Hydrochasma: New Threat Actor Targets Shipping Companies and Medical Labs in Asia

Shipping companies and medical laboratories in Asia have been the subject of a suspected espionage campaign carried out by a never-before-seen threat actor dubbed Hydrochasma. The activity, which has been ongoing since October 2022, "relies exclusively on publicly available and living-off-the-lan...

K1882: Buffer Overflows in DNS Resolver Libraries vulnerability CAN-2002-19

Security Advisory Description Note: Versions that are not listed in this article have not been evaluated for vulnerability to this security advisory. For information about the F5 security policy regarding evaluating older and unsupported versions of F5 products, refer to K4602: Overview of the F5...

covid-19.nchc.org.tw Cross Site Scripting vulnerability OBB-3198860

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2021-20294

creationtimestamp| type| source ---|---|--- 2023-02-20 07:03:36+00:00| published-proof-of-concept| Telegram/IMVWGbIsRdC2nDsNCi19t7tWTUCsQmhC72ZVcTsEb1XgZI 2023-02-20 11:00:35+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7787 2023-03-19 05:47:14+00:00|...

hubbae.ae Cross Site Scripting vulnerability OBB-3198531

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hachiyosuisan.jp Cross Site Scripting vulnerability OBB-3198466

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2012-10007

creationtimestamp| type| source ---|---|--- 2023-02-19 18:15:04+00:00| seen| https://t.me/cibsecurity/58510...

laphotto.com Cross Site Scripting vulnerability OBB-3198279

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-0917

creationtimestamp| type| source ---|---|--- 2023-02-19 12:14:50+00:00| seen| https://t.me/cibsecurity/58507...

sunmark.org Cross Site Scripting vulnerability OBB-3198078

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-25547

creationtimestamp| type| source ---|---|--- 2023-02-19 09:01:50+00:00| seen| https://t.me/kasperskyb2b/464 2023-02-23 17:39:26+00:00| published-proof-of-concept| https://t.me/icscert/709 2023-04-19 00:29:42+00:00| seen| https://t.me/cibsecurity/62398...

CVE-2023-0914

creationtimestamp| type| source ---|---|--- 2023-02-19 07:14:40+00:00| seen| https://t.me/cibsecurity/58504...

CVE-2021-32163

creationtimestamp| type| source ---|---|--- 2023-02-17 20:19:23+00:00| seen| https://t.me/cibsecurity/58466...

CVE-2023-23461

creationtimestamp| type| source ---|---|--- 2023-02-15 22:36:49+00:00| seen| https://t.me/cibsecurity/58270 2025-03-19 19:18:18+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8124...

CVE-2023-23466

creationtimestamp| type| source ---|---|--- 2023-02-15 22:36:42+00:00| seen| https://t.me/cibsecurity/58265 2025-03-19 16:17:59+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8079...

CVE-2023-23847

creationtimestamp| type| source ---|---|--- 2023-02-15 22:36:41+00:00| seen| https://t.me/cibsecurity/58264 2025-03-19 16:18:06+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/8084...

CVE-2022-45154

creationtimestamp| type| source ---|---|--- 2023-02-15 12:41:19+00:00| seen| https://t.me/cibsecurity/58219 2025-03-18 19:48:56+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/7983...

SUSE CVE-2020-14954

Mutt before 1.14.4 and NeoMutt before 2020-06-19 have a STARTTLS buffering issue that affects IMAP, SMTP, and POP3. When a server sends a "begin TLS" response, the client reads additional data e.g., from a man-in-the-middle attacker and evaluates it in a TLS context, aka "response injection."...

SUSE CVE-2022-21619

Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Security. Supported versions that are affected are Oracle Java SE: 8u341, 8u345-perf, 11.0.16.1, 17.0.4.1, 19; Oracle GraalVM Enterprise Edition: 20.3.7, 21.3.3 and 22.2.0. Difficult to...

TrickBot gang members sanctioned after pandemic ransomware attacks

In a collaborative partnership, officials in the United States and the United Kingdom unmasked and imposed financial sanctions against seven members of the notorious Russian gang TrickBot alias "TrickLoader", a mainstream banking Trojan turned malware-as-a-service MaaS platform for other criminal...