Attacks, Vulnerabilities and Actors 23 October to 29 October 2023

🗓️ 31 Oct 2023 05:56:21Reported by HiveForce LabsType

Significant cyber threat discoveries by HiveForce Labs, including executed attacks, adversary activity, and exploited vulnerabilities. Highlighting the danger of cyberattacks, such as the StripedFly Malware Framework and the actively exploited CVE-2023-5631 in Roundcube instances.

Reporter	Title	Published	Views	Family All 66
ATTACKERKB	CVE-2023-5631	18 Oct 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-46267	20 Oct 202304:15	–	attackerkb
Information Security Automation	November 2023 – January 2024: New Vulristics Features, 3 Months of Microsoft Patch Tuesdays and Linux Patch Wednesdays, Year 2023 in Review	1 Feb 202417:07	–	avleonov
Information Security Automation	About Cross Site Scripting – Roundcube Webmail (CVE-2024-37383) vulnerability	15 Oct 202412:21	–	avleonov
BDU FSTEC	The vulnerability in the library program/lib/Roundcube/rcube_washtml.php of the RoundCube Webmail client allows a malicious user to execute arbitrary JavaScript code.	26 Oct 202300:00	–	bdu_fstec
Circl	CVE-2023-5631	18 Oct 202318:33	–	circl
CISA KEV Catalog	Roundcube Webmail Persistent Cross-Site Scripting (XSS) Vulnerability	26 Oct 202300:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	26 Oct 202312:00	–	cisa
CNNVD	Roundcube Webmail Cross-Site Scripting Vulnerability	18 Oct 202300:00	–	cnnvd
CVE	CVE-2023-5631	18 Oct 202314:51	–	cve