CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-4762 Google Chromium V8 Type Confusion Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant...

IBM Security Access Manager Unauthorized Access Vulnerability

IBM Security Access Manager is a product for information security management applications from International Business Machines IBM. The product enables access management control through integrated appliances for web, mobile and cloud computing. An unauthorized access vulnerability exists in IBM...

CVE-2023-39303

An improper authentication vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to compromise the security of the system via a network. We have already fixed the vulnerability in the following versions: QTS 5.1.3.2578...

CISA Known Exploited Vulnerability Catalog January 2024

For a detailed CISAs KEV Catalog, download the pdf file here Summary The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. It is recommended that all organizations review and monitor the KEV catalog,...

Buffer Overflow

Vyper is vulnerable to Buffer Overflow Vulnerability. The vulnerability is due to the improper bounds check for slices because it does not account for the potential overflow of start + length when non-literal values are used. This issue can be exploited by an attacker to perform out of bounds...

CVE-2024-22319

creationtimestamp| type| source ---|---|--- 2024-02-02 04:21:45+00:00| seen| https://t.me/ctinow/177910 2024-02-23 12:23:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10025 2024-02-24 12:41:34+00:00| seen| https://t.me/ctinow/192554 2025-06-26 00:00:00+00:00|...

RunC Flaws Enable Container Escapes, Granting Attackers Host Access

Multiple security vulnerabilities have been disclosed in the runC command line tool that could be exploited by threat actors to escape the bounds of the container and stage follow-on attacks. The vulnerabilities, tracked as CVE-2024-21626, CVE-2024-23651, CVE-2024-23652, and CVE-2024-23653, have...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-48618 Apple Multiple Products Memory Corruption Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

WordPress Review Schema Plugin <= 2.1.14 is vulnerable to Broken Access Control

Software Review Schema Type Plugin Vulnerable versions = 2.1.14 Fixed in 2.2.0 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2024-0836 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 61e084c0e677 Credits Francesco Carlucci Required...

CVE-2024-24329

creationtimestamp| type| source ---|---|--- 2024-01-30 16:22:10+00:00| seen| https://t.me/ctinow/176043 2024-02-01 08:16:32+00:00| seen| https://t.me/ctinow/177364 2024-02-22 08:08:04+00:00| seen| https://t.me/ctinow/190519 2025-02-12 09:28:20+00:00| seen|...

Juniper Networks Releases Urgent Junos OS Updates for High-Severity Flaws

Juniper Networks has released out-of-band updates to address high-severity flaws in SRX Series and EX Series that could be exploited by a threat actor to take control of susceptible systems. The vulnerabilities, tracked as CVE-2024-21619 and CVE-2024-21620, are rooted in the J-Web component and...

CVE-2019-5129

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:40+00:00| seen| https://t.me/ctinow/175124 2024-11-30 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-11-30 2024-12-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

CVE-2019-5128

creationtimestamp| type| source ---|---|--- 2024-01-29 09:41:38+00:00| seen| https://t.me/ctinow/175123 2024-12-22 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-22 2024-12-24 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

Savant 3.0 Denial Of Service

!/usr/bin/perl use IO::Socket; Exploit Title: Savant 3.0 - Denied of Service DoS Discovery by: Fernando Mengali Discovery Date: 27 january 2024 https://sourceforge.net/projects/savant/files/Savant/3.0/Savant30.exe/download Download to demo:...

CVE-2019-18371

creationtimestamp| type| source ---|---|--- 2024-01-27 09:11:40+00:00| seen| https://t.me/ctinow/174700 2024-03-10 00:23:58+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/10119 2025-02-20 00:00:00+00:00| seen| The Shadowserver honeypot/common-vulnerabilities - 2025-02-2...

Exploit for Path Traversal in Jenkins

CVE-2024-23897 CVE-2024-23897 - Arbitrary file read vulne...

CVE-2024-21620

creationtimestamp| type| source ---|---|--- 2024-01-26 00:26:38+00:00| seen| https://t.me/ctinow/173889 2024-01-30 06:04:06+00:00| seen| https://t.me/thehackernews/4472 2024-01-30 06:41:04+00:00| seen| https://t.me/KomunitiSiber/1411 2024-01-30 12:22:47+00:00| seen|...

Multiple Mozilla Products Spoofing Vulnerabilities

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the U.S.A. Mozilla Firefox ESR is an extended support version of Firefox the web browser.Mozilla Thunderbird is email client software that supports the IMAP and POP mail protocols as well as the HTML mail format. A...

Mozilla Firefox Denial of Service Vulnerability (CNVD-2024-10437)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A denial of service vulnerability exists in Mozilla Firefox, which can be exploited by attackers to cause the browser to crash...

Apple TV < 17.3 Multiple Vulnerabilities (HT214055)

According to its banner, the version of Apple TV on the remote device is prior to 17.3. It is therefore affected by multiple vulnerabilities as described in the HT214055 %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid189535; scriptversion"1.5";...