Unspecified Vulnerability in Oracle MySQL Server (CNVD-2023-67109)

Oracle MySQL Server is a relational database from Oracle Corporation. A security vulnerability exists in Oracle MySQL Server, which can be exploited by attackers to cause unauthorized MySQL Server hangs or frequent repeatable crashes, as well as unauthorized update, insert, or delete access to...

CVE-2023-27350

creationtimestamp| type| source ---|---|--- 2023-04-20 20:30:49+00:00| seen| https://t.me/cibsecurity/62536 2023-04-21 00:00:00+00:00| seen| MISP/fe2a6b30-c779-4b47-994a-53cdecd26ed8 2023-04-22 08:22:51+00:00| seen| https://t.me/thehackernews/3271 2023-04-22 09:51:45+00:00| exploited|...

WordPress Blog Navigator Chatbot by Xatkit Plugin <= 4.4.9 is vulnerable to Cross Site Scripting (XSS)

Software Blog Navigator Chatbot by Xatkit Type Plugin Vulnerable versions = 4.4.9 Fixed in 4.5.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-1649 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 73a888678fc8 Credits Erwan L...

Google Chrome Hit by Second Zero-Day Attack - Urgent Patch Update Released

Google on Tuesday rolled out emergency fixes to address another actively exploited high-severity zero-day flaw in its Chrome web browser. The flaw, tracked as CVE-2023-2136, is described as a case of integer overflow in Skia, an open source 2D graphics library. Clément Lecigne of Google's Threat...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2017-6742 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors...

CVE-2023-2133

creationtimestamp| type| source ---|---|--- 2023-04-19 07:43:14+00:00| seen| https://t.me/cibsecurity/62431 2023-04-20 14:49:40+00:00| exploited| https://t.me/kasperskyb2b/577 2023-07-11 14:57:43+00:00| published-proof-of-concept| Telegram/ZPMcjDlYbbDJ3etZP3BqKChdYJaSzNeePm8ZdO0d0CqNg 2023-07-13...

WordPress Booking calendar, Appointment Booking System Plugin <= 3.2.7 is vulnerable to SQL Injection

Software Booking calendar, Appointment Booking System Type Plugin Vulnerable versions = 3.2.7 Fixed in 3.2.8 OWASP Top 10 A1: Injection Classification SQL Injection CVE CVE-2022-47428 Patch priority Low CVSS severity Low 6.7 Developer Claim ownership PSID be3286ef939c Credits thiennv Required...

CVE-2023-29849

creationtimestamp| type| source ---|---|--- 2023-04-18 17:16:10+00:00| seen| MISP/6fe209e3-4297-4f36-ac92-a5b6db77be5b 2023-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51378 2023-04-24 18:14:25+00:00| seen| https://t.me/cibsecurity/62701 2025-02-06 02:41:37+00:00| seen|...

CVE-2023-29848

creationtimestamp| type| source ---|---|--- 2023-04-18 17:16:08+00:00| seen| MISP/25b68af5-8c9d-4a2b-b5cf-46f024ac613d 2023-04-20 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51377 2023-04-24 18:14:33+00:00| seen| https://t.me/cibsecurity/62709 2025-02-06 02:41:38+00:00| seen|...

Actors, Threats and Vulnerabilities 10 April to 16 April 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, they identified a total of nine attacks that were executed...

Campcodes Online Traffic Offense Management System SQL Injection Vulnerability (CNVD-2023-29407)

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...

Campcodes Advanced