client for iOS version 5.33.2 and below are vulnerable to RTLO Injection URI Spoofing using malicious URLs such as gepj.net/selif#/moc.elpmaxe which would appear as example.com/#files/ten.jpeg CVE [...]

Exploit: RTLO Injection URI Spoofing: WhatsApp, iMessage (Messages app), Instagram, Facebook Messenger. CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096

24 March 2022

The post Exploit: RTLO Injection URI Spoofing: WhatsApp, iMessage (Messages app), Instagram, Facebook Messenger. CVE-2020-20093, CVE-2020-20094, CVE-2020-20095, CVE-2020-20096 appeared first on Sick Codes - Security Research, Hardware & Software Hacking, [...]

Fix DIVD-2022-00002: Grafana versions 8.0.0-beta1 through 8.3.0 installed via dpkg/deb package. Mitigation:

21 January 2022

In response to the amazing work by @j0v0x0 “Jordy Versmissen” from Detectify, the double-amazing Dutch Institute for Vulnerability Disclosure, known as DIVD CSIRT, contacted thousands of ISP/IP/Webmasters to resolve the [...]

CVE-2021-33669 – SAP Mobile SDK Certificate Provider – Insecure Temporary File Storage – Potential Symlink Attack & Denial of Service

4 October 2021

Title CVE-2021-33669 – SAP Mobile SDK Certificate Provider – Insecure Temporary File Storage – Potential Symlink Attack & Denial of Service CVE ID CVE-2021-33669 CVSS Score 7.8 Internal ID SICK-2021-032 [...]

CVE-2021-39246 – Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging – Windows, macOS, Linux

24 September 2021

Title CVE-2021-39246 – Tor Browser through 10.5.6 and 11.x through 11.0a4 allows a correlation attack excessive verbose logging – Windows, macOS, Linux CVE ID CVE-2021-39246 CVSS Score 6.1 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N Internal [...]

Sick Codes Speaking @ CornCon Cyber Security Conference September 10-11, 2021 in Bettendorf, Iowa!

27 August 2021

Come see us live at CornCon September 10-11th 2021, discussing Ag Security, Supply Chain Security, and of course, tractor hacking. CornCon – Season 7 September 10-11, 2021 Event details/Tickets: https://corncon.net/ [...]

ESB-2023.5507 - [Apple iOS] watchOS 10: CVSS (Max): None

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5507 APPLE-SA-09-26-2023-8 watchOS 10 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: watchOS 10 Publisher: Apple [...]

ESB-2023.5511 - [Mac] macOS Ventura 13.6: CVSS (Max): 7.8*

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5511 Additional information for APPLE-SA-2023-09-21-6 macOS Ventura 13.6 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: [...]

ESB-2023.5509 - [Apple iOS] Xcode 15: CVSS (Max): None

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5509 APPLE-SA-09-26-2023-6 Xcode 15 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Xcode 15 Publisher: Apple [...]

ESB-2023.5515 - [SUSE] wireshark: CVSS (Max): 5.3

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5515 Security update for wireshark 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: wireshark Publisher: SUSE [...]

ESB-2023.5513 - [Mac] macOS Sonoma 14: CVSS (Max): 9.8*

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5513 APPLE-SA-09-26-2023-2 macOS Sonoma 14 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: macOS Sonoma 14 [...]

ESB-2023.5519 - [SUSE] Linux Kernel: CVSS (Max): 7.8

27 September 2023

ESB-2023.5517 - [SUSE] Linux Kernel: CVSS (Max): 7.8

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5517 Security update for the Linux Kernel 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Linux [...]

ESB-2023.5530 - [Appliance] Suprema BioStar 2: CVSS (Max): 6.5

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5530 ICS Advisory | ICSA-23-269-01 Suprema BioStar 2 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: [...]

ESB-2023.5529 - [Appliance] Hitachi Energy Asset Suite 9: CVSS (Max): 6.9

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5529 ICS Advisory | ICSA-23-269-02 Hitachi Energy Asset Suite 9 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary [...]

ESB-2023.5532 - [Appliance] Baker Hughes Bently Nevada 3500: CVSS (Max): 7.5

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5532 ICS Advisory | ICSA-23-269-05 Baker Hughes Bently Nevada 3500 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary [...]

ESB-2023.5531 - [Appliance] Advantech EKI-1524-CE series: CVSS (Max): 5.4

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5531 ICS Advisory | ICSA-23-269-04 Advantech EKI-1524-CE series 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: [...]

ESB-2023.5533 - [Win][UNIX/Linux] Mozilla Firefox: CVSS (Max): None

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5533 Mozilla Foundation Security Advisory 2023-41 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Mozilla Firefox [...]

ESB-2023.5534 - [Win][UNIX/Linux] Mozilla Firefox: CVSS (Max): None

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5534 MFSA 2023-42 Security Vulnerabilities fixed in Firefox ESR 115.3 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary [...]

ESB-2023.5535 - [Win][UNIX/Linux] Mozilla Thunderbird: CVSS (Max): None

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5535 MFSA 2023-43 Security Vulnerabilities fixed in Thunderbird 115.3 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- [...]

ESB-2023.5521 - [SUSE] Linux Kernel: CVSS (Max): 7.8

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5521 Security update for the Linux Kernel (Live Patch 39 for SLE 15 SP1) 27 September 2023 =========================================================================== [...]

ESB-2023.5528 - [Appliance] Mitsubishi Electric FA Engineering Software: CVSS (Max): 9.3

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5528 ICS Advisory | ICSA-23-269-03 Mitsubishi Electric FA Engineering Software 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary [...]

ESB-2023.5520 - [SUSE] Linux Kernel: CVSS (Max): 7.8

27 September 2023

ESB-2023.5527 - [Ubuntu] CUPS: CVSS (Max): 5.5

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5527 USN-6361-2: CUPS vulnerability 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: CUPS Publisher: Ubuntu Operating [...]

ESB-2023.5518 - [SUSE] Linux Kernel: CVSS (Max): 7.8

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5518 Security update for the Linux Kernel (Live Patch 37 for SLE 15 SP1) 27 September 2023 =========================================================================== [...]

ESB-2023.5526 - [Ubuntu] Linux kernel: CVSS (Max): 7.8

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5526 USN-6396-1: Linux kernel vulnerabilities 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Linux kernel Publisher: [...]

ESB-2023.5516 - [SUSE] netatalk: CVSS (Max): 8.1

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5516 Security update for netatalk 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: netatalk Publisher: SUSE [...]

ESB-2023.5525 - [Ubuntu] Linux kernel: CVSS (Max): 10.0

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5525 USN-6397-1: Linux kernel (BlueField) vulnerabilities 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Linux kernel [...]

ESB-2023.5514 - [Mac] Safari 17: CVSS (Max): 9.8*

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5514 APPLE-SA-09-26-2023-1 Safari 17 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: Safari 17 Publisher: Apple [...]

ESB-2023.5524 - [SUSE] frr: CVSS (Max): 7.5

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5524 Security update for frr 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary --------------------------------- Product: frr Publisher: SUSE [...]

ESB-2023.5512 - [Apple iOS] iOS 16.7 and iPadOS 16.7: CVSS (Max): 9.8*

27 September 2023

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 =========================================================================== AUSCERT External Security Bulletin Redistribution ESB-2023.5512 Additional information for APPLE-SA-2023-09-21-3 iOS 16.7 and iPadOS 16.7 27 September 2023 =========================================================================== AusCERT Security Bulletin Summary [...]

ETSI WEBstore 2023 - Persistent Cross Site Vulnerability

26 July 2023

The vulnerability laboratory core research team discovered a persistent web vulnerability in the ETSI WebStore web-appli [...]

QWE DL v2.0.1 iOS - Persistent Cross Site Vulnerability

24 July 2023

The vulnerability laboratory core research team discovered a persistent vulnerability in the QWE DL v2.0.1 mobile ios we [...]

ViaTalk CP - Persistent XSS Web Vulnerability

21 July 2023

The vulnerability laboratory core research team discovered persistent web vulnerability in the viatalk control panel web [...]

ViaTalk CP - Cross Site Scripting Web Vulnerability

20 July 2023

The vulnerability laboratory core research team discovered a cross site web vulnerability in the viatalk control panel w [...]

PaulPrinting CMS - Multiple Cross Site Web Vulnerabilities

19 July 2023

The vulnerability laboratory core research team discovered multiple persistent cross site vulnerabilities in the PaulPri [...]

PaulPrinting CMS - (Search Delivery) Cross Site Vulnerability

17 July 2023

The vulnerability laboratory core research team discovered a non-persistent cross site vulnerability in the PaulPrinting [...]

Aures Booking & POS Terminal - Local Privilege Escalation

17 July 2023

The vulnerability laboratory core research team discovered a local kiosk privilege escalation vulnerability in the opera [...]

Tiva Events Calender v1.4 - Cross Site Scripting Vulnerability

5 July 2023

The vulnerability laboratory core research team discovered a persistent script code inject vulnerability in the Tiva Eve [...]

Dooblou WiFi File Explorer 1.13.3 - Multiple Vulnerabilities

4 July 2023

The vulnerability laboratory core research team discovered multiple web vulnerabilities in the official Dooblou WiFi Fil [...]

