CVE-2023-41109

creationtimestamp| type| source ---|---|--- 2023-08-29 00:16:59+00:00| seen| https://t.me/cibsecurity/69322 2023-12-31 00:20:25+00:00| seen| https://t.me/arpsyndicate/2263 2023-12-31 04:03:09+00:00| seen| https://t.me/arpsyndicate/2291 2025-01-31 00:00:00+00:00| seen| The Shadowserver...

Critical Adobe ColdFusion Flaw Added to CISA's Exploited Vulnerability Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a critical security flaw in Adobe ColdFusion to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The vulnerability, cataloged as CVE-2023-26359 CVSS score: 9.8, relates to a...

CVE-2023-39749

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the component /advresource. This vulnerability is exploited via a crafted GET request...

CVE-2023-39750

D-Link DAP-2660 v1.13 was discovered to contain a buffer overflow via the fipv6enable parameter at /bscipv6. This vulnerability is exploited via a crafted POST request...

Critters 跨站脚本漏洞

Critters is a GoogleChromeLabs open source Webpack plugin . Used to inline critical CSS and delay loading the rest. A security vulnerability exists in Critters versions 0.0.17-0.0.19. An attacker exploited the vulnerability to perform cross-site scripting attacks...

Fedora: Security Advisory for dotnet6.0 (FEDORA-2023-cbc688b8ca)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-39910

The cryptocurrency wallet entropy seeding mechanism used in Libbitcoin Explorer 3.0.0 through 3.6.0 is weak, aka the Milk Sad issue. The use of an mt19937 Mersenne Twister PRNG restricts the internal entropy to 32 bits regardless of settings. This allows remote attackers to recover any wallet...

Microsoft Visio 2016 Defense in Depth Security Update (KB5002418)

This host is missing an important security update according to Microsoft KB5002418. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescripti...

CVE-2023-4173

creationtimestamp| type| source ---|---|--- 2023-08-08 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51670...

Microsoft Azure Security Vulnerabilities

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure HDInsights. An attacker exploited the vulnerability to perform spoofing attacks...

Ivanti patches second zero-day vulnerability being used in attacks

Ivanti has issued a patch to address a second critical zero-day vulnerability that is under active attack. The vulnerability is said to be used in combination with the first vulnerability we discussed some days ago. The Cybersecurity and Infrastructure Security Agency CISA has added the new...

CISA Known Exploited Vulnerability Catalog July 2023

For a detailed CISAs KEV Catalog, download the pdf file here Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. To be included in the catalog, a vulnerability must meet three criteria: hav...

CVE-2023-39147

creationtimestamp| type| source ---|---|--- 2023-07-31 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51639 2023-08-02 13:18:29+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8780 2023-08-03 16:21:52+00:00| published-proof-of-concept|...

CVE-2023-37450

The issue was addressed with improved checks. This issue is fixed in iOS 16.6 and iPadOS 16.6, Safari 16.5.2, tvOS 16.6, macOS Ventura 13.5, watchOS 9.6. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited...

CVE-2023-35078

creationtimestamp| type| source ---|---|--- 2023-07-25 05:48:54+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus12/2023 2023-07-25 05:55:59+00:00| seen| https://t.me/thehackernews/3640 2023-07-25 07:26:05+00:00| exploited| Telegram/qHzLqnpkQ6lkNyVJiJ3c0QdKbofQ14FsTmwbpCsMwHtLV...

CVE-2023-38501

creationtimestamp| type| source ---|---|--- 2023-07-23 16:22:59+00:00| published-proof-of-concept| https://github.com/9001/copyparty/security/advisories/GHSA-f54q-j679-p9hh 2023-07-26 02:27:12+00:00| seen| https://t.me/cibsecurity/67279 2023-07-28 00:00:00+00:00| exploited|...

Microsoft Outlook 2013 Service Pack 1 Multiple Vulnerabilities (KB5002432)

This host is missing an critical security update according to Microsoft KB5002432 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Outlook 2016 Multiple Vulnerabilities (KB5002427)

This host is missing an critical security update according to Microsoft KB5002427 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2796

creationtimestamp| type| source ---|---|--- 2023-07-10 20:24:00+00:00| seen| https://t.me/cibsecurity/66257 2023-08-06 12:37:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8800 2025-02-05 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

Apple Safari Security Update (HT213816)

Apple Safari is prone to type confusion vulnerability SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescriptio...