TEM Opera Plus FM Family Transmitter 35.45 XSRF

Summary This new line of Opera plus FM Transmitters combines very high efficiency, high reliability and low energy consumption in compact solutions. They have innovative functions and features that can eliminate the costs required by additional equipment: automatic exchange of audio sources,...

TEM Opera Plus FM Family Transmitter 35.45 Remote Code Execution

Summary This new line of Opera plus FM Transmitters combines very high efficiency, high reliability and low energy consumption in compact solutions. They have innovative functions and features that can eliminate the costs required by additional equipment: automatic exchange of audio sources,...

CVE-2019-13990

creationtimestamp| type| source ---|---|--- 2023-10-24 18:10:06+00:00| exploited| https://t.me/truesecator/5001 2026-03-13 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0292/...

CVE-2018-20060

creationtimestamp| type| source ---|---|--- 2023-10-23 11:43:47+00:00| seen| https://t.me/cibsecurity/72293 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

Synology DiskStation Manager (DSM) < 3.1 Information Disclosure Vulnerability (Feb 2015)

Synology DiskStation Manager DSM is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks

The Computer Emergency Response Team of Ukraine CERT-UA has revealed that threat actors "interfered" with at least 11 telecommunication service providers in the country between May and September 2023. The agency is tracking the activity under the name UAC-0165, stating the intrusions led to servi...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: buildkitd, k3s, rancher-webhook, kubernetes, kube-oidc-proxy, rancher-webhook-fips, up, metrics-server-fips, caddy, kubernetes-fips, prometheus-adapter, kubevela...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: buildkitd, k3s, rancher-webhook, kubernetes, kube-oidc-proxy, rancher-webhook-fips, up, metrics-server-fips, caddy, kubernetes-fips, prometheus-adapter, kubevela...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: up, kubevela, kubernetes, caddy, prometheus-adapter, k3s, buildkitd...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure, pulumi-language-java, tekton-chains, k3s, azure-aad-pod-identity-mic, haproxy-ingress, falcoctl, aws-efs-csi-driver-fips, thanos-operator, secrets-store-csi-driver-provider-gcp, kubevela, kubernetes-csi-livenessprobe-fips, runc,...

AZL-34588 CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-31639 CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, cue, grype, ko, secrets-store-csi-driver, envoy-ratelimit, rqlite, kubewatch, nats, metrics-server, ollama, spark-operator, weaviate, helm, skaffold, bom, conftest, nginx-stable, metacontroller, nodetaint, pulumi, kaf, pulumi-language-dotnet, atlantis...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: kubeflow-katib, cue, grype, ko, secrets-store-csi-driver, envoy-ratelimit, rqlite, kubewatch, nats, metrics-server, ollama, spark-operator, weaviate, helm, skaffold, bom, conftest, nginx-stable, metacontroller, nodetaint, pulumi, kaf, pulumi-language-dotnet, atlantis...

AZL-31296 CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

LDAP Login Scanner

This module attempts to login to the LDAP service. Module Options msf use auxiliary/scanner/ldap/ldaplogin msf auxiliaryldaplogin show actions ...actions... msf auxiliaryldaplogin set ACTION msf auxiliaryldaplogin show options ...show and set options... msf auxiliaryldaplogin run This module...

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

Ukrainian military entities are the target of a phishing campaign that leverages drone manuals as lures to deliver a Go-based open-source post-exploitation toolkit called Merlin. "Since drones or Unmanned Aerial Vehicles UAVs have been an integral tool used by the Ukrainian military, malware-lace...

The vulnerability of the web_cert_download_handler() function in D-Link’s wireless access points, the DWL-6610AP, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webcertdownloadhandler function in D-Link DWL-6610AP wireless access points relates to the lack of measures taken to neutralize special elements used in the operating system’s processing of the certDownload parameter. Exploiting this vulnerability can allow an attacker to...