Active Super Shop CMS v2.5 - HTML Injection Vulnerabilities

4 July 2023

The vulnerability laboratory core research team discovered multiple html injection vulnerabilities in the Active Super S [...]

Red Cross-Themed Phishing Attacks Distributing DangerAds and AtlasAgent Backdoors

27 September 2023

A new threat actor known as AtlasCross has been observed leveraging Red Cross-themed phishing lures to deliver two previously undocumented backdoors named DangerAds and AtlasAgent. NSFOCUS Security Labs described the adversary as having a [...]

Researchers Uncover New GPU Side-Channel Vulnerability Leaking Sensitive Data

27 September 2023

A novel side-channel attack called GPU.zip renders virtually all modern graphics processing units (GPU) vulnerable to information leakage. "This channel exploits an optimization that is data dependent, software transparent, and present in [...]

New Survey Uncovers How Companies Are Confronting Data Security Challenges Head-On

27 September 2023

Data security is in the headlines often, and it’s almost never for a positive reason. Major breaches, new ways to hack into an organization’s supposedly secure data, and other threats [...]

New ZenRAT Malware Targeting Windows Users via Fake Password Manager Software

27 September 2023

A new malware strain called ZenRAT has emerged in the wild that's distributed via bogus installation packages of the Bitwarden password manager. "The malware is specifically targeting Windows users and [...]

Critical libwebp Vulnerability Under Active Exploitation - Gets Maximum CVSS Score

27 September 2023

Google has assigned a new CVE identifier for a critical security flaw in the libwebp image library for rendering images in the WebP format that has come under active exploitation in the [...]

Microsoft is Rolling out Support for Passkeys in Windows 11

26 September 2023

Microsoft is officially rolling out support for passkeys in Windows 11 today as part of a major update to the desktop operating system. The feature allows users to login to websites and [...]

ShadowSyndicate: A New Cybercrime Group Linked to 7 Ransomware Families

26 September 2023

Cybersecurity experts have shed light on a new cybercrime group known as ShadowSyndicate (formerly Infra Storm) that may have leveraged as many as seven different ransomware families over the past year. "ShadowSyndicate [...]

Essential Guide to Cybersecurity Compliance

26 September 2023

SOC 2, ISO, HIPAA, Cyber Essentials – all the security frameworks and certifications today are an acronym soup that can make even a compliance expert’s head spin. If you’re embarking [...]

Xenomorph Banking Trojan: A New Variant Targeting 35+ U.S. Financial Institutions

26 September 2023

An updated version of an Android banking trojan called Xenomorph has set its sights on more than 35 financial institutions in the U.S. The campaign, according to Dutch security firm ThreatFabric, leverages phishing web [...]

Threat Report: The High Tech Industry Targeted the Most with 46% of NLX-Tagged Attack Traffic

26 September 2023

How To Use This Report Enhance situational awareness of techniques used by threat actors Identify potential attacks targeting your industry Gain insights to help improve and accelerate your organization’s threat [...]

Chinese Hackers TAG-74 Targets South Korean Organizations in a Multi-Year Campaign

26 September 2023

A "multi-year" Chinese state-sponsored cyber espionage campaign has been observed targeting South Korean academic, political, and government organizations. Recorded Future's Insikt Group, which is tracking the activity under the moniker TAG-74, said [...]

Critical JetBrains TeamCity Flaw Could Expose Source Code and Build Pipelines to Attackers

26 September 2023

A critical security vulnerability in the JetBrains TeamCity continuous integration and continuous deployment (CI/CD) software could be exploited by unauthenticated attackers to achieve remote code execution on affected systems. The [...]

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

25 September 2023

Ukrainian military entities are the target of a phishing campaign that leverages drone manuals as lures to deliver a Go-based open-source post-exploitation toolkit called Merlin. "Since drones or Unmanned Aerial [...]

Webinar — AI vs. AI: Harnessing AI Defenses Against AI-Powered Risks

25 September 2023

Generative AI is a double-edged sword, if there ever was one. There is broad agreement that tools like ChatGPT are unleashing waves of productivity across the business, from IT, to [...]

Are You Willing to Pay the High Cost of Compromised Credentials?

25 September 2023

Weak password policies leave organizations vulnerable to attacks. But are the standard password complexity requirements enough to secure them? 83% of compromised passwords would satisfy the password complexity and length requirements of [...]

From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

25 September 2023

Tibetan, Uyghur, and Taiwanese individuals and organizations are the targets of a persistent campaign orchestrated by a threat actor codenamed EvilBamboo to gather sensitive information. "The attacker has created fake Tibetan websites, [...]

New Report Uncovers 3 Distinct Clusters of China-Nexus Attacks on Southeast Asian Government

25 September 2023

An unnamed Southeast Asian government has been targeted by multiple China-nexus threat actors as part of espionage campaigns targeting the region over extended periods of time. "While this activity occurred [...]

Deadglyph: New Advanced Backdoor with Distinctive Malware Tactics

23 September 2023

Cybersecurity researchers have discovered a previously undocumented advanced backdoor dubbed Deadglyph employed by a threat actor known as Stealth Falcon as part of a cyber espionage campaign. "Deadglyph's architecture is unusual as [...]

New Apple Zero-Days Exploited to Target Egyptian ex-MP with Predator Spyware

23 September 2023

The three zero-day flaws addressed by Apple on September 21, 2023, were leveraged as part of an iPhone exploit chain in an attempt to deliver a spyware strain called Predator targeting former Egyptian member [...]

New Variant of Banking Trojan BBTok Targets Over 40 Latin American Banks

22 September 2023

An active malware campaign targeting Latin America is dispensing a new variant of a banking trojan called BBTok, particularly users in Brazil and Mexico. "The BBTok banker has a dedicated functionality [...]

How to Interpret the 2023 MITRE ATT&CK Evaluation Results

22 September 2023

Thorough, independent tests are a vital resource for analyzing provider’s capabilities to guard against increasingly sophisticated threats to their organization. And perhaps no assessment is more widely trusted than the [...]

Iranian Nation-State Actor OilRig Targets Israeli Organizations

22 September 2023

Israeli organizations were targeted as part of two different campaigns orchestrated by the Iranian nation-state actor known as OilRig in 2021 and 2022. The campaigns, dubbed Outer Space and Juicy Mix, entailed [...]

High-Severity Flaws Uncovered in Atlassian Products and ISC BIND Server

22 September 2023

Atlassian and the Internet Systems Consortium (ISC) have disclosed several security flaws impacting their products that could be exploited to achieve denial-of-service (DoS) and remote code execution. The Australian software [...]

Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable

22 September 2023

Apple has released yet another round of security patches to address three actively exploited zero-day flaws impacting iOS, iPadOS, macOS, watchOS, and Safari, taking the total tally of zero-day bugs [...]

Mysterious 'Sandman' Threat Actor Targets Telecom Providers Across Three Continents

21 September 2023

A previously undocumented threat actor dubbed Sandman has been attributed to a set of cyber attacks targeting telecommunic koation providers in the Middle East, Western Europe, and the South Asian subcontinent. Notably, [...]

ZDI-CAN-21953: Ivanti

27 September 2023

A CVSS score 7.3 (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-09-27, 0 days ago. The vendor is given until 2024-01-25 to publish a [...]

ZDI-CAN-22224: PDF-XChange

27 September 2023

A CVSS score 7.5 (AV:A/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Bobby Gould and Anthony Fuller of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-09-27, 0 days [...]

ZDI-CAN-22249: Adobe

27 September 2023

A CVSS score 3.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) severity vulnerability discovered by 'Mat Powell of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-09-27, 0 days ago. The vendor [...]

ZDI-CAN-21943: Ivanti

27 September 2023

ZDI-CAN-22132: Linux Mint

27 September 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Febin Mon Saji' was reported to the affected vendor on: 2023-09-27, 0 days ago. The vendor is given until 2024-01-25 to [...]

ZDI-CAN-22102: Microsoft

27 September 2023

A CVSS score 7.2 (AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-09-27, 0 days ago. The [...]

ZDI-CAN-22096: GIMP

22 September 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'MICHAEL RANDRIANANTENAINA [https://elkamika.blogspot.com/]' was reported to the affected vendor on: 2023-09-22, 5 days ago. The vendor is given until 2024-01-20 to [...]

ZDI-CAN-22097: GIMP

22 September 2023

ZDI-CAN-22093: GIMP

22 September 2023

ZDI-CAN-22173: Adobe

20 September 2023

A CVSS score 7.8 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Mat Powell of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-09-20, 7 days ago. The vendor [...]

20 September 2023

20 September 2023

20 September 2023

20 September 2023

20 September 2023

A CVSS score 7.1 (AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) severity vulnerability discovered by 'Lucas Leong (@_wmliang_) of Trend Micro Zero Day Initiative' was reported to the affected vendor on: 2023-09-20, 7 days ago. The [...]

ZDI-CAN-22149: Microsoft

20 September 2023

A CVSS score 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Alfredo Oliveira and Nitesh Surana (@_niteshsurana) of Trend Micro Research' was reported to the affected vendor on: 2023-09-20, 7 days ago. [...]

