Rockwell FactoryTalk Services Platform < 6.20 Deserialization

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 6.20. It is, therefore, affected by a vulnerability. - Factory Talk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCP/8082, which can insecurely deserialize untrusted...

Siemens Teamcenter Visualization and JT2Go

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability...

CISA Warns of Exploited Vulnerabilities in Chrome and Excel Parsing Library

By Waqas CISA Urges Swift Action as Two Critical Vulnerabilities Emerge. This is a post from HackRead.com Read the original post: CISA Warns of Exploited Vulnerabilities in Chrome and Excel Parsing Library...

CVE-2023-51384

creationtimestamp| type| source ---|---|--- 2024-01-04 07:51:54+00:00| seen| https://t.me/ctinow/162809 2024-01-12 10:36:51+00:00| seen| https://t.me/ctinow/167186 2024-01-26 21:18:07+00:00| seen| https://t.me/arpsyndicate/3075 2024-07-01 14:30:24+00:00| seen|...

CVE-2023-46344

creationtimestamp| type| source ---|---|--- 2024-01-03 20:40:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9682 2024-02-02 03:21:45+00:00| seen| https://t.me/ctinow/177887 2024-02-09 23:16:29+00:00| seen| https://t.me/ctinow/182317 2024-02-24 14:47:00+00:00| seen|...

CVE-2023-47039

creationtimestamp| type| source ---|---|--- 2024-01-03 01:34:44+00:00| seen| https://t.me/cibsecurity/74170 2024-02-08 12:26:35+00:00| seen| https://t.me/ctinow/181324 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08...

Juniper Releases Security Advisory for Juniper Secure Analytics

Juniper released a security advisory to address multiple vulnerabilities affecting Juniper Secure Analytics. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Juniper advisory JSA75636link ...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability CVE-2023-7101 Spreadsheet::ParseExcel Remote Code Execution Vulnerability These types of...

CVE-2023-46218

creationtimestamp| type| source ---|---|--- 2023-12-30 09:36:44+00:00| seen| https://t.me/ctinow/160830 2024-01-25 15:26:11+00:00| seen| https://t.me/ctinow/173507 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-04 2025-06-12 10:00:00+00:00| seen|...

CVE-2023-51385

creationtimestamp| type| source ---|---|--- 2023-12-24 04:48:30+00:00| published-proof-of-concept| https://t.me/CNArsenal/1753 2023-12-24 09:02:08+00:00| published-proof-of-concept| https://t.me/poxek/3528 2023-12-24 14:28:24+00:00| published-proof-of-concept| https://t.me/LearnExploit/5811...

CVE-2023-5768

creationtimestamp| type| source ---|---|--- 2023-12-23 09:41:56+00:00| seen| https://t.me/ctinow/158750 2025-05-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-02...

CVE-2023-5767

creationtimestamp| type| source ---|---|--- 2023-12-23 09:41:50+00:00| seen| https://t.me/ctinow/158747 2025-05-08 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-02...

CVE-2023-47100

creationtimestamp| type| source ---|---|--- 2023-12-22 09:22:19+00:00| seen| https://t.me/ctinow/158266 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08 2025-06-30 17:07:34+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1994...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11479)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. An attacker with network access to affected products could cause a denial of service condition because of a vulnerability in the TCP retransmission queue implementation kernel when handling TCP...

Siemens Industrial Products Integer Overflow or Wraparound (CVE-2019-11477)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. The kernel used in some products is affected by an integer overflow when handling TCP Selective Acknowledgements. A remote attacker could use this to cause a denial of service. This plugin only wor...

Siemens Industrial Products Uncontrolled Resource Consumption (CVE-2019-11478)

Multiple industrial products are affected by a vulnerability in the kernel known as TCP SACK PANIC. A remote attacker could cause a denial of service condition by sending specially crafted TCP Selective Acknowledgment SACK sequences to affected products. This plugin only works with Tenable.ot...

How does ThreatDown Vulnerability Assessment and Patch Management work?

Maintaining updated systems and applications is a challenge for any IT team—especially considering the sheer volume of vulnerabilities organizations must find and prioritize on a rolling basis. ThreatDown Vulnerability Assessment VA, now included for free in every ThreatDown bundle, simplifies th...

CVE-2023-4518

creationtimestamp| type| source ---|---|--- 2023-12-21 19:41:32+00:00| seen| https://t.me/ctinow/157916 2025-05-13 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-02 2025-06-06 10:47:35+00:00| seen|...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-49897 FXC AE1021, AE1021PE OS Command Injection Vulnerability CVE-2023-47565 QNAP VioStor NVR OS Command Injection Vulnerability These types of vulnerabilities...