PT-2023-19320 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to a Stored Cross-Site Scripting vulnerability. No information is provided about the estimated number of potentially affected...

PT-2023-19321 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to a Server-Side Request Forgery vulnerability. Recommendations: For versions prior to 7.3.13.1 / 3.1.6.0, update to version...

CVE-2023-23953

The CVE-2023-23953 entry applies to Broadcom Advanced Secure Gateway (ASG) and Content Analysis, affected before 7.3.13.1 and 3.1.6.0. The root cause is an Elevation of Privilege vulnerability reported across multiple sources. Impact is described as potential privilege escalation on affected appl...

CVE-2023-23955

CVE-2023-23955 affects Broadcom’s Advanced Secure Gateway and Content Analysis: versions prior to 7.3.13.1 and 3.1.6.0 are susceptible to a Server-Side Request Forgery (SSRF) vulnerability. The available connected documents confirm the product family and vulnerable version ranges, with remediatio...

CVE-2023-23952

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Command Injection vulnerability...

CVE-2023-23955

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Server-Side Request Forgery vulnerability...

CVE-2023-23953

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to an Elevation of Privilege vulnerability...

CVE-2023-23954

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...

CVE-2023-23954

Advanced Secure Gateway and Content Analysis, prior to 7.3.13.1 / 3.1.6.0, may be susceptible to a Stored Cross-Site Scripting vulnerability...

PT-2023-19319 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to an Elevation of Privilege vulnerability. Recommendations: For versions prior to 7.3.13.1 / 3.1.6.0, update to version...

Broadcom Advanced Secure Gateway 命令注入漏洞

Broadcom Advanced Secure Gateway ASG is a secure Web gateway appliance from Broadcom. A security vulnerability exists in Broadcom Advanced Secure Gateway versions prior to 7.3.13.1 and Content Analysis versions prior to 3.1.6.0, which stems from susceptibility to command injection...

Broadcom Advanced Secure Gateway 跨站脚本漏洞

Broadcom Advanced Secure Gateway ASG is a secure web gateway appliance from Broadcom. A cross-site scripting vulnerability exists in Broadcom Advanced Secure Gateway versions prior to 7.3.13.1, Content Analysis versions prior to 3.1.6.0, which stems from susceptibility to stored cross-site...

Broadcom Advanced Secure Gateway 代码问题漏洞

Broadcom Advanced Secure Gateway ASG is a secure Web gateway appliance from Broadcom. A security vulnerability exists in Broadcom Advanced Secure Gateway versions prior to 7.3.13.1 and Content Analysis versions prior to 3.1.6.0, which stems from susceptibility to server-side request forgery...

CVE-2023-23954

Broadcom Advanced Secure Gateway (ASG) and Content Analysis are affected by CVE-2023-23954, a Stored Cross‑Site Scripting vulnerability in ASG prior to v7.3.13.1 and Content Analysis prior to v3.1.6.0. The description indicates a stored XSS issue but provides no exploitation details. Rationale an...

PT-2023-19318 · Unknown · Advanced Secure Gateway/Content Analysis

Name of the Vulnerable Software and Affected Versions: Advanced Secure Gateway and Content Analysis versions prior to 7.3.13.1 / 3.1.6.0 Description: The issue is related to a Command Injection vulnerability. Recommendations: For versions prior to 7.3.13.1 / 3.1.6.0, update to version 7.3.13.1 /...

CVE-2023-23952

Affected product: Broadcom Advanced Secure Gateway and Content Analysis. Vulnerable components/versions: ASG and Content Analysis prior to 7.3.13.1 and 3.1.6.0. Root cause: Command injection vulnerability. Impact: high (CVSSv3.1 base 9.8, Confidentiality/Integrity/Availability high). Guidance: up...

XDR meets IAM: Comprehensive identity threat detection and response with Microsoft

Identity has become the corporate security perimeter. The average organization used 130 different cloud applications in 2022. That’s up 18 percent from 2021 alone.1 And as organizations continue to embrace digital transformation and enable remote work, they look to identity and access management...

XDR meets IAM: Comprehensive identity threat detection and response with Microsoft

Identity has become the corporate security perimeter. The average organization used 130 different cloud applications in 2022. That’s up 18 percent from 2021 alone.1 And as organizations continue to embrace digital transformation and enable remote work, they look to identity and access management...

Dark Pink APT Group Leverages TelePowerBot and KamiKakaBot in Sophisticated Attacks

The threat actor known as Dark Pink has been linked to five new attacks aimed at various entities in Belgium, Brunei, Indonesia, Thailand, and Vietnam between February 2022 and April 2023. This includes educational institutions, government agencies, military bodies, and non-profit organizations,...

Wordpress File Manager Advanced Shortcode 2.3.2 - Unauthenticated Remote Code Execution through shortcode

The Wordpress plugin does not adequately prevent uploading files with disallowed MIME types when using the shortcode. This leads to RCE in cases where the allowed MIME type list does not include PHP files. In the worst case, this is available to unauthenticated users, but is also works in an...