ZDI-CAN-22110: Foxit

14 September 2023

A CVSS score 3.3 (AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-09-14, 13 days ago. The vendor is given until 2024-01-12 to publish a [...]

ZDI-CAN-22148: Google

14 September 2023

A CVSS score 8.8 (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Anonymous' was reported to the affected vendor on: 2023-09-14, 13 days ago. The vendor is given until 2024-01-12 to publish a [...]

ZDI-CAN-22015: Wazuh

14 September 2023

A CVSS score 7.4 (AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Keith Yeo (@kyeojy)' was reported to the affected vendor on: 2023-09-14, 13 days ago. The vendor is given until 2024-01-12 to [...]

ZDI-CAN-22127: Inductive Automation

13 September 2023

A CVSS score 8.8 (AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) severity vulnerability discovered by 'Andy Niu of Trend Micro Security Research' was reported to the affected vendor on: 2023-09-13, 14 days ago. The vendor is [...]

ZDI-CAN-21871: NI

13 September 2023

A CVSS score 5.5 (AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) severity vulnerability discovered by 'kimiya' was reported to the affected vendor on: 2023-09-13, 14 days ago. The vendor is given until 2024-01-11 to publish a [...]

ZDI-CAN-22133: PDF-XChange

13 September 2023

ZDI-CAN-22146: PDF-XChange

13 September 2023

ZDI-CAN-22083: Ivanti

13 September 2023

A CVSS score 8.2 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L) severity vulnerability discovered by 'Lucas Miller of Trend Micro Security Research' was reported to the affected vendor on: 2023-09-13, 14 days ago. The vendor is [...]

ZDI-CAN-22138: PDF-XChange

13 September 2023

Student Loan Breach Exposes 2.5M Records

31 August 2022

2.5 million people were affected, in a breach that could spell more trouble down the line. [...]

Watering Hole Attacks Push ScanBox Keylogger

30 August 2022

Researchers uncover a watering hole attack likely carried out by APT TA423, which attempts to plant the ScanBox JavaScript-based reconnaissance tool. [...]

Tentacles of ‘0ktapus’ Threat Group Victimize 130 Firms

29 August 2022

Over 130 companies tangled in sprawling phishing campaign that spoofed a multi-factor authentication system. [...]

Ransomware Attacks are on the Rise

26 August 2022

Lockbit is by far this summer’s most prolific ransomware group, trailed by two offshoots of the Conti group. [...]

Cybercriminals Are Selling Access to Chinese Surveillance Cameras

25 August 2022

Tens of thousands of cameras have failed to patch a critical, 11-month-old CVE, leaving thousands of organizations exposed. [...]

Twitter Whistleblower Complaint: The TL;DR Version

24 August 2022

Twitter is blasted for security and privacy lapses by the company’s former head of security who alleges the social media giant’s actions amount to a national security risk. [...]

Firewall Bug Under Active Attack Triggers CISA Warning

23 August 2022

CISA is warning that Palo Alto Networks’ PAN-OS is under active attack and needs to be patched ASAP. [...]

Fake Reservation Links Prey on Weary Travelers

22 August 2022

Fake travel reservations are exacting more pain from the travel weary, already dealing with the misery of canceled flights and overbooked hotels. [...]

iPhone Users Urged to Update to Patch 2 Zero-Days

19 August 2022

Separate fixes to macOS and iOS patch respective flaws in the kernel and WebKit that can allow threat actors to take over devices and are under attack. [...]

Google Patches Chrome’s Fifth Zero-Day of the Year

18 August 2022

An insufficient validation input flaw, one of 11 patched in an update this week, could allow for arbitrary code execution and is under active attack. [...]

CVE-2023-29357, CVE-2023-24955: Exploit Chain Released for Microsoft SharePoint Server Vulnerabilities

27 September 2023

CVE-2023-29357, CVE-2023-24955: Exploit Chain Released for Microsoft SharePoint Server VulnerabilitiesA proof-of-concept exploit chain has been released for two vulnerabilities in Microsoft SharePoint Server that can be exploited to achieve unauthenticated [...]

Microsoft’s September 2023 Patch Tuesday Addresses 61 CVEs (CVE-2023-36761)

12 September 2023

Microsoft’s September 2023 Patch Tuesday Addresses 61 CVEs (CVE-2023-36761)Microsoft addresses 61 CVEs including two vulnerabilities that were exploited in the wild. 5Critical 55Important 1Moderate 0Low Microsoft patched 61 CVEs in [...]

CVE-2023-20269: Zero-Day Vulnerability in Cisco Adaptive Security Appliance and Firepower Threat Defense Reportedly Exploited by Ransomware Groups

12 September 2023

Ransomware groups including LockBit and Akira are reportedly exploiting a zero-day vulnerability in Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) appliances with VPN functionality enabled. Background On September [...]

AA23-250A: Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475

7 September 2023

AA23-250A: Multiple Nation-State Threat Actors Exploit CVE-2022-47966 and CVE-2022-42475A joint Cybersecurity Advisory examines the exploitation of two critical vulnerabilities by nation-state threat actors. Background On September 7, a joint Cybersecurity [...]

CVE-2023-2868: Barracuda and FBI Recommend Replacing Email Security Gateway (ESG) Devices Immediately

30 August 2023

CVE-2023-2868: Barracuda and FBI Recommend Replacing Email Security Gateway (ESG) Devices ImmediatelySince October 2022, attackers have been exploiting a zero-day vulnerability in Barracuda Email Security Gateway devices, and both the [...]

CVE-2023-38035: Ivanti Sentry API Authentication Bypass Zero-Day Exploited in the Wild

22 August 2023

For the third time in a month, Ivanti discloses a zero-day vulnerability in one of its products that has been exploited in the wild Update August 31:The Identifying affected systems [...]

Microsoft’s August 2023 Patch Tuesday Addresses 73 CVEs (CVE-2023-38180)

8 August 2023

Microsoft addresses 73 CVEs, including one vulnerability exploited in the wild. 6Critical 67Important 0Moderate 0Low Microsoft patched 73 CVEs in its August Patch Tuesday release, with six rated as critical [...]

AA23-215A: 2022's Top Routinely Exploited Vulnerabilities

3 August 2023

AA23-215A: 2022's Top Routinely Exploited VulnerabilitiesA joint Cybersecurity Advisory collaborated on by multiple international agencies highlights the top routinely exploited vulnerabilities of 2022 Background On August 3, a joint Cybersecurity [...]

CVE-2023-35078: Ivanti Endpoint Manager Mobile (EPMM) / MobileIron Core Unauthenticated API Access Vulnerability

25 July 2023

Critical vulnerability in a popular mobile device management solution from Ivanti has been exploited in the wild in limited attacks Update August 1: This blog has been updated to include [...]

Oracle July 2023 Critical Patch Update Addresses 183 CVEs

19 July 2023

Oracle July 2023 Critical Patch Update Addresses 183 CVEsOracle addresses 183 CVEs in its third quarterly update of 2023 with 508 patches, including 76 critical updates. Background On July 18, [...]

Introducing Active Risk

25 September 2023

Security teams need better prioritization mechanisms. That's why we developed Active Risk, the new risk scoring methodology in InsightVM. [...]

CVE-2023-42793: Critical Authentication Bypass in JetBrains TeamCity CI/CD Servers

25 September 2023

On September 20, 2023, JetBrains disclosed CVE-2023-42793, a critical authentication bypass vulnerability in on-premises instances of their TeamCity CI/CD server. Successful exploitation could make the vulnerability a potential supply chain [...]

Metasploit Weekly Wrap-Up

22 September 2023

Improved Ticket Forging Metasploit’s admin/kerberos/forge_ticket module has been updated to work with Server 2022. In Windows Server 2022, Microsoft started requiring additional new PAC elements to be present - the [...]

Rapid7 Delivers Visibility Across All 19 Steps of Attack in 2023 MITRE Engenuity ATT&CK® Evaluations: Enterprise

20 September 2023

InsightIDR has evolved to stay in front of emergent threats and expanding attack surfaces, and now we are proud to share our participation and results from the most recent MITRE [...]

Rapid7 doubles down on a platform approach for Vulnerability Risk Management

20 September 2023

This week, Rapid7 was named a Strong Performer in The Forrester Wave™: Vulnerability Risk Management, Q3 2023. [...]

Metasploit Weekly Wrap-Up

15 September 2023

Flask Cookies This week includes two modules related to Flask cookie signatures. One is specific to Apache Superset where session cookies can be resigned, allowing an attacker to elevate their [...]

Patch Tuesday - September 2023

12 September 2023

A relatively light month. Word NTLM hash disclosure. Streaming Service Proxy elevation to SYSTEM. Internet Connection Sharing critical RCE. [...]

Metasploit Weekly Wrap-Up

8 September 2023

New module content (4) Roundcube TimeZone Authenticated File Disclosure Authors: joel, stonepresto, and thomascube Type: Auxiliary Pull request: #18286 contributed by cudalac Path: auxiliary/gather/roundcube_auth_file_read AttackerKB reference: CVE-2017-16651 Description: This PR [...]

A Look at Our Development Process of the Cloud Resource Enrichment API

7 September 2023

Rapid7 has developed a new Cloud Resource Enrichment API that streamlines data retrieval from various cloud resources. [...]

