101 matches found
JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources
The threat actor known as JADEPUFFER has been observed orchestrating destructive actions within a Microsoft Azure environment using compromised service principals. Microsoft, which is tracking the activity under the name Storm-3168 , has called it an evolution of the threat actor's tradecraft. Th...
Storm-3168: Agentic-driven cloud attacks using compromised service principals
In this article 1. Attack overview 2. Technical analysis 3. Mitigation and protection guidance 4. References 5. Learn More Microsoft Security Research has identified malicious cloud activity associated with JADEPUFFER, a threat actor discovered by Sysdig in July 2026 and reported to be the first...
Storm-3168: Agentic-driven cloud attacks using compromised service principals
In this article 1. Attack overview 2. Technical analysis 3. Mitigation and protection guidance 4. References 5. Learn More Microsoft Security Research has identified malicious cloud activity associated with JADEPUFFER, a threat actor discovered by Sysdig in July 2026 and reported to be the first...
CVE-2024-3168 vulnerabilities
Vulnerabilities for packages: chromium...
CVE-2026-3168
A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromNatStaticSetting of the file /goform/NatStaticSetting of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been ma...
CVE-2026-3168
creationtimestamp| type| source ---|---|--- 2026-02-25 09:41:07+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mfofatjxur2y 2026-02-25 20:00:15+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mfphtwyts62e...
CVE-2026-3168
A weakness has been identified in Tenda F453 1.0.0.3. This affects the function fromNatStaticSetting of the file /goform/NatStaticSetting of the component httpd. Executing a manipulation of the argument page can lead to buffer overflow. The attack may be launched remotely. The exploit has been ma...
EUVD-2026-3168
EUVD-2026-3168...
CVE-2005-3168
The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists ACLs on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the...
CVE-2025-3168
A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...
CVE-2025-3168
creationtimestamp| type| source ---|---|--- 2025-04-03 17:35:41+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/10286 2025-04-03 21:55:46+00:00| seen| https://t.me/cvedetector/22011...
CVE-2025-3168
A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...
CVE-2025-3168 PHPGurukul Time Table Generator System edit-class.php sql injection
A vulnerability was found in PHPGurukul Time Table Generator System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /admin/edit-class.php. The manipulation of the argument editid leads to sql injection. The attack can be launched...
MSC-2025-3168
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
Linux Distros Unpatched Vulnerability : CVE-2024-3168
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Use after free in DevTools in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page...
CLSA-2024-1734532539 Fix CVE(s): CVE-2022-38076
CVE-2022-38076 - linux-firmware: Update for Intel Dual Band Wireless AC 3168 - linux-firmware: Upadte for Intel Wireless 7265 Rev D Family - linux-firmware: Update for Intel Dual Band Wireless AC 3165 - linux-firmware: Update for Intel Dual Band Wireless AC 8265 - linux-firmware: Update for Intel...
Cisco Nexus Uncontrolled Resource Consumption (CVE-2020-3168)
A vulnerability in the Secure Login Enhancements capability of Cisco Nexus 1000V Switch for VMware vSphere could allow an unauthenticated, remote attacker to cause an affected Nexus 1000V Virtual Supervisor Module VSM to become inaccessible to users through the CLI. The vulnerability is due to...
Fedora 37 : android-tools (2022-6716cd0da2)
The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2022-6716cd0da2 advisory. Update to 33.0.3p1 Security fix for CVE-2022-20128 CVE-2022-3168 Tenable has extracted the preceding description block directly from the Fedora...
openSUSE Security Advisory (SUSE-SU-2024:3168-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...