Dell Virtual Appliance Manager Command Injection Vulnerability

Dell Virtual Appliance Manager is a virtual appliance manager from Dell USA. A command injection vulnerability exists in Dell Virtual Appliance Manager, which can be exploited by an attacker to cause arbitrary operating system commands to be executed on an affected system...

CVE-2023-48023

creationtimestamp| type| source ---|---|--- 2023-12-17 16:42:33+00:00| seen| https://t.me/ctinow/155637 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575...

CVE-2023-6838

Reflected XSS vulnerability can be exploited by tampering a request parameter in Authentication Endpoint. This can be performed in both authenticated and unauthenticated requests...

Adobe Illustrator Resource Management Error Vulnerability (CNVD-2024-12467)

Adobe Illustrator is a set of vector-based image creation software from the American company Audobee Adobe. A security vulnerability exists in Adobe Illustrator that can be exploited by an attacker to cause arbitrary code to be executed in the current user's context...

Adobe InDesign Buffer Overflow Vulnerability (CNVD-2024-12469)

Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. A security vulnerability exists in Adobe InDesign, which can be exploited by an attacker to cause a sensitive memory leak...

Adobe After Effects Input Validation Error Vulnerability (CNVD-2023-9999192)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. A security vulnerability exists in Adobe After Effects, which can be...

Apple’s Timely Response to Actively Exploited Zero-Days

Summary: Apple has released crucial software updates to address two actively exploited security vulnerabilities identified as CVE-2023-42916 and CVE-2023-42917. These vulnerabilities affect the WebKit browser engine on Apple devices such as iPhone, iPad, and Mac, potentially exposing sensitive...

Actively Exploited Vulnerability in QNAP VioStor NVR: Fixed, Patches Available

...

SAP HCM Travel Management Cross-Site Scripting Vulnerability

SAP HCM Travel Management is a travel management module from SAP. A cross-site scripting vulnerability exists in SAP HCM Travel Management that stems from insufficiently encoded user input and can be exploited by an attacker to cause a cross-site scripting XSS attack...

Siemens SCALANCE M-800/S615 Series OS Command Injection Vulnerability

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers. An operating system command injection vulnerability exists in the Siemens SCALANCE M-800/S615 series, which can be exploited by an attacker to execute commands on the system via a malicious local administrator...

Siemens SINEC INS Denial of Service Vulnerability (CNVD-2023-97253)

SINEC INS Infrastructure Network Services is a web-based application that combines various network services in one tool. This simplifies the installation and management of all network services associated with industrial networks. A denial of service vulnerability exists in Siemens SINEC INS, whic...

Siemens SCALANCE M-800/S615 Series OS Command Injection Vulnerability

The SCALANCE M-800, MUM-800 and S615 and the RUGGEDCOM RM1224 are industrial routers. An operating system command injection vulnerability exists in the Siemens SCALANCE M-800/S615 series, which can be exploited by an attacker to execute commands on the system...

CVE-2023-42325

creationtimestamp| type| source ---|---|--- 2023-12-12 18:42:51+00:00| exploited| https://t.me/truesecator/5193 2026-07-26 02:02:16+00:00| seen| https://t.me/EchelonEyes/2294 2026-07-26 07:01:48+00:00| seen| https://t.me/zhatez/853 2026-07-27 00:00:53+00:00| seen| https://t.me/EchelonEyes/2294...

CVE-2023-6553

creationtimestamp| type| source ---|---|--- 2023-12-12 17:10:05+00:00| seen| https://t.me/truesecator/5192 2023-12-14 07:38:31+00:00| published-proof-of-concept| https://t.me/proxybar/1866 2023-12-15 07:34:50+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/193 2023-12-15...

New Critical RCE Vulnerability Discovered in Apache Struts 2 - Patch Now

Apache has released a security advisory warning of a critical security flaw in the Struts 2 open-source web application framework that could result in remote code execution. Tracked as CVE-2023-50164, the vulnerability is rooted in a flawed "file upload logic" that could enable unauthorized path...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-6448 Unitronics Vision PLC and HMI Insecure Default Password These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

webkitgtk: Arbitrary Remote Code Execution

A flaw was found in WebKitGTK. Processing malicious web content may lead to remote code execution. This vulnerability is known to be actively exploited in the wild and was included in the CISA's KEV catalog...

Debian DSA-5575-1 : webkit2gtk - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5575 advisory. - An out-of-bounds read was addressed with improved input validation. CVE-2023-42916 - A memory corruption vulnerability was addressed with improved locking...

CVE-2023-50428

In Bitcoin Core through 26.0 and Bitcoin Knots before 25.1.knots20231115, datacarrier size limits can be bypassed by obfuscating data as code e.g., with OPFALSE OPIF, as exploited in the wild by Inscriptions in 2022 and 2023. NOTE: although this is a vulnerability from the perspective of the...

CVE-2015-7501

creationtimestamp| type| source ---|---|--- 2023-12-08 13:11:12+00:00| seen| https://t.me/arpsyndicate/1566 2023-12-11 14:17:52+00:00| seen| https://t.me/arpsyndicate/1752 2024-02-16 15:31:43+00:00| seen| https://t.me/ctinow/186439 2026-02-02 12:25:26+00:00| exploited|...