CVE-2023-4528: Java Deserialization Vulnerability in JSCAPE MFT (Fixed)

7 September 2023

In August 2023, Rapid7 discovered CVE-2023-4528, a Java deserialization vulnerability in Redwood Software’s JSCAPE MFT secure managed file transfer product. Successful exploitation can run arbitrary Java code as the `root` [...]

Metasploit Weekly Wrap-Up

1 September 2023

Pumpkin Spice Modules Here in the northern hemisphere, fall is on the way: leaves changing, the air growing crisp and cool, and some hackers changing the flavor of their caffeine. [...]

Fake Update Utilizes New IDAT Loader To Execute StealC and Lumma Infostealers

31 August 2023

Rapid7 has observed the Fake Browser Update lure utilizing a sophisticated new loader to execute infostealers. [...]

Exploitation of Juniper Networks SRX Series and EX Series Devices

31 August 2023

On August 17, 2023, Juniper Networks published an out-of-band advisory on four different CVEs affecting Junos OS on SRX and EX Series devices. Successful exploitation would likely enable attackers to [...]

PenTales: What It’s Like on the Red Team

31 August 2023

In this series, we’re sharing some of our favorite tales from the pen test desk and hopefully highlight some ways you can improve your own organization’s security. [...]

Velociraptor 0.7.0 Release: Dig Deeper With Enhanced Client Search, Server Improvements and Expanded VQL Library

31 August 2023

Rapid7 is thrilled to announce version 0.7.0 of Velociraptor is now LIVE and available for download. [...]

CVE-2023-41333

28 September 2023

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this [...]

CVE-2023-41332

28 September 2023

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this [...]

CVE-2023-40026

28 September 2023

This candidate has been reserved by an organization or individual that will use it when announcing a new security problem. When the candidate has been publicized, the details for this [...]

dlilms.unilag.edu.ng Cross Site Scripting vulnerability OBB-3711716

28 September 2023

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator [...]

ruhleben.tripod.com Cross Site Scripting vulnerability OBB-3711710

28 September 2023

billjanoske.tripod.com Cross Site Scripting vulnerability OBB-3711709

28 September 2023

cosky0.tripod.com Cross Site Scripting vulnerability OBB-3711707

28 September 2023

lindamontgomery.net Cross Site Scripting vulnerability OBB-3711705

28 September 2023

inckolhapur.tripod.com Cross Site Scripting vulnerability OBB-3711704

28 September 2023

geniesse.com Cross Site Scripting vulnerability OBB-3711703

28 September 2023

ze-colmeia-hb.tripod.com Cross Site Scripting vulnerability OBB-3711702

28 September 2023

kenoandochobits.tripod.com Cross Site Scripting vulnerability OBB-3711701

28 September 2023

Using GenAI in Your Business? Here Is What You Need To Know

28 September 2023

By Owais Sultan Generative AI is a technology that is still receiving a lot of attention from individuals and businesses to… This is a post from HackRead.com Read the original [...]

signin.acep.org Open Redirect vulnerability OBB-3711699

27 September 2023

iracemapolis.tripod.com Cross Site Scripting vulnerability OBB-3711697

27 September 2023

siteluismoreno.tripod.com Cross Site Scripting vulnerability OBB-3711696

27 September 2023

ihs-students.tripod.com Cross Site Scripting vulnerability OBB-3711695

27 September 2023

vhsvernonct.tripod.com Cross Site Scripting vulnerability OBB-3711694

27 September 2023

pimentinha-rge.tripod.com Cross Site Scripting vulnerability OBB-3711693

27 September 2023

hausarzt-blumenthal.de Cross Site Scripting vulnerability OBB-3711690

27 September 2023

rcnaeb-shillong.tripod.com Cross Site Scripting vulnerability OBB-3711692

27 September 2023

209.64.116.100 Cross Site Scripting vulnerability OBB-3711689

27 September 2023

Snapchat Safety for Parents: How to Safeguard Your Child

27 September 2023

By Owais Sultan Snapchat is a platform that may not be suitable for everyone, especially if the user is an underage child. So, what can you do? This is a [...]

adventurewoodlogcabin.com Cross Site Scripting vulnerability OBB-3711688

27 September 2023

dragonforcekarate.com Cross Site Scripting vulnerability OBB-3711686

27 September 2023

AgentSmith HIDS – Host Based Intrusion Detection

31 August 2023

AgentSmith HIDS is a powerful component of a Host-based Intrusion Detection system, it has anti-rootkit functionalities and is a very performant way to collect information about a host. [...]

padre – Padding Oracle Attack Exploiter Tool

28 May 2023

padre is an advanced exploiter and Padding Oracle attack tool that can be deployed against CBC mode encryption. [...]

Privacy Implications of Web 3.0 and Darknets

31 March 2023

The evolution of the internet has been rapid over the years and has impacted the privacy implications of Web 3.0 and Darknets [...]

DataSurgeon – Extract Sensitive Information (PII) From Logs

20 March 2023

DataSurgeon (ds) is a versatile tool designed to Extract Sensitive Information (PII) From Logs, it's intended to be used for incident response, penetration testing, and CTF challenges. [...]

Pwnagotchi – Maximize Crackable WPA Key Material For Bettercap

12 February 2023

Pwnagotchi is an A2C-based "AI" leveraging bettercap that learns from its surrounding WiFi environment to maximize crackable WPA key material it captures [...]

HardCIDR – Network CIDR and Range Discovery Tool

29 December 2022

HardCIDR is a Linux Bash script to discover the netblocks, or ranges, (in CIDR notation) owned by the target organization during the intelligence gathering phase of a penetration test. [...]

Socialscan – Command-Line Tool To Check For Email And Social Media Username Usage

29 April 2022

socialscan is an accurate command-line tool to check For email and social media username usage on online platforms, given an email address or username, socialscan returns whether it is available, [...]

CFRipper – CloudFormation Security Scanning & Audit Tool

23 January 2022

CFRipper is a Python-based Library and CLI security analyzer that functions as an AWS CloudFormation security scanning and audit tool, it aims to prevent vulnerabilities from getting to production infrastructure [...]

CredNinja – Test Credential Validity of Dumped Credentials or Hashes

5 January 2022

CredNinja is a tool to quickly test credential validity of dumped credentials (or hashes) across an entire network or domain very efficiently. At the core of it, you provide it [...]

assetfinder – Find Related Domains and Subdomains

29 December 2021

assetfinder is a Go-based tool to find related domains and subdomains that are potentially related to a given domain from a variety of sources including Facebook, ThreatCrowd, Virustotal and more. [...]

Apple Zero-Day Flaws Exploited For Predator Spyware Attacks

27 September 2023

Heads up, Apple users! Researchers have caught active exploitation of three zero-day flaws in Apple… Apple Zero-Day Flaws Exploited For Predator Spyware Attacks on Latest Hacking News | Cyber Security [...]

How to View Incognito History on Android Without Them Knowing

27 September 2023

Incognito mode is a popular feature that allows users to browse the internet privately, without… How to View Incognito History on Android Without Them Knowing on Latest Hacking News | [...]

GitHub Makes Passkey For Passwordless Logins Publicly Available

25 September 2023

Continuing its efforts for users’ account security, GitHub takes another step as it releases passkey… GitHub Makes Passkey For Passwordless Logins Publicly Available on Latest Hacking News | Cyber Security [...]

Frontend as a Service (FaaS): Revolutionizing Web Development for Speed and Simplicity

25 September 2023

Are you looking to accelerate your web development and simplify maintainability? Frontend as a Service… Frontend as a Service (FaaS): Revolutionizing Web Development for Speed and Simplicity on Latest Hacking [...]

Signal Upgrades Its E2E Encryption With Quantum Resistance

22 September 2023

After serving users with one of the most resilient end-to-end encryption protocols for communication, Signal… Signal Upgrades Its E2E Encryption With Quantum Resistance on Latest Hacking News | Cyber Security [...]

Hackers Target Azerbaijan Users With A Novel Rust Malware

19 September 2023

Researchers have caught a new malware campaign in the wild that deploys a novel Rust-based… Hackers Target Azerbaijan Users With A Novel Rust Malware on Latest Hacking News | Cyber [...]

Google Authenticator Flaw Inadvertently Facilitated $15 Million Theft

19 September 2023

Recently, a cryptocurrency firm, Fortress Trust, disclosed a theft of $15 million following a cyber… Google Authenticator Flaw Inadvertently Facilitated $15 Million Theft on Latest Hacking News | Cyber Security [...]

Why is cyber security important for your company?

19 September 2023

A lot of people might be tempted to dismiss cyber security as something relatively unimportant.… Why is cyber security important for your company? on Latest Hacking News | Cyber Security [...]

New MidgeDropper Malware Variant Found Targeting Windows Users

18 September 2023

Researchers have found a new variant of the MidgeDropper malware typically targeting Windows systems. In… New MidgeDropper Malware Variant Found Targeting Windows Users on Latest Hacking News | Cyber Security [...]

ThemeBleed – Code Execution Vulnerability In Windows 11 Themes

18 September 2023

A researcher found an interesting vulnerability in Windows 11 Themes that could allow arbitrary code… ThemeBleed – Code Execution Vulnerability In Windows 11 Themes on Latest Hacking News | Cyber [...]

