Improper access control

Broken access control in the component /admin/management/users of School Fees Management System v1.0 allows attackers to escalate privileges and perform Administrative actions, including adding and deleting user accounts...

CVE-2024-2256

creationtimestamp| type| source ---|---|--- 2024-03-14 22:21:50+00:00| seen| https://t.me/ctinow/208217 2024-03-14 22:26:29+00:00| seen| https://t.me/ctinow/208224 2024-03-16 21:48:42+00:00| seen| https://t.me/arpsyndicate/4264...

Apache Answer Competitive Conditions Issue Vulnerability

Apache Answer is a community platform of the Apache USA Foundation. Apache Answer 1.2.1 and prior versions suffer from a Competing Conditions vulnerability, which arises from improper handling of concurrent access when concurrent code requires mutually exclusive access to shared resources during...

CVE-2024-27097

creationtimestamp| type| source ---|---|--- 2024-03-13 22:26:45+00:00| seen| https://t.me/ctinow/207225 2024-03-13 22:31:45+00:00| seen| https://t.me/ctinow/207243...

CVE-2023-43279

creationtimestamp| type| source ---|---|--- 2024-03-12 23:26:08+00:00| seen| https://t.me/ctinow/206258 2024-03-12 23:26:16+00:00| seen| https://t.me/ctinow/206265...

CVE-2023-43292

creationtimestamp| type| source ---|---|--- 2024-03-12 22:21:43+00:00| seen| https://t.me/ctinow/206216 2024-03-12 22:26:48+00:00| seen| https://t.me/ctinow/206228...

CVE-2024-28338

A login bypass in TOTOLINK A8000RU V7.1cu.643B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie...

CVE-2024-28338

A login bypass in TOTOLINK A8000RU V7.1cu.643B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie...

Design/Logic Flaw

A login bypass in TOTOLINK A8000RU V7.1cu.643B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie...

CVE-2024-2393

creationtimestamp| type| source ---|---|--- 2024-03-12 14:32:05+00:00| seen| https://t.me/ctinow/205695 2024-03-12 14:32:10+00:00| seen| https://t.me/ctinow/205700...

CVE-2024-28338

A login bypass in TOTOLINK A8000RU V7.1cu.643B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie...

CVE-2024-28338

A login bypass in TOTOLINK A8000RU V7.1cu.643B20200521 allows attackers to login to Administrator accounts via providing a crafted session cookie...

CVE-2024-23612

creationtimestamp| type| source ---|---|--- 2024-03-11 17:31:48+00:00| seen| https://t.me/ctinow/204891 2024-03-11 17:31:53+00:00| seen| https://t.me/ctinow/204896...

USN-6687-1 accountsservice vulnerability

It was discovered that AccountsService called a helper incorrectly when performing password change operations. A local attacker could possibly use this issue to obtain encrypted passwords...

CVE-2024-2332

creationtimestamp| type| source ---|---|--- 2024-03-09 15:26:11+00:00| seen| https://t.me/ctinow/203972 2024-03-09 15:26:12+00:00| seen| https://t.me/ctinow/203973...

CISA Warns of Actively Exploited JetBrains TeamCity Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Thursday added a critical security flaw impacting JetBrains TeamCity On-Premises software to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability, tracked as CVE-2024-27198 CV...

CVE-2024-2274

creationtimestamp| type| source ---|---|--- 2024-03-08 02:26:59+00:00| seen| https://t.me/ctinow/202960 2024-03-08 02:27:03+00:00| seen| https://t.me/ctinow/202963 2024-03-09 18:17:05+00:00| seen| https://t.me/ctinow/204035...

CVE-2024-27733

creationtimestamp| type| source ---|---|--- 2024-03-07 18:27:06+00:00| seen| https://t.me/ctinow/202622 2024-03-07 18:32:36+00:00| seen| https://t.me/ctinow/202637...

CVE-2023-47691

creationtimestamp| type| source ---|---|--- 2024-03-07 15:26:14+00:00| seen| https://t.me/ctinow/202479 2024-03-07 15:32:12+00:00| seen| https://t.me/ctinow/202482...

Human vs. Non-Human Identity in SaaS

In today's rapidly evolving SaaS environment, the focus is on human users. This is one of the most compromised areas in SaaS security management and requires strict governance of user roles and permissions, monitoring of privileged users, their level of activity dormant, active, hyperactive, thei...