CVE-2022-4450

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:31+00:00| seen| https://t.me/cibsecurity/57799 2023-02-10 14:55:06+00:00| seen| https://t.me/truesecator/4053 2024-02-10 10:41:39+00:00| seen| https://t.me/ctinow/182524 2025-02-13 11:00:00+00:00| seen|...

CVE-2023-0216

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:22+00:00| seen| https://t.me/cibsecurity/57793 2023-02-10 14:55:06+00:00| seen| https://t.me/truesecator/4053 2025-03-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-065-01 2026-07-26 02:02:30+00:00| see...

CVE-2023-0401

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:21+00:00| seen| https://t.me/cibsecurity/57792 2023-02-10 14:55:06+00:00| seen| https://t.me/truesecator/4053 2025-03-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-065-01...

CVE-2023-0217

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:20+00:00| seen| https://t.me/cibsecurity/57791 2023-02-10 14:55:06+00:00| seen| https://t.me/truesecator/4053 2025-03-06 11:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-065-01 2026-07-26 07:00:59+00:00| see...

CVE-2022-4304

creationtimestamp| type| source ---|---|--- 2023-02-08 22:25:19+00:00| seen| https://t.me/cibsecurity/57790 2023-02-10 14:55:06+00:00| seen| https://t.me/truesecator/4053 2023-12-22 01:27:07+00:00| seen| https://t.me/ctinow/158128 2024-02-09 13:22:01+00:00| seen| https://t.me/ctinow/182001...

Launching Qualys Cloud Threat Database

We are proud to announce the release of the Qualys Cloud Threat Database which correlates more than 25 different threat intelligence feeds into a single source for all Qualys products to leverage. This comprehensive vulnerability and threat intelligence database pulls from trusted sources such as...

ESXiArgs Ransomware Virtual Machine Recovery Guidance

Summary The Cybersecurity and Infrastructure Security Agency CISA and the Federal Bureau of Investigation FBI are releasing this joint Cybersecurity Advisory CSA in response to the ongoing ransomware campaign, known as “ESXiArgs.” Malicious actors may be exploiting known vulnerabilities in VMware...

CISA and FBI Release ESXiArgs Ransomware Recovery Guidance

Today, CISA and the Federal Bureau of Investigation FBI released a joint Cybersecurity Advisory, ESXiArgs Ransomware Virtual Machine Recovery Guidance. This advisory describes the ongoing ransomware campaign known as “ESXiArgs.” Malicious cyber actors may be exploiting known vulnerabilities in...

VMware Finds No Evidence of 0-Day in Ongoing ESXiArgs Ransomware Spree

VMware on Monday said it found no evidence that threat actors are leveraging an unknown security flaw, i.e., a zero-day, in its software as part of an ongoing ransomware attack spree worldwide. "Most reports state that End of General Support EoGS and/or significantly out-of-date products are bein...

CISA Releases ESXiArgs Ransomware Recovery Script

CISA has released a recovery script for organizations that have fallen victim to ESXiArgs ransomware. The ESXiArgs ransomware encrypts configuration files on vulnerable ESXi servers, potentially rendering virtual machines VMs unusable. CISA recommends organizations impacted by ESXiArgs evaluate t...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on February 7, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for technical...

EnOcean SmartServer

1. EXECUTIVE SUMMARY CVSS v3 6.3 ATTENTION: Low attack complexity Vendor: EnOcean Edge Inc, a subsidiary of EnOcean GmbH Equipment: SmartServer with i.LON Vision Vulnerability: Use of Hard-coded Credentials 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker...

CVE-2023-0045

creationtimestamp| type| source ---|---|--- 2023-02-04 09:47:58+00:00| seen| https://t.me/proxybar/1360 2023-02-06 11:00:48+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7698 2023-02-21 11:10:14+00:00| published-proof-of-concept| https://t.me/dilagrafie/2308 2023-03-15...

How the CISA catalog of vulnerabilities can help your organization

The Cybersecurity and Infrastructure Security Agency CISA maintains a "known exploited vulnerabilities catalog" which can be useful if you need help prioritizing the patching of vulnerabilities. In essence it is a long list of vulnerabilities that are actually being used by criminals to do harm,...

CISA Alert: Oracle E-Business Suite and SugarCRM Vulnerabilities Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency CISA on February 2 added two security flaws to its Known Exploited Vulnerabilities KEV Catalog, citing evidence of active exploitation. The first of the two vulnerabilities is CVE-2022-21587 CVSS score: 9.8, a critical issue impacting...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view the newly adde...

Delta Electronics DIAScreen

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low attack complexity Vendor: Delta Electronics Equipment: DIAScreen Vulnerabilities: Stack-based Buffer Overflow, Improper Restriction of Operations within the Bounds of a Memory Buffer, Out-of-bounds Write 2. RISK EVALUATION Successful exploitation of...

Cisco Releases Security Advisories for Multiple Products

Cisco released security updates for vulnerabilities affecting multiple products. A remote attacker could exploit these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review the Cisco Security Advisories page and apply the necessary updates. This...

Delta Electronics DVW-W02W2-E2

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Public exploit available/exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: DVW-W02W2-E2 Vulnerabilities: OS Command Injection 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a threat actor with...

CISA Releases Six Industrial Control Systems Advisories

CISA released six Industrial Control Systems ICS advisories on February 2, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...