QR codes in email phishing

27 September 2023

Scammers are camouflaging phishing links with QR codes and distributing them through email. [...]

Overview of IoT threats in 2023

21 September 2023

IoT threats: how devices get hacked, what malware is uploaded, and what services are on offer on the dark web in 2023. [...]

Threat landscape for industrial automation systems. Statistics for H1 2023

13 September 2023

In the first half of 2023, the percentage of ICS computers on which malicious objects were blocked decreased from H2 2022 by just 0.3 pp to 34%. [...]

Free Download Manager backdoored – a possible supply chain attack on Linux machines

12 September 2023

Kaspersky researchers analyzed a Linux backdoor disguised as Free Download Manager software that remained under the radar for at least three years. [...]

From Caribbean shores to your devices: analyzing Cuba ransomware

11 September 2023

The article analyzes the malicious tactics, techniques and procedures (TTP) used by the operator of the Cuba ransomware, and details a Cuba attack incident. [...]

Evil Telegram doppelganger attacks Chinese users

8 September 2023

Spyware Telegram mod in Uighur and Chinese spreads through Google Play stealing messages and other user data. [...]

IT threat evolution in Q2 2023. Non-mobile statistics

30 August 2023

PC malware statistics for Q2 2022 includes data on miners, ransomware, banking Trojans, and other threats to Windows, macOS and IoT devices. [...]

IT threat evolution in Q2 2023. Mobile statistics

30 August 2023

The smartphone malware statistics for Q2 2023 includes data for Android malware, adware, banking Trojans and ransomware. [...]

IT threat evolution in Q2 2023

30 August 2023

Q2 2023 overview: targeted attacks such as Operation Triangulation, CloudWizard and Lazarus activity, Nokoyawa ransomware, and others. [...]

Lockbit leak, research opportunities on tools leaked from TAs

25 August 2023

In September of 2022, multiple security news professionals wrote about and confirmed the leakage of a builder for Lockbit 3 ransomware. In this post we provide the analysis of the [...]

Critical Vulnerability in libwebp Library

27 September 2023

Both Apple and Google have recently reported critical vulnerabilities in their systems—iOS and Chrome, respectively—that are ultimately the result of the same vulnerability in the libwebp library: On Thursday, researchers [...]

Signal Will Leave the UK Rather Than Add a Backdoor

26 September 2023

Totally expected, but still good to hear: Onstage at TechCrunch Disrupt 2023, Meredith Whittaker, the president of the Signal Foundation, which maintains the nonprofit Signal messaging app, reaffirmed that Signal [...]

Friday Squid Blogging: New Squid Species

22 September 2023

An ancient squid: New research on fossils has revealed that a vampire-like ancient squid haunted Earth’s oceans 165 million years ago. The study, published in June edition of the journal [...]

New Revelations from the Snowden Documents

21 September 2023

Jake Appelbaum’s PhD thesis contains several new revelations from the classified NSA documents provided to journalists by Edward Snowden. Nothing major, but a few more tidbits. Kind of amazing that [...]

On the Cybersecurity Jobs Shortage

20 September 2023

In April, Cybersecurity Ventures reported on extreme cybersecurity job shortage: Global cybersecurity job vacancies grew by 350 percent, from one million openings in 2013 to 3.5 million in 2021, according [...]

Detecting AI-Generated Text

19 September 2023

There are no reliable ways to distinguish text written by a human from text written by an large language model. OpenAI writes: Do AI detectors work? In short, no. While [...]

Using Hacked LastPass Keys to Steal Cryptocurrency

18 September 2023

Remember last November, when hackers broke into the network for LastPass—a password database—and stole password vaults with both encrypted and plaintext data for over 25 million users? Well, they’re now [...]

Friday Squid Blogging: Cleaning Squid

15 September 2023

Two links on how to properly clean squid. I learned a few years ago, in Spain, and got pretty good at it. As usual, you can also use this squid [...]

LLM Summary of My Book Beyond Fear

15 September 2023

Claude (Anthropic’s LLM) was given this prompt: Please summarize the themes and arguments of Bruce Schneier’s book Beyond Fear. I’m particularly interested in a taxonomy of his ethical arguments—please expand [...]

On Technologies for Automatic Facial Recognition

15 September 2023

Interesting article on technologies that will automatically identify people: With technology like that on Mr. Leyvand’s head, Facebook could prevent users from ever forgetting a colleague’s name, give a reminder [...]

How Collaboration Across Platforms Could Supercharge AI Performance

19 September 2023

By Owais Sultan Collaboration across platforms enables AI models to access a wider range of data and expertise, leading to faster… This is a post from HackRead.com Read the original [...]

Branded Merchandise: The Secret Weapon for Building a Strong Brand Identity

18 September 2023

By Owais Sultan In today’s digitally driven world, the cybersecurity aspect of brand identity has become paramount. A company’s brand is… This is a post from HackRead.com Read the original [...]

Insider Threat Awareness Month: Protecting Your Business from Within

18 September 2023

By Waqas This article delves into the significance of Insider Threat Awareness Month and explores effective strategies that organizations can employ to detect and mitigate these often elusive threats. This [...]

Microsoft AI Researchers Expose 38TB of Top Sensitive Data

18 September 2023

By Waqas Another day, another data security incident at Microsoft. This is a post from HackRead.com Read the original post: Microsoft AI Researchers Expose 38TB of Top Sensitive Data [...]

Crooks Exploited Satellite Live Feed Delay for Betting Advantage

18 September 2023

By Deeba Ahmed The gang used satellite technology to get sports feed and predict match results before bookmakers. This is a post from HackRead.com Read the original post: Crooks Exploited [...]

Rust Implant Used in New Malware Campaign Against Azerbaijan

18 September 2023

By Waqas KEY FINDINGS Organizations should take steps to protect themselves from this campaign by keeping software up to date,… This is a post from HackRead.com Read the original post: [...]

10 Top DDoS Attack Protection and Mitigation Companies in 2023

18 September 2023

By Waqas A DDoS attack can cripple your servers. Here's a list of DDoS mitigation companies in 2023, along with a brief overview of the DDoS attacks they have effectively [...]

Billionaire Mark Cuban Falls Victim to Crypto Hack Again, Loses $900K

17 September 2023

By Deeba Ahmed Crypto experts suspect Cuban may have made a mistake to get his account hacked. This is a post from HackRead.com Read the original post: Billionaire Mark Cuban [...]

ETH Founder Vitalik Buterin’s X (Twitter) Hacked, $700k Stolen

16 September 2023

By Deeba Ahmed The hacker enticed victims with a malicious link, promising free commemorative NFTs and stole all the funds once they connected their wallets. This is a post from [...]

Advantages of a Cloud VPS Server

16 September 2023

By Owais Sultan A Cloud VPS (Virtual Private Server) is a virtualized instance of a physical server hosted in the cloud, offering scalable computing resources and the ability to run [...]

Chinese Gov Hackers Caught Hiding in Cisco Router Firmware

27 September 2023

The NSA and FBI warn that a Chinese state-sponsored APT called BlackTech is hacking into network edge devices and using firmware implants to silently hop around the corporate networks of [...]

CISA Unveils New HBOM Framework to Track Hardware Components

27 September 2023

CISA unveils a new Hardware Bill of Materials (HBOM) framework for buyers and sellers to communicate about components in physical products. The post CISA Unveils New HBOM Framework to Track [...]

Gem Security Lands $23 Million Series A Funding

27 September 2023

Israeli security startup Gem Security has raised a total of $34 million to tackle cloud threat detection and incident response. The post Gem Security Lands $23 Million Series A Funding [...]

Misconfigured TeslaMate Instances Put Tesla Car Owners at Risk

27 September 2023

Attackers can find tons of information on Tesla cars and their drivers by searching for misconfigured TeslaMate instances online. The post Misconfigured TeslaMate Instances Put Tesla Car Owners at Risk [...]

Firefox 118 Patches High-Severity Vulnerabilities

27 September 2023

Firefox 118 patches six high-severity vulnerabilities, including a memory leak potentially leading to sandbox escape. The post Firefox 118 Patches High-Severity Vulnerabilities appeared first on SecurityWeek. [...]

Stolen GitHub Credentials Used to Push Fake Dependabot Commits

27 September 2023

Threat actors have been using stolen GitHub personal access tokens to push malicious code posing as Dependabot contributions. The post Stolen GitHub Credentials Used to Push Fake Dependabot Commits appeared [...]

Google Open Sources Binary File Comparison Tool BinDiff

27 September 2023

Google has released the source code of BinDiff, a binary file comparison tool popular within the security research community, on GitHub. The post Google Open Sources Binary File Comparison Tool [...]

macOS 14 Sonoma Patches 60 Vulnerabilities

27 September 2023

macOS 14 Sonoma has been officially released by Apple and the latest version of the operating system patches over 60 vulnerabilities. The post macOS 14 Sonoma Patches 60 Vulnerabilities appeared [...]

New GPU Side-Channel Attack Allows Malicious Websites to Steal Data

27 September 2023

GPUs from AMD, Apple, Arm, Intel, Nvidia and Qualcomm are vulnerable to a new type of side-channel attack named GPU.zip. The post New GPU Side-Channel Attack Allows Malicious Websites to [...]

