9081 matches found
CVE-2023-38369
IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 261196...
CVE-2023-38369 IBM Security Access Manager Container information disclosure
IBM Security Access Manager Container 10.0.0.0 through 10.0.6.1 does not require that docker images should have strong passwords by default, which makes it easier for attackers to compromise user accounts. IBM X-Force ID: 261196...
CVE-2023-38369
CVE-2023-38369 affects IBM Security Verify Access (ISVA) Docker 10.0.0.0–10.0.6.1 and ISVA Appliance 10.0.0.0–10.0.6.1. The root issue is that docker images are not required to enforce strong passwords by default, enabling potential account compromise. IBM and Red Hat advisories reference vulnera...
CVE-2024-22388
creationtimestamp| type| source ---|---|--- 2024-02-07 00:31:43+00:00| seen| https://t.me/ctinow/180434 2024-03-01 14:46:48+00:00| seen| https://t.me/ctinow/197659...
CVE-2024-24254
creationtimestamp| type| source ---|---|--- 2024-02-06 23:31:37+00:00| seen| https://t.me/ctinow/180406 2024-02-15 21:16:58+00:00| seen| https://t.me/ctinow/185876 2024-03-01 15:46:06+00:00| seen| https://t.me/ctinow/197736...
CVE-2024-24015
creationtimestamp| type| source ---|---|--- 2024-02-06 17:32:00+00:00| seen| https://t.me/ctinow/180163 2024-03-01 11:07:11+00:00| seen| https://t.me/ctinow/197497 2025-06-20 20:44:19+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/19076...
How are user credentials stolen and used by threat actors?
Youve no doubt heard the phrase, "Attackers dont hack anyone these days. They log on." By obtaining or stealing valid user account details, an attacker can gain access to a system, remain hidden, and then elevate their privileges to "log in" to more areas of the network. Unfortunately, the use of...
CVE-2024-20812
creationtimestamp| type| source ---|---|--- 2024-02-06 04:21:40+00:00| seen| https://t.me/ctinow/179722 2024-02-29 13:56:59+00:00| seen| https://t.me/ctinow/196644...
The vulnerability of the Vinchin Backup & Recovery software for backup and restoration operations, related to the use of pre-installed user accounts, allows a hacker to elevate their privileges to the level of a root user.
The vulnerability of the Vinchin Backup & Recovery software regarding backup and restoration is related to the use of pre-installed user accounts. Exploiting this vulnerability allows a malicious actor to elevate their privileges to root-level by connecting with the default SSH account...
The vulnerability of the Accounts component in operating systems macOS, iOS, and iPadOS allows attackers to disclose protected information.
The vulnerability of the Accounts component in operating systems such as macOS, iOS, and iPadOS relates to the disclosure of information through registration files. Exploiting this vulnerability can allow an attacker to disclose the protected information...
CVE-2024-0597
creationtimestamp| type| source ---|---|--- 2024-02-05 23:31:42+00:00| seen| https://t.me/ctinow/179607 2024-02-21 21:16:47+00:00| seen| https://t.me/ctinow/190078...
CVE-2023-6700
The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level acce...
Information disclosure
The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level acce...
CVE-2023-6700 Cookie Information | Free GDPR Consent Solution <= 2.0.22 - Authenticated (Subscriber+) Arbitrary Options Update
The Cookie Information | Free GDPR Consent Solution plugin for WordPress is vulnerable to arbitrary option updates due to a missing capability check on its AJAX request handler in versions up to, and including, 2.0.22. This makes it possible for authenticated attackers, with subscriber-level acce...
CVE-2023-5643
creationtimestamp| type| source ---|---|--- 2024-02-05 11:31:53+00:00| seen| https://t.me/ctinow/179140 2024-02-29 09:27:06+00:00| seen| https://t.me/ctinow/196396...
CVE-2024-24859
creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:37+00:00| seen| https://t.me/ctinow/179069 2024-02-29 08:47:03+00:00| seen| https://t.me/ctinow/196345...
CVE-2024-22667
creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:32+00:00| seen| https://t.me/ctinow/179064 2024-02-06 15:11:45+00:00| seen| https://t.me/ctinow/180037 2024-02-14 23:16:33+00:00| seen| https://t.me/ctinow/185105 2024-02-23 18:32:10+00:00| seen| https://t.me/ctinow/192009 2024-02-29...
CVE-2021-46903
An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. An admin can delete required user accounts in violation of expected access control...
Unverified Password Change
OctoPrint is vulnerable to Unverified Password Change. The vulnerability is due to improper validation within the password change functionality for admin accounts. The issue can be exploited to a malicious admin to change the passwords of other admin account...
