INEX IXP-Manager 跨站脚本漏洞

INEX IXP-Manager is an INEX open source web application. A security vulnerability exists in INEX IXP-Manager versions prior to 6.3.1. An attacker exploited the vulnerability to perform cross-site scripting attacks...

CVE-2023-32434

CVE-2023-32434 is an Apple kernel vulnerability in the XNU VM layer causing an integer overflow that could allow an app to execute code with kernel privileges. Public documentation confirms fixed in multiple OS versions (watchOS 9.5.2, macOS Big Sur 11.7.8, iOS 15.7.7 / iPadOS 15.7.7, macOS Monte...

CVE-2023-28204

An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, Safari 16.5, iOS 16.5 and iPadOS 16.5. Processing web content may disclose sensitive information. Apple is aware of a report that th...

CVE-2023-2779

creationtimestamp| type| source ---|---|--- 2023-06-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51534...

CVE-2023-35844

creationtimestamp| type| source ---|---|--- 2023-06-19 07:25:13+00:00| seen| https://t.me/cibsecurity/65328 2023-06-26 10:27:38+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4628 2023-06-27 14:13:45+00:00| seen| https://t.me/proxybar/1596 2023-06-28 15:16:50+00:00|...

CVE-2023-33580

creationtimestamp| type| source ---|---|--- 2023-06-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51528 2023-06-26 20:52:04+00:00| seen| https://t.me/cibsecurity/65519 2025-02-17 16:00:07+00:00| published-proof-of-concept| Telegram/Lk08SRcMS-SPvUQrC5iLhxWRyIgExecorO8K45SNl9E-Q...

Threat Actors Exploit Progress Telerik Vulnerabilities in Multiple U.S. Government IIS Servers

SUMMARY From November 2022 through early January 2023, the Cybersecurity and Infrastructure Security Agency CISA and authoring organizations identified the presence of indicators of compromise IOCs at a federal civilian executive branch FCEB agency. Analysts determined that multiple cyber threat...

Actors, Threats and Vulnerabilities 5 June to 11 June 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of seven attacks executed, taking advantage of five different vulnerabilities in...

Fedora: Security Advisory for chromium (FEDORA-2023-6fe7ff3452)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for webkitgtk (FEDORA-2023-23cc337543)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-33584

creationtimestamp| type| source ---|---|--- 2023-06-04 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51501...

Apple Safari Security Update (HT213762)

Apple Safari is prone to multiple vulnerabilities according to Apple security advisory. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2023-31698

creationtimestamp| type| source ---|---|--- 2023-05-17 16:31:13+00:00| seen| https://t.me/cibsecurity/64312 2023-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51476...

Fedora: Security Advisory for webkit2gtk3 (FEDORA-2023-8900b35c6f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-29809

creationtimestamp| type| source ---|---|--- 2023-05-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51422 2025-01-24 16:04:51+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/2927...

CVE-2021-24499

creationtimestamp| type| source ---|---|--- 2023-04-27 09:58:59+00:00| confirmed| https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2021/CVE-2021-24499.yaml 2024-05-14 02:41:03+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/4293 2024-12-30...

CVE-2023-1020

creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:40+00:00| seen| https://t.me/cibsecurity/62747 2023-07-26 14:24:11+00:00| published-proof-of-concept| https://t.me/codeb0ss/958 2025-02-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2025-02-22...

CVE-2023-2246

creationtimestamp| type| source ---|---|--- 2023-04-23 20:38:32+00:00| seen| https://t.me/cibsecurity/62672 2023-05-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51431 2025-09-12 17:40:50+00:00| seen|...

Google Chrome Security Update (stable-channel-update-for-desktop_14-2023-04) - Windows

Google Chrome is prone to type confusion vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

CVE-2023-22897

creationtimestamp| type| source ---|---|--- 2023-04-13 02:29:31+00:00| seen| https://t.me/cibsecurity/62035 2023-04-14 13:24:16+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8116 2023-07-27 01:42:23+00:00| published-proof-of-concept| https://t.me/codeb0ss/962 2025-01-3...