Microsoft Adding New Security Features to Windows 11

26 September 2023

Microsoft announced that the latest Windows 11 update (23H2) will bring more support for passkeys and several new security features. The post Microsoft Adding New Security Features to Windows 11 [...]

Attackers using Google Ads to distribute Bumblebee malware

22 April 2023

Security Researchers found a new malware called Bumblebee malware that targets users through Google Ads. [...]

Cyber Attack on Indian Health Ministry Website

6 April 2023

During March 2023, a group of Russian hackers cyber-attacked the official website of the Indian [...]

Fake ChatGPT Chrome Extension Hijacking Attack

16 March 2023

In today’s digital era, web browsers and their extensions have become a crucial part of [...]

Top 5 Open Source Firewall for Network Security

14 March 2023

A firewall is a security system that is used to control network traffic and prevent [...]

Understanding Signaling System 7 (SS7)

11 March 2023

The Signaling System 7 (SS7) is a set of protocol suite telecommunication networks used to [...]

We’re going teetotal: It’s goodbye to The Daily Swig

2 March 2023

PortSwigger today announces that The Daily Swig is closing down [...]

Bug Bounty Radar // The latest bug bounty programs for March 2023

28 February 2023

New web targets for the discerning hacker [...]

Indian transport ministry flaws potentially allowed creation of counterfeit driving licenses

28 February 2023

Armed with personal data fragments, a researcher could also access 185 million citizens’ PII [...]

Password managers: A rough guide to enterprise secret platforms

27 February 2023

The second part of our password manager series looks at business-grade tech to handle API tokens, login credentials, and more [...]

Chromium bug allowed SameSite cookie bypass on Android devices

27 February 2023

Protections against cross-site request forgery could be bypassed [...]

Deserialized web security roundup: Twitter 2FA backlash, GoDaddy suffers years-long attack campaign, and XSS Hunter adds e2e encryption

24 February 2023

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news [...]

NIST plots biggest ever reform of Cybersecurity Framework

23 February 2023

CSF 2.0 blueprint offered up for public review [...]

Cisco ClamAV anti-malware scanner vulnerable to serious security flaw

22 February 2023

Patch released for bug that poses a critical risk to vulnerable technologies [...]

CVSS system criticized for failure to address real-world impact

21 February 2023

JFrog argues vulnerability risk metrics need complete revamp [...]

‘Most web API flaws are missed by standard security tests’ – Corey J Ball on securing a neglected attack vector

20 February 2023

API security is a ‘great gateway’ into a pen testing career, advises specialist in the field [...]

HTTP request smuggling bug patched in HAProxy

17 February 2023

Exploitation could enable attackers to access backend servers [...]

Belgium launches nationwide safe harbor for ethical hackers

15 February 2023

New legal protections for security researchers could be the strongest of any EU country [...]

Remote code execution flaw patched in Apache Kafka

15 February 2023

Possible RCE and denial-of-service issue discovered in Kafka Connect [...]

Password manager security: Which is the right option for me?

14 February 2023

The first guide of our two-part series helps consumers choose the best way to manage their login credentials [...]

Deserialized web security roundup: KeePass dismisses ‘vulnerability’ report, OpenSSL gets patched, and Reddit admits phishing hack

10 February 2023

Your fortnightly rundown of AppSec vulnerabilities, new hacking techniques, and other cybersecurity news [...]

OAuth ‘masterclass’ crowned top web hacking technique of 2022

10 February 2023

Single sign-on and request smuggling to the fore in another stellar year for web security research [...]

Radio silence from DMS vendor quartet over XSS zero-days

10 February 2023

No response or patch yet forthcoming from providers of vulnerable document management systems [...]

New XSS Hunter host Truffle Security faces privacy backlash

9 February 2023

Anonymized numbers of bug discoveries swiftly deleted after pushback [...]

Second UK Computer Misuse Act consultation reflects ‘very little progress’

8 February 2023

Campaigner bemoans glacial progress of review and urges government to set clear timetable [...]

DOM XSS vulnerability in Gartner Peer Insights widget patched

8 February 2023

Web attack vector closed after failed fix [...]

Toyota sealed up a backdoor to its global supplier management network

7 February 2023

Hacker praises carmaker’s prompt response to the (mercifully) good-faith pwnage [...]

Google engineers plot to mitigate prototype pollution

6 February 2023

Plan to create boundary between JavaScript objects and their blueprints gathers momentum [...]

Serious security hole plugged in infosec tool binwalk

3 February 2023

Path traversals could ‘void reverse engineering efforts and tamper with evidence collected’ [...]

Truffle Security relaunches XSS Hunter tool with new features

2 February 2023

Popular hacking aid now available with CORS misconfig detection function following end-of-life announcement [...]

Researcher drops Lexmark RCE zero-day rather than sell vuln ‘for peanuts’

1 February 2023

Printer exploit chain could be weaponized to fully compromise more than 100 models [...]

Qualys Survey of Top 10 Exploited Vulnerabilities in 2023

26 September 2023

The Qualys Threat Research Unit (TRU) has thoroughly analyzed vulnerabilities reported in 2023. Our comprehensive study assesses factors including weaponization status, existence in the CISA KEV, instances or usage of [...]

Qualys Is the Outperformer in the New GigaOm Radar Report for Continuous Vulnerability Management

18 September 2023

GigaOm has unveiled its third-annual Radar for Continuous Vulnerability Management featuring Qualys. In this Report, GigaOm provides a detailed analysis of the value and progression of vulnerability management (VM) capabilities [...]

Microsoft and Adobe Patch Tuesday, September 2023 Security Update Review

12 September 2023

Microsoft has released the Patch Tuesday edition for September. This month’s updates have addressed 66 security vulnerabilities (including Edge Chromium-based) in multiple products, features, and roles. Microsoft Patch Tuesday for [...]

Risk Fact #5: Keeping the Pace of Remediation at Cloud Scale Requires Automation

12 September 2023

Qualys Blog Series – 2023 TotalCloud Security Insights by the Threat Research Unit The 2023 TotalCloud Security Insights report from the Qualys Threat Research Unit (TRU) provides research insights, best practices, [...]

Qualys Top 20 Most Exploited Vulnerabilities

4 September 2023

The earlier blog posts showcased an overview of the vulnerability threat landscape that is either remotely exploited or most targeted by attackers. A quick recap – We focused on high-risk [...]

Risk Fact #4: Malware in your Cloud means Exploitation is underway

29 August 2023

Risk Fact #3: External-Facing Vulnerabilities Cloud Security Research Risk Fact

18 August 2023

Risk Fact #2: Weaponized Vulnerabilities Cloud Security Research Risk Fact

9 August 2023

Microsoft and Adobe Patch Tuesday, August 2023 Security Update Review

8 August 2023

Microsoft has released its August edition of Patch Tuesday. This month’s updates have addressed 89 security vulnerabilities in multiple products, features, and roles. Microsoft Patch Tuesday for August 2023 Microsoft [...]

Risk Fact #1: Cloud Migration Exploitation Cloud Security Research Risk Fact

1 August 2023

Lu0Bot Node.js Malware Takes Complete Control Over Victim’s Computer

27 September 2023

Through strategies like polymorphic code, which continuously alters its appearance to prevent detection, as well as employing encryption and obfuscation to disguise its actions, malware is getting more complex and [...]

Apple Security Fixes for iPhone, iPad, Safari, Watch & Sonoma14: Update Now!

27 September 2023

Apple previously reported three zero-day vulnerabilities exploited in the wild by threat actors, which Apple fixed as part of an Emergency patch update. However, a new security advisory has been [...]

The Rise of Automotive Hacking: How to Secure Your Vehicles Against Hacking

27 September 2023

Though we can’t see it, the world brims with more technology than ever. These days, devices with internet connectivity live within the ever-growing Internet of Things (IoT)—a worldwide “web” where [...]

North Korean and Chinese Hackers Attacking Healthcare Industries

27 September 2023

Healthcare has been one of the primary industries targeted by threat actors as part of every malware or ransomware campaign. Many Advanced Persistent Threat (APT) actors are from China due [...]

New AtlasCross APT Using Weaponized Word Documents to Deploy Malware

27 September 2023

Cybersecurity analysts at NSFOCUS Security Labs recently uncovered an unknown phishing-based attack process during threat-hunting. Apart from this, during their further investigation, they identified two new Trojans and rare attack [...]

Google Chrome use-after-free Vulnerability Leads to Remote Attack

26 September 2023

Google Chrome has been recently discovered to be a Use-after-free vulnerability that threat actors can exploit to attack users. This vulnerability exists in the Google Chrome VideoEncoder, which can be [...]

Millions Of Newborn Registry Records Were Compromised In A MOVEit Data Breach

26 September 2023

The Progress MOVEit software’s vulnerability resulted in a cybersecurity breach that affected BORN (the Better Outcomes Registry & Network), which gathers data on pregnancies, births, the postpartum period, and childhood. Unauthorized [...]

Threat Actors Actively Using Remote Management Tools to Deploy Ransomware

26 September 2023

The threat actors have been spotted increasingly depending on Remote Management and Monitoring (RMM) tools, which resulted in a relatively botched Hive ransomware distribution. The original payload consisted of an executable file [...]

