Schneider Electric Easergy Studio

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Schneider Electric Equipment : Easergy Studio Vulnerability : Deserialization of Untrusted Data 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to gain full control of a...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and po...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-21887 Ivanti Connect Secure and Policy Secure Command Injection Vulnerability CVE-2023-46805 Ivanti Connect Secure and Policy Secure Authentication Bypass...

CISA Flags 6 Vulnerabilities - Apple, Apache, Adobe, D-Link, Joomla Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added six security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. This includes CVE-2023-27524 CVSS score: 8.9, a high-severity vulnerability impacting the Apache Superset...

CVE-2024-21319

creationtimestamp| type| source ---|---|--- 2024-01-09 20:26:15+00:00| seen| https://t.me/ctinow/165338 2024-01-09 20:46:27+00:00| seen| https://t.me/ctinow/165344 2024-01-10 06:21:41+00:00| seen| https://t.me/ctinow/165558 2024-01-26 17:57:31+00:00| seen| https://t.me/arpsyndicate/3022 2025-04-1...

CVE-2024-0056

creationtimestamp| type| source ---|---|--- 2024-01-09 19:26:28+00:00| seen| https://t.me/ctinow/165253 2024-01-09 19:47:13+00:00| seen| https://t.me/ctinow/165281 2024-01-10 05:16:22+00:00| seen| https://t.me/ctinow/165541 2024-07-17 16:45:41+00:00| published-proof-of-concept|...

CISA Known Exploited Vulnerability Catalog December 2023

For a detailed CISAs KEV Catalog, download the pdf file here Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. It is recommended that all organizations review and monitor the KEV catalog,...

Fortinet Releases Security Updates for FortiOS and FortiProxy

Fortinet has released a security update to address a vulnerability in FortiOS and FortiProxy software. A cyber threat actor could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review the FG-IR-23-315 FortiOS & FortiProxy - Improper...

Microsoft Releases Security Updates for Multiple Products

Microsoft has released security updates to address vulnerabilities in multiple products. A cyber threat actor could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s January Security Update Guidelink is...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on January 9, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-348-01 Cambium ePMP 5GHz Force 300-25 Radio Update A CISA encourages users and...

Rockwell FactoryTalk Services Platform < 6.20 Deserialization

The version of Rockwell FactoryTalk Services Platform installed on the remote Windows host is prior to 6.20. It is, therefore, affected by a vulnerability. - Factory Talk Diagnostics exposes a .NET Remoting endpoint via RNADiagnosticsSrv.exe at TCP/8082, which can insecurely deserialize untrusted...

Siemens Teamcenter Visualization and JT2Go

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CISA Adds Six Known Exploited Vulnerabilities to Catalog

CISA has added six new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-38203 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability CVE-2023-29300 Adobe ColdFusion Deserialization of Untrusted Data Vulnerability...

CISA Warns of Exploited Vulnerabilities in Chrome and Excel Parsing Library

By Waqas CISA Urges Swift Action as Two Critical Vulnerabilities Emerge. This is a post from HackRead.com Read the original post: CISA Warns of Exploited Vulnerabilities in Chrome and Excel Parsing Library...

CVE-2023-51384

creationtimestamp| type| source ---|---|--- 2024-01-04 07:51:54+00:00| seen| https://t.me/ctinow/162809 2024-01-12 10:36:51+00:00| seen| https://t.me/ctinow/167186 2024-01-26 21:18:07+00:00| seen| https://t.me/arpsyndicate/3075 2024-07-01 14:30:24+00:00| seen|...

CVE-2023-46344

creationtimestamp| type| source ---|---|--- 2024-01-03 20:40:50+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9682 2024-02-02 03:21:45+00:00| seen| https://t.me/ctinow/177887 2024-02-09 23:16:29+00:00| seen| https://t.me/ctinow/182317 2024-02-24 14:47:00+00:00| seen|...

CVE-2023-47039

creationtimestamp| type| source ---|---|--- 2024-01-03 01:34:44+00:00| seen| https://t.me/cibsecurity/74170 2024-02-08 12:26:35+00:00| seen| https://t.me/ctinow/181324 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-08...

Juniper Releases Security Advisory for Juniper Secure Analytics

Juniper released a security advisory to address multiple vulnerabilities affecting Juniper Secure Analytics. A cyber threat actor could exploit one of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Juniper advisory JSA75636link ...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-7024 Google Chromium WebRTC Heap Buffer Overflow Vulnerability CVE-2023-7101 Spreadsheet::ParseExcel Remote Code Execution Vulnerability These types of...

CVE-2023-46218

creationtimestamp| type| source ---|---|--- 2023-12-30 09:36:44+00:00| seen| https://t.me/ctinow/160830 2024-01-25 15:26:11+00:00| seen| https://t.me/ctinow/173507 2024-11-14 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-24-319-04 2025-06-12 10:00:00+00:00| seen|...