Adobe ColdFusion < 2018.x < 2018u18 / 2021.x < 2021u8 / 2023.x < 2023u2 Code Execution (APSB23-41)

The version of Adobe ColdFusion installed on the remote Windows host is prior to 2018.x update 18, 2021.x update 8, or 2023.x update 2. It is, therefore, affected by a code execution vulnerability as referenced in the APSB23-41 advisory. Due to deserialization of untrusted data, a remote,...

CVE-2023-33893

creationtimestamp| type| source ---|---|--- 2023-07-12 12:41:41+00:00| seen| https://t.me/cibsecurity/66494...

CVE-2023-33900

creationtimestamp| type| source ---|---|--- 2023-07-12 12:41:24+00:00| seen| https://t.me/cibsecurity/66481...

CVE-2023-2746

creationtimestamp| type| source ---|---|--- 2023-07-11 18:29:41+00:00| seen| https://t.me/cibsecurity/66389...

Jenkins Plugin Template Workflows 跨站脚本漏洞

Jenkins and Jenkins Plugin are both Jenkins open source products.Jenkins is a software application . An open source automation server Jenkins provides hundreds of plugins to support building, deploying, and automating any project.Jenkins Plugin is a software application. A security vulnerability...

PT-2023-21739 · Arm · Arm Mali Gpu Kernel Driver

Name of the Vulnerable Software and Affected Versions: Arm Mali GPU Kernel Driver versions Valhall r29p0 through r42p0 Arm Mali GPU Kernel Driver versions Arm's GPU Architecture Gen5 r41p0 through r42p0 Description: An issue was discovered in the Arm Mali GPU Kernel Driver, where a non-privileged...

val-de-loire-41.com Cross Site Scripting vulnerability OBB-3355194

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-2699

creationtimestamp| type| source ---|---|--- 2023-05-14 16:28:41+00:00| seen| https://t.me/cibsecurity/64076...

CVE-2023-25504

creationtimestamp| type| source ---|---|--- 2023-04-17 20:41:10+00:00| seen| https://t.me/cibsecurity/62293...

CVE-2023-0889

creationtimestamp| type| source ---|---|--- 2023-04-17 16:41:59+00:00| seen| https://t.me/cibsecurity/62285...

CVE-2022-44726

creationtimestamp| type| source ---|---|--- 2023-04-17 16:41:52+00:00| seen| https://t.me/cibsecurity/62280...

Actors, Threats and Vulnerabilities 27 March to 2 April 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of Nine attacks that were executed...

CVE-2022-28491

creationtimestamp| type| source ---|---|--- 2023-03-23 17:41:37+00:00| seen| https://t.me/cibsecurity/60566...

Debian: Security Advisory (DLA-41-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE CVE-2015-1214

Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset...

SUSE CVE-2015-1220

Use-after-free vulnerability in the GIFImageReader::parseData function in platform/image-decoders/gif/GIFImageReader.cpp in Blink, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted frame size ...

SUSE CVE-2015-1227

The DragImage::create function in platform/DragImage.cpp in Blink, as used in Google Chrome before 41.0.2272.76, does not initialize memory for image drawing, which allows remote attackers to have an unspecified impact by triggering a failed image decoding, as demonstrated by an image for which t...

SUSE CVE-2015-1231

Multiple unspecified vulnerabilities in Google Chrome before 41.0.2272.76 allow attackers to cause a denial of service or possibly have other impact via unknown vectors...

CVE-2023-23379

creationtimestamp| type| source ---|---|--- 2023-02-14 22:41:58+00:00| seen| https://t.me/cibsecurity/58169...

Mitigation Confirmed for Mitigation of H-06 Issue mitigated

C4 issue H-06: MinipoolManager: node operator can avoid being slashed Comments In the original implementation, there were a few scenarios where malicious node operators can avoid being slashed. Mitigation PR 41 This PR includes mitigation for various issues H-03, H-06, M-13. Just focusing on the...