EvilBamboo Attacking Android & iOS Devices With Custom Malware

26 September 2023

EvilBamboo, formerly known as “Evil Eye,” has been found to target Tibetan, Uyghur, and Taiwanese organizations and individuals. This threat actor was mentioned as conducting custom Android malware campaigns in [...]

BIND DNS System Flaws Let Attackers Launch DoS Attacks

25 September 2023

In a recent disclosure, BIND 9, a widely-used DNS (Domain Name System) server software, has been found vulnerable to two critical security flaws, labeled CVE-2023-4236 and CVE-2023-3341. These vulnerabilities, if [...]

Github Repositories Bombarded by Info-Stealing Commits Masked as Dependabot

27 September 2023

The attack involves creating fake commit messages titled "fix" to introduce malware that extracts secrets from targeted repositories and steals passwords from web-form submissions. [...]

ShadowSyndicate: New RaaS Connected to Multiple Ransomware Families

27 September 2023

Researchers have discovered the infrastructure linked to a threat group called ShadowSyndicate, believed to have launched attacks using seven distinct ransomware families in the last year. ShadowSyndicate has been identified [...]

Newly Discovered ZenRAT Malware Targets Windows Users

27 September 2023

A new malware strain called ZenRAT has emerged in the wild to steal information from Windows systems. It was initially discovered on a website pretending to be associated with the [...]

Attacks on EMEA Financial Services Double in a Year

27 September 2023

A new report from Akamai revealed that financial services organizations in the EMEA region suffered around one billion web app and API attacks during the period, with insurance the most [...]

CISA Publishes Hardware Bill of Materials Framework

27 September 2023

The US Cybersecurity and Infrastructure Security Agency (CISA) has published new guidance designed to improve the accuracy of risk assessments related to hardware products in the supply chain. [...]

The CISO Carousel and its Effect on Enterprise Cybersecurity

27 September 2023

CISOs often face being used as scapegoats for security incidents, leading to high turnover rates in the role. Lack of board support and prioritization of cybersecurity contributes to CISO churn. [...]

Canadian Flair Airlines Leaked MySQL Database Credentials, SMTP Configs, and Other Sensitive Data

27 September 2023

The leak consisted of publicly accessible environment files hosted on the airline's website. It included MySQL database credentials, SMTP configuration, and other sensitive information, potentially allowing unauthorized access and phishing [...]

Voting Equipment Giants Team Up For Security

27 September 2023

While certified election systems are regularly tested, this represents the first time that manufacturers have voluntarily opened their systems to third-party scrutiny as part of a vulnerability disclosure process. [...]

New GPU Side-Channel Attack Allows Malicious Websites to Steal Data

27 September 2023

The new attack method, named GPU.zip, was discovered and detailed by representatives of the University of Texas at Austin, Carnegie Mellon University, University of Washington, and University of Illinois Urbana-Champaign. [...]

DarkBeam Leaks Billions of Credentials via Unsecured Elasticsearch and Kibana Interface

27 September 2023

The leaked data, including email and password pairs, provides cybercriminals with almost limitless attack capabilities, making affected users vulnerable to targeted phishing campaigns. [...]

New AtlasCross Hackers Use American Red Cross as Phishing Lure

27 September 2023

The group's malware includes trojans named DangerAds and AtlasAgent, with AtlasAgent being a custom C++ trojan that can execute various commands and evade detection by security tools. [...]

Ukraine Cyber Defenders Prepare for Winter

27 September 2023

Ukrainian cyber defenders are girding for an onslaught of cyberattacks against energy and other critical infrastructure sectors as cold weather returns to the country, currently in its second year of [...]

Philippines State Health Organization Struggling to Recover From Ransomware Attack

27 September 2023

The Philippine Health Insurance Corporation (PhilHealth), which manages the country's universal healthcare system, has been hit by a ransomware attack. The incident forced the organization to shut down several websites [...]

Pension Firms Report 4000% Surge in Breaches

27 September 2023

Pension providers reported a staggering quadruple-digit percentage increase in data breaches to the UK regulator last year, according to new data compiled by professional services firm RPC. [...]

UK Logistics Firm Blames Ransomware Attack for Insolvency, 730 Redundancies

27 September 2023

The attack affected key systems and financial information, making it difficult for the company to secure investment and funding, ultimately leading to job losses for hundreds of employees. [...]

HiddenGh0st Malware Attacking MS-SQL & MySQL Servers

27 September 2023

A remote control malware called Gh0st RAT, which is popular with Chinese threat actors and has publicly available source code was created by China’s C. Rufus Security Team. ASEC (AhnLab [...]

ZenRAT Malware Delivered Through Fake Bitwarden Installation Packages

27 September 2023

According to the recent findings by Proofpoint, a new malware called ZenRAT has been discovered. This malware is being spread via fraudulent download packages disguised as Bitwarden installations. This malware [...]

BlackTech APT Hackers Attacking Network Routers to Breach Corporate Networks

27 September 2023

Hackers called BlackTech APT have been doing bad things since 2010. They attack places like the government, factories, technology, media, electronics, phones, and the military. The group behind the attack [...]

Google Given Max Severity Score for lipwebp Zero-day Exploited in Wild

27 September 2023

Google released a security fix for a critical vulnerability that affected Google Chrome for Windows, macOS, and Linux. The vulnerability was given the CVE ID as CVE-2023-4863 and has been [...]

Exela Stealer Attacking Discord Users to Steal Login Credentials

27 September 2023

Open-source data stealers are rapidly gaining popularity due to their versatility, giving threat actors useful reconnaissance tools for malicious objectives. Open-source data stealers can be stealthy if designed and configured [...]

ShadowSyndicate: A New Raas Provider Launching Multiple Ransomware Attacks

27 September 2023

A new Ransomware-as-a-service (RaaS) provider has been discovered by researchers, which notably uses multiple ransomware families and is found to have links with several ransomware attacks since July 2022. This [...]

Hacker Stole $200 Million in Cryptocurrency from Mixin Network

27 September 2023

On September 23, 2023, early in the morning, the Hong Kong Times reported that hackers targeted Mixin Network’s cloud service provider, resulting in mainnet losses. Mixin Network was launched in [...]

Xenomorph Android Banking Malware Attacks 30+ US Banks with New Stealing Capabilities

26 September 2023

Xenomorph has been discovered with a new malware campaign targeting several United States and Spain institutions. This new campaign shows thousands of downloads of Xenomorph malware by victims. Xenomorph is [...]

Maltego’s New SSL Certificate Spotter to Detect Suspicious Certificate

26 September 2023

As the world becomes more reliant on technology, the importance of cybersecurity cannot be overstated. Being proactive in identifying and mitigating potential threats is crucial to protecting sensitive information and [...]

Hackers Lures Drone Manual to Deliver Notorious MerlinAgent malware

26 September 2023

Securonix Threat Research has found a significant attack called STARK#VORTEX, which appears to come from a group known as UAC-0154. This campaign specifically targets Ukraine’s military, leveraging a cunning tactic [...]

This vulnerability allows hacking Microsoft SharePoint Server with this exploit code

27 September 2023

The proof-of-concept (PoC) attack code for a major vulnerability known as CVE-2023-29357 has been made public. This vulnerability allows users to get elevated privileges in Microsoft SharePoint Server products withoutRead [...]

Execute arbitrary code on the Docker Server exploiting these 3 vulnerabilities

26 September 2023

In this day and age of containerization, Docker Desktop stands strong as a guiding light for developers in the direction of simplicity. Docker Desktop has been welcomed by developers allRead [...]

Visited thesaurus.com in search for Synonyms? You have Coinminer malware infection

25 September 2023

Thesaurus is one of the most well-known platforms, with 5 million monthly visitors, and is regularly used by students, writers, and everyone else who want to enhance their vocabulary andRead [...]

Ransomware in 2023: Emerging Threats and Countermeasures

25 September 2023

The relentless onslaught of ransomware attacks remains an ever-present challenge for businesses and security experts. As 2023 is slowly approaching its end, it becomes increasingly vital to scrutinize the evolvingRead [...]

Three new SQL Injection vulnerabilities found in MOVEit Software

21 September 2023

The MOVEit transfer service pack has been found to have three vulnerabilities, namely two SQL injections and one instance of Reflected Cross-Site Scripting (XSS). The vulnerabilities exhibit a variety ofRead [...]

How US intelligence hacked into Huawei Servers to find out how it is hacking US government

20 September 2023

Huawei has gained recognition for its telecommunications infrastructure and consumer electronic devices, including smartphones. The United States of America imposed a ban on Huawei principally on grounds of national securityRead [...]

Colombian government hacked by Ransomware, biggest attack in the history

18 September 2023

A considerable number of Colombia’s most notable government departments are now coordinating their responses to a ransomware attack, which is requiring authorities to make major adjustments to their operating procedures.Read [...]

How Repojacking attack on GitHub repos is done, to do supply chain attacks

15 September 2023

Researchers have discovered a new vulnerability in Github that might allow an attacker to take advantage of a race situation in the process of creating a repository on GitHub orRead [...]

