CVE-2023-39026

creationtimestamp| type| source ---|---|--- 2023-08-23 02:12:01+00:00| seen| https://t.me/cibsecurity/69043 2023-10-23 19:27:06+00:00| published-proof-of-concept| Telegram/X8AxNFp0HQTngPQfgKr7iAFqHeL4fj8-bjEOb-q8Rk 2023-10-24 15:05:53+00:00| published-proof-of-concept| https://t.me/CNArsenal/1351...

Ivanti Warns of Critical Zero-Day Flaw Being Actively Exploited in Sentry Software

Software services provider Ivanti is warning of a new critical zero-day flaw impacting Ivanti Sentry formerly MobileIron Sentry that it said is being actively exploited in the wild, marking an escalation of its security woes. Tracked as CVE-2023-38035 CVSS score: 9.8, the issue has been described...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-24489 Citrix Content Collaboration ShareFile Improper Access Control Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber...

A week in security (August 7 - August 13)

Last week on Malwarebytes Labs: Zoom clarifies user consent requirement when training its AI Several hospitals still counting the cost of widespread ransomware attack Old exploit kits still kicking around in 2023 YouTube makes sweeping changes to tackle spam on Shorts videos Googles "browse...

CVE-2023-32563

creationtimestamp| type| source ---|---|--- 2023-08-11 00:16:14+00:00| seen| https://t.me/cibsecurity/68260 2023-08-16 19:10:04+00:00| seen| https://t.me/truesecator/4739 2023-09-03 07:06:40+00:00| published-proof-of-concept| https://t.me/CNArsenal/998 2024-10-31 00:00:00+00:00| exploited| The...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-38180 Microsoft .NET Core and Visual Studio Denial of Service Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...

PT-2023-4225

Name of the Vulnerable Software and Affected Versions .NET and Visual Studio versions prior to the fixed version in August 2023 Patch Tuesday Description The issue is related to a Denial of Service DoS vulnerability in .NET and Visual Studio. It can be exploited for DoS attacks with no user...

2022's most routinely exploited vulnerabilities—history repeats

The Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, Federal Bureau of Investigation FBI, and international partners have released a joint Cybersecurity Advisory CSA called the 2022 Top Routinely Exploited Vulnerabilities. We went over the list and it felt like...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-18368 Zyxel P660HN-T1A Routers Command Injection Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

Stack overflow

ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these vulnerabilities could cause the product to stop or make th...

CVE-2023-4169

creationtimestamp| type| source ---|---|--- 2023-08-05 22:11:53+00:00| seen| https://t.me/cibsecurity/67815 2023-10-17 16:52:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5470 2023-10-20 11:06:20+00:00| seen| https://t.me/CyberSecurityTechnologies/9230 2023-10-22 17:46:15+00:00...

Major Cybersecurity Agencies Collaborate to Unveil 2022's Most Exploited Vulnerabilities

A four-year-old critical security flaw impacting Fortinet FortiOS SSL has emerged as one of the most routinely and frequently exploited vulnerabilities in 2022. "In 2022, malicious cyber actors exploited older software vulnerabilities more frequently than recently disclosed vulnerabilities and...

2022 Top Routinely Exploited Vulnerabilities

SUMMARY The following cybersecurity agencies coauthored this joint Cybersecurity Advisory CSA: United States: The Cybersecurity and Infrastructure Security Agency CISA, National Security Agency NSA, and Federal Bureau of Investigation FBI Australia: Australian Signals Directorate’s Australian Cyb...

Threat Actors Exploiting Ivanti EPMM Vulnerabilities

SUMMARY The Cybersecurity and Infrastructure Security Agency CISA and the Norwegian National Cyber Security Centre NCSC-NO are releasing this joint Cybersecurity Advisory CSA in response to active exploitation of CVE-2023-35078 and CVE-2023-35081. Advanced persistent threat APT actors exploited...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-35081 Ivanti Endpoint Manager Mobile EPMM Path Traversal Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and...

CVE-2023-35081

creationtimestamp| type| source ---|---|--- 2023-07-29 06:39:06+00:00| exploited| Telegram/5uktbzkTAdxW1ZEWsvG16teg7VfAGOGSB2FWhK84q3VqvA 2023-07-29 06:53:37+00:00| exploited| https://t.me/AnonCyberWarrior/1961 2023-07-29 06:59:13+00:00| exploited| https://t.me/thehackernews/3667 2023-07-29...

CVE-2016-10108

creationtimestamp| type| source ---|---|--- 2023-07-28 13:22:17+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/wdmycloudunauthenticatedcmdinjection.rb 2024-10-26 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2024-10-2...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-37580 Zimbra Collaboration ZCS Cross-Site Scripting XSS Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and...

Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild

The Cybersecurity and Infrastructure Security Agency CISA added one new vulnerability to its Known Exploited Vulnerabilities Catalog affecting Ivanti Endpoint Manager Mobile, based on evidence of active exploitation. All Federal Civilian Executive Branch FCEB agencies must remediate this...

CVE-2023-35078: Critical API Access Vulnerability in Ivanti Endpoint Manager Mobile

CVE-2023-35078 is a remote unauthenticated API access vulnerability in Ivanti Endpoint Manager Mobile, which was previously branded as MobileIron Core. The vulnerability has a CVSS v3 base score of 10.0 and has a severity rating of Critical. Ivanti has reported that they have received information...