492 matches found
CVE-2023-6399
A format string vulnerability in Zyxel ATP series firmware versions from 4.32 through 5.37 Patch 1, USG FLEX series firmware versions from 4.50 through 5.37 Patch 1, USG FLEX 50W series firmware versions from 4.16 through 5.37 Patch 1, USG20W-VPN series firmware versions from 4.16 through 5.37...
CVE-2023-6398
CVE-2023-6398 is a post-authentication command-injection vulnerability in Zyxel devices where the file upload binary can be abused by an authenticated administrator to execute OS commands on the device via FTP. Affected products include ZyXEL ATP series (4.32–5.37 Patch 1), USG FLEX series (4.50–...
CVE-2024-25001
creationtimestamp| type| source ---|---|--- 2024-02-02 10:31:50+00:00| seen| https://t.me/ctinow/178018...
Kasseika Ransomware Using BYOVD Trick to Disarms Security Pre-Encryption
The ransomware group known as Kasseika has become the latest to leverage the Bring Your Own Vulnerable Driver BYOVD attack to disarm security-related processes on compromised Windows hosts, joining the likes of other groups like Akira, AvosLocker, BlackByte, and RobbinHood. The tactic allows...
CVE-2023-6683
creationtimestamp| type| source ---|---|--- 2024-01-12 20:41:54+00:00| seen| https://t.me/ctinow/167496 2024-01-12 20:47:28+00:00| seen| https://t.me/ctinow/167502 2024-02-23 18:32:17+00:00| seen| https://t.me/ctinow/192016...
RHSA-2024:0137
creationtimestamp| type| source ---|---|--- 2024-01-10 14:16:26+00:00| seen| https://t.me/ctinow/165799 2024-01-28 11:56:51+00:00| seen| https://t.me/ctinow/174909...
CVE-2023-46741
creationtimestamp| type| source ---|---|--- 2024-01-03 18:31:49+00:00| seen| https://t.me/ctinow/162520 2024-01-04 01:36:48+00:00| seen| https://t.me/cibsecurity/74331 2024-01-05 14:03:50+00:00| seen| https://t.me/arpsyndicate/2480 2024-01-23 21:02:05+00:00| seen| https://t.me/ctinow/172291...
CVE-2023-6136
creationtimestamp| type| source ---|---|--- 2023-12-21 08:37:50+00:00| seen| https://t.me/ctinow/157534...
SUSE: Security Advisory (SUSE-SU-2023:4928-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Buffer overflow
A buffer overflow vulnerability in the Zyxel ATP series firmware versions 4.32 through 5.37, USG FLEX series firmware versions 4.50 through 5.37, USG FLEX 50W series firmware versions 4.16 through 5.37, USG20W-VPN series firmware versions 4.16 through 5.37, and VPN series firmware versions 4.30...
CVE-2023-35136
CVE-2023-35136 describes an improper input validation vulnerability in the Quagga package across Zyxel devices (ATP series 4.32–5.37; USG FLEX 4.50–5.37; USG FLEX 50(W) 4.16–5.37; USG20(W)-VPN 4.16–5.37; VPN series 4.30–5.37) that could allow an authenticated local attacker to access configuratio...
Mozilla Firefox < 115.5
The version of Firefox installed on the remote macOS or Mac OS X host is prior to 115.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read...
KLA62089 Multiple vulnerabilities in Mozilla Firefox ESR
Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information, bypass security restrictions. Below is a complete list of vulnerabilities: 1. Out o...
Mozilla Firefox < 115.5
The version of Firefox installed on the remote Windows host is prior to 115.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-50 advisory. - On some systemsdepending on the graphics settings and driversit was possible to force an out-of-bounds read and leak...
twardy-online.de Improper Access Control vulnerability OBB-3777630
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Russia’s 2nd-Largest Insurer Rosgosstrakh Hacked; 400GB of Data Sold Online
By Waqas The hackers are selling the trove of data for $50,000 in Bitcoin BTC or Monero XMR cryptocurrency. This is a post from HackRead.com Read the original post: Russias 2nd-Largest Insurer Rosgosstrakh Hacked; 400GB of Data Sold Online...
CVE-2023-46278
creationtimestamp| type| source ---|---|--- 2023-11-01 06:34:50+00:00| seen| https://t.me/cibsecurity/73288...
CVE-2023-5099
creationtimestamp| type| source ---|---|--- 2023-10-31 15:50:52+00:00| seen| https://t.me/cibsecurity/73220...
CVE-2023-5439
CVE-2023-5439 affects the WordPress plugin “Wp photo text slider 50” (versions up to and including 8.0). It is an authenticated SQL Injection via the plugin shortcode caused by insufficient escaping in user input and poor query preparation, enabling subscribers+ to append SQL that can extract dat...