7947 matches found
AZL-34819 CVE-2023-44487 affecting package jx for versions less than 3.2.236-13
The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...
Microsoft Exchange Server Security Vulnerability
Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voice mail, email filtering and screening. A security vulnerability exists in Microsoft Exchange Server. An attacker can exploit the...
CVE-2023-39189
creationtimestamp| type| source ---|---|--- 2023-10-09 22:16:07+00:00| seen| https://t.me/cibsecurity/71854 2025-08-13 09:00:04+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lwbhky6biw2y...
CVE-2023-39928
creationtimestamp| type| source ---|---|--- 2023-10-06 20:13:45+00:00| seen| https://t.me/cibsecurity/71745...
Rocky Linux 8 : postgresql:13 (RLSA-2023:4527)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:4527 advisory. - schemaelement defeats protective searchpath changes; It was found that certain database calls in PostgreSQL could permit an authed attacker with...
CVE-2023-43070
creationtimestamp| type| source ---|---|--- 2023-10-05 22:13:09+00:00| seen| https://t.me/cibsecurity/71680...
CVE-2023-32485
creationtimestamp| type| source ---|---|--- 2023-10-05 22:13:02+00:00| seen| https://t.me/cibsecurity/71676...
CVE-2023-43321
creationtimestamp| type| source ---|---|--- 2023-10-05 02:12:13+00:00| seen| https://t.me/cibsecurity/71652...
CVE-2023-41094
creationtimestamp| type| source ---|---|--- 2023-10-05 00:13:29+00:00| seen| https://t.me/cibsecurity/71635...
CVE-2023-2233
creationtimestamp| type| source ---|---|--- 2023-09-29 13:25:35+00:00| seen| https://t.me/cibsecurity/71253...
CVE-2023-42657
creationtimestamp| type| source ---|---|--- 2023-09-29 11:44:51+00:00| seen| https://t.me/kasperskyb2b/906 2023-09-29 18:00:07+00:00| seen| https://t.me/truesecator/4912 2023-10-10 12:40:03+00:00| exploited| https://t.me/bizonechannel/926 2025-08-31 03:13:01+00:00| seen|...
Xenomorph Banking Trojan: A New Variant Targeting 35+ U.S. Financial Institutions
An updated version of an Android banking trojan called Xenomorph has set its sights on more than 35 financial institutions in the U.S. The campaign, according to Dutch security firm ThreatFabric, leverages phishing web pages that are designed to entice victims into installing malicious Android ap...
Design/Logic Flaw
When sealing/unsealing the “vault” key, a list of PCRs is used, which defines which PCRs are used. In a previous project, CYMOTIVE found that the configuration is not protected by the secure boot, and in response Zededa implemented measurements on the config partition that was mapped to PCR 13. I...
Upcoming Speaking Engagements
This is a current list of where and when I am scheduled to speak: Im speaking at swampUP 2023 in San Jose, California, on September 13, 2023 at 11:35 AM PT. The list is maintained on this page...
CVE-2023-4802
creationtimestamp| type| source ---|---|--- 2023-09-13 20:34:20+00:00| seen| https://t.me/cibsecurity/70408...
CVE-2023-4803
creationtimestamp| type| source ---|---|--- 2023-09-13 20:23:59+00:00| seen| https://t.me/cibsecurity/70409...
CVE-2023-20191
creationtimestamp| type| source ---|---|--- 2023-09-13 20:23:52+00:00| seen| https://t.me/cibsecurity/70403...
CVE-2023-3280
creationtimestamp| type| source ---|---|--- 2023-09-13 20:23:46+00:00| seen| https://t.me/cibsecurity/70398...
caribbeansecurityinstitute.com Cross Site Scripting vulnerability OBB-3677821
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...