Airbus hacked, and more than 3,200 vendors data were sold on the dark web

12 September 2023

Recent investigations indicate that a potentially malicious actor has gained unauthorized access to the sensitive information of 3,200 Airbus suppliers. The data that was left accessible contains sensitive information suchRead [...]

How to send malware via Teams, even “Safe Attachments” or “Safe Links” can’t protect you

11 September 2023

Recent investigations suggest that malicious actors have been spreading the DarkGate Loader malware by exploiting Microsoft Teams as a delivery mechanism. The campaign was started by two external Office 365Read [...]

Coffee Meets Bagel dating app data deleted by hackers. 10 million users affected in hack

7 September 2023

If the object of your affections on the dating app Coffee Meets Bagel (CMB) ignored you towards the end of August, don’t beat yourself up over it; the firm claimsRead [...]

Sony`s Systems Breached. Ransomed.vc Claims Stealing 260 GB of Data

27 September 2023

Ransomed.vc threat group claims they`re responsible for an alleged Sony data breach and attempt to sell the stolen data on the dark web. While Ransomed.vc stated they compromised „all of [...]

Phobos Ransomware: Everything You Need to Know and More

27 September 2023

In the ever-evolving landscape of cyber threats, ransomware remains a pervasive and destructive weapon in the arsenal of cybercriminals. Among the various ransomware strains, Phobos has gained notoriety for its [...]

NY College Must Spend $3.5M on Cybersecurity After Breach Affecting 200k Students

26 September 2023

After a data breach in 2021 exposed the personal information of nearly 200,000 people, the attorney general of New York requested a university to invest $3.5 million in cybersecurity. The [...]

7 Best Sophos Alternatives & Competitors in 2023 [Features, Pricing & Reviews]

22 September 2023

In the ever-evolving cybersecurity landscape, businesses constantly seek robust security solutions to protect their digital assets. Sophos, a well-known name in the cybersecurity industry, has been a trusted choice for [...]

Apple Fixes 3 New Actively Exploited Zero-Day Vulnerabilities

22 September 2023

Apple released an emergency security update to patch three newly identified zero-days exploited actively by threat actors. The vulnerabilities affected iPhone and Mac users, and with this, the total zero-days [...]

New Threat Group: Sandman Targets Telecommunication Companies Across the World With Infostealers

22 September 2023

A previously unknown threat group known as “Sandman” is making its presence felt. The group uses a modular information-stealing malware called “LuaDream” to target telecommunication service providers in the Middle [...]

Computer Security Incident Response Team (CSIRT): How to Build One

21 September 2023

According to the World Economic Forum, “widespread cybercrime and cyber insecurity” is rated as one of the greatest worldwide dangers for the following two and ten years. This means that [...]

International Criminal Court Reveals System Breach and Plans to Bolster Security

20 September 2023

The International Criminal Court (ICC) announced on September 19th that hackers breached their computer systems. ICC storages highly sensitive information about war crimes and is thus one of the world`s [...]

Critical GitLab Pipeline Vulnerability Revealed. Users are urged to patch immediately

20 September 2023

GitLab disclosed critical vulnerability that enables hackers to run pipelines as other users by leveraging scheduled security scan policies. The platform issued an advisory and urged users to apply available [...]

Improper Usage of SAS Token Leads to Massive Microsoft Data Leakage

19 September 2023

Microsoft researchers leaked 38TB of sensitive data to a public GitHub repository while training open-source AI learning models. The Microsoft data leakage occurred starting July 2020 and white hat hackers [...]

What Is Nmap and How to Use It to Enhance Network Security

19 September 2023

Nmap is short for Network Mapper, an open-source tool used for port and IP scanning and app detection. Network and system administrators use it for network inventory, managing service upgrade [...]

Cryptocurrency Scams to Heavily Target TikTok Users

18 September 2023

Cybercriminals heavily target TikTok users with cryptocurrency giveaway scams. The vast majority of the posts impersonate Elon Musk and relate to Tesla or SpaceX. These types of posts have been [...]

EDR for Banking: 6 Ways EDR Can Help Financial Organizations

18 September 2023

There are financial advantages to investing in cybersecurity, especially in Endpoint Detection and Response (EDR) solutions. Breaching one financial institution can bring threat actors access to a variety of companies’ [...]

Best Practices for Endpoint Security in Healthcare Institutions

15 September 2023

While achieving compliance with industry standards is the minimum, it’s not enough to prevent insider threats, supply chain attacks, DDoS, or sophisticated cyberattacks such as double-extortion ransomware, phishing, business email [...]

How DNS Layer Security Stops Ransomware and Other Cyberattacks

15 September 2023

DNS-Layer Security protects users from threats that arise from inbound and outbound traffic. It refers to monitoring communications between endpoints and the internet at a DNS-layer level. Imagine the DNS [...]

ApexSMS - 23,246,481 breached accounts

21 September 2023

In May 2019, news broke of a massive SMS spam operation known as "ApexSMS" which was discovered after a MongoDB instance of the same name was found exposed without a [...]

dBforums - 363,468 breached accounts

20 September 2023

In July 2016, a data breach of the now defunct database forum "dBforums" appeared for sale alongside several others hacked from the parent company, Penton. The breach of the vBulletin [...]

MalindoAir - 4,328,232 breached accounts

14 September 2023

In early 2019, the Malaysian airline Malindo Air suffered a data breach that exposed tens of millions of customer records. Containing 4.3M unique email addresses, the breach also exposed extensive [...]

Viva Air - 932,232 breached accounts

11 September 2023

In March 2022, the now defunct Columbian airline Viva Air suffered a data breach and subsequent ransomware attack. Among a trove of other ransomed data, the incident exposed a log [...]

Dymocks - 836,120 breached accounts

8 September 2023

In September 2023, the Australian book retailer Dymocks announced a data breach. The data dated back to June 2023 and contained 1.2M records with 836k unique email addresses. The breach [...]

Phished Data via CERT Poland - 67,943 breached accounts

31 August 2023

In August 2023, CERT Poland observed a phishing campaign that collected credentials from 68k victims. The campaign collected email addresses and passwords via a phishing email masquerading as a purchase [...]

Pampling - 383,468 breached accounts

31 August 2023

In January 2020, the online clothing retailer Pampling suffered a data breach that exposed 383k unique customer email addresses. The data was later shared on a popular hacking forum and [...]

PlayCyberGames - 3,681,753 breached accounts

31 August 2023

In August 2023, PlayCyberGames which "allows users to play any games with LAN function or games using IP address" suffered a data breach which exposed 3.7M customer records. The data [...]

SevenRooms - 1,205,385 breached accounts

24 August 2023

In December 2022, over 400GB of data belonging to restaurant customer management platform SevenRooms was posted for sale to a popular hacking forum. The data included 1.2M unique email addresses [...]

Duolingo - 2,676,696 breached accounts

23 August 2023

In August 2023, 2.6M records of data scraped from Duolingo were broadly distributed on a popular hacking forum. Obtained by enumerating a vulnerable API, the data had earlier appeared for [...]

Atmeltomo - 580,177 breached accounts

22 August 2023

In April 2021, "Japan's largest e-mail friend search site" Atmeltomo suffered a data breach that was later sold on a popular hacking forum. The breach exposed 1.3M records with 580k [...]

iMenu360 - 3,425,860 breached accounts

17 August 2023

In approximately late 2022, 3.4M customer records from iMenu360 ("The world's #1 most trusted online ordering platform") were exposed. The data appeared to be from ordering systems using the platform [...]

Manipulated Caiman - 39,901,389 breached accounts

15 August 2023

In July 2023, Perception Point reported on a phishing operation dubbed "Manipulated Caiman". Targeting primarily the citizens of Mexico, the campaign attempted to gain access to victims' bank accounts via [...]

Jobzone - 29,708 breached accounts

15 August 2023

In April 2023, data from the Israeli jobs website Jobzone was posted online. The data included 30k records of email addresses, names, social security numbers, genders, dates of birth, fathers' [...]

Rightbiz - 65,376 breached accounts

10 August 2023

In June 2023, data belonging to the "UK's No.1 Business Marketplace" Rightbiz appeared on a popular hacking forum. Comprising of more than 18M rows of data, the breach included 65k [...]

CraftRise - 2,532,527 breached accounts

8 August 2023

In May 2023, news broke of a data breach of the Turkish Minecraft server known as CraftRise. The data of over 2.5M users was subsequently shared on a popular hacking [...]

MagicDuel - 138,443 breached accounts

2 August 2023

In August 2023, the MagicDuel Adventure website suffered a data breach that exposed 138k user records. The data included player names, email and IP addresses and bcrypt password hashes. [...]

BreachForums - 212,156 breached accounts

26 July 2023

In November 2022, the well-known hacking forum "BreachForums" was itself, breached. Later the following year, the operator of the website was arrested and the site seized by law enforcement agencies. [...]

BookCrossing - 1,582,323 breached accounts

25 July 2023

In August 2022, the book social networking site BookCrossing disclosed a data breach that dated back to a database backup from November 2012. The incident exposed almost 1.6M records including [...]

Tigo - 700,394 breached accounts

24 July 2023

In Mid-2023, 300GB of data containing over 100M records from the Chinese video chat platform "Tigo" dating back to March that year was discovered. The data contained over 700k unique [...]