CVE-2021-30497

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-30497.yaml 2024-01-16 05:35:28+00:00| seen| https://t.me/arpsyndicate/2829 2024-10-31 00:00:00+00:00| exploited| The Shadowserve...

CVE-2023-27350

creationtimestamp| type| source ---|---|--- 2023-04-20 20:30:49+00:00| seen| https://t.me/cibsecurity/62536 2023-04-21 00:00:00+00:00| seen| MISP/fe2a6b30-c779-4b47-994a-53cdecd26ed8 2023-04-22 08:22:51+00:00| seen| https://t.me/thehackernews/3271 2023-04-22 09:51:45+00:00| exploited|...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...

Actors, Threats and Vulnerabilities 10 April to 16 April 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of nine attacks that were executed...

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The two flaws are listed below - CVE-2023-20963 CVSS score: 7.8 - Android Framework Privilege Escalation...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-28252link is external Microsoft Windows Common Log File System CLFS Driver Privilege Escalation Vulnerability These types of vulnerabilities are frequent attack...

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites...

Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

Apple on Friday released security updates for iOS, iPadOS, macOS, and Safari web browser to address a pair of zero-day flaws that are being exploited in the wild. The two vulnerabilities are as follows - CVE-2023-28205 - A use after free issue in WebKit that could lead to arbitrary code execution...

CVE-2023-0902

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51287 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51292 2026-09-01 20:01:04+00:00| seen| https://t.me/hackingAttack/91843 2026-09-02 01:01:24+00:00|...

CVE-2023-20073

creationtimestamp| type| source ---|---|--- 2023-04-05 20:26:37+00:00| seen| https://t.me/cibsecurity/61484 2023-08-19 14:06:35+00:00| published-proof-of-concept| https://t.me/proxybar/1687 2023-08-20 02:49:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4948 2023-08-20...

Actors, Threats and Vulnerabilities 27 March to 2 April 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of Nine attacks that were executed...

CVE-2023-27159

creationtimestamp| type| source ---|---|--- 2023-03-31 22:22:25+00:00| seen| https://t.me/cibsecurity/61274 2025-03-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-03-09 2026-06-23 14:06:13+00:00| exploited|...

Rubrik is latest victim of the Clop ransomware zero-day campaign

Rubrik, a cybersecurity company specializing in cloud data management, has revealed that some of its systems were infiltrated by the Clop ransomware group. Rubrik is one of many companies attacked by Clop via an infamous zero-day vulnerability in the GoAnywhere file transfer software. The attack...

Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency

Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an unnamed federal entity in the U.S. The disclosure comes from a joint advisory issued by the Cybersecurity and Infrastructure Security Agency CISA, Federal...

Microsoft Patch Tuesday for March 2023 — Snort rules and prominent vulnerabilities

Microsoft released its monthly security update Tuesday, disclosing 83 vulnerabilities across the companys hardware and software line, including two issues that are actively being exploited in the wild, continuing a trend of zero-days appearing in Patch Tuesdays over the past few months. Two of th...

CVE-2022-1386

creationtimestamp| type| source ---|---|--- 2023-03-10 13:47:05+00:00| published-proof-of-concept| https://t.me/DailyToolz/660 2023-03-10 18:42:57+00:00| published-proof-of-concept| https://t.me/DailyToolz/658 2024-01-09 07:23:02+00:00| seen| https://t.me/arpsyndicate/2725 2025-01-26...

Hackers Exploiting Remote Desktop Software Flaws to Deploy PlugX Malware

Security vulnerabilities in remote desktop programs such as Sunlogin and AweSun are being exploited by threat actors to deploy the PlugX malware. AhnLab Security Emergency Response Center ASEC, in a new analysis, said it marks the continued abuse of the flaws to deliver a variety of payloads on...

CVE-2023-27482

creationtimestamp| type| source ---|---|--- 2023-03-08 20:23:21+00:00| seen| https://t.me/cibsecurity/59682 2024-10-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-10-30 2024-11-10 00:00:00+00:00| exploited| The Shadowserver...

VMware NSX Manager vulnerabilities being actively exploited in the wild

The Wallarm Detect team has found exploit attempts in the wild of CVE-2022-31678 and CVE-2021-39144. The original vulnerabilities were found in VMware NSX Manager at the end of last year, and can lead to remote code execution RCE by pre-authenticated attackers. The CVE-2022-31678 vulnerability wa...

CVE-2023-0656

creationtimestamp| type| source ---|---|--- 2023-03-03 00:44:38+00:00| seen| https://t.me/cibsecurity/59348 2023-03-06 13:00:08+00:00| seen| https://t.me/truesecator/4134 2023-04-05 11:03:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8061 2024-01-16 10:54:08+00:00|...