Actively Exploited Vulnerability in FXC Routers: Fixed, Patches Available

...

Qualcomm Releases Details on Chip Vulnerabilities Exploited in Targeted Attacks

Chipmaker Qualcomm has released more information about three high-severity security flaws that it said came under "limited, targeted exploitation" back in October 2023. The vulnerabilities are as follows - CVE-2023-33063 CVSS score: 7.8 - Memory corruption in DSP Services during a remote call fro...

CVE-2023-22523

This vulnerability, if exploited, allows an attacker to perform privileged RCE Remote Code Execution on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application formerly known as Insight Discovery and the Assets Discovery agent...

CVE-2023-22523

This vulnerability, if exploited, allows an attacker to perform privileged RCE Remote Code Execution on machines with the Assets Discovery agent installed. The vulnerability exists between the Assets Discovery application formerly known as Insight Discovery and the Assets Discovery agent...

CVE-2023-42917

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog. Mitigation Do not process or load untrusted web content. Please update the affected packa...

Google Android elevation of privilege vulnerability (CNVD-2024-07114)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-33106 Qualcomm Multiple Chipsets Use of Out-of-Range Pointer Offset Vulnerability CVE-2023-33063 Qualcomm Multiple Chipsets Use-After-Free Vulnerability...

IBM InfoSphere Information Server Information Disclosure Vulnerability (CNVD-2023-9570703)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. An information disclosure vulnerability exists in IBM InfoSphere Information Server, which can b...

IBM InfoSphere Information Server Cross-Site Scripting Vulnerability (CNVD-2023-9571000)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site scripting vulnerability exists in IBM InfoSphere Information Server, which can be...

IBM InfoSphere Information Server Cross-Site Request Forgery Vulnerability (CNVD-2023-9571298)

IBM InfoSphere Information Server is a set of data integration platforms from International Business Machines IBM. The platform can be used to integrate data information obtained from various sources. A cross-site request forgery vulnerability exists in IBM InfoSphere Information Server, which ca...

CVE-2023-40465

Several versions of ALEOS, including ALEOS 4.16.0, include an opensource third-party component which can be exploited from the local area network, resulting in a Denial of Service condition for the captive portal...

Microsoft Outlook Vulnerability Exploited by Russian Forest Blizzard Group

By Waqas Forest Blizzard aka STRONTIUM, APT28, and Fancy Bear is thought to have affiliations with or support from the Russian military intelligence agency. This is a post from HackRead.com Read the original post: Microsoft Outlook Vulnerability Exploited by Russian Forest Blizzard Group...

CVE-2015-0352

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

CVE-2015-3038

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

CVE-2015-0355

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

CVE-2015-0350

creationtimestamp| type| source ---|---|--- 2023-12-04 14:06:55+00:00| exploited| https://t.me/arpsyndicate/1224 2025-02-14 21:08:31+00:00| exploited| Telegram/KXxzSqmSZ8fSAUbwMWbs63xLMdgmjHRpOZYMh9YJDfDzqW...

GHSA-95HW-V8FQ-666Q

creationtimestamp| type| source ---|---|--- 2023-12-02 00:26:35+00:00| exploited| https://t.me/arpsyndicate/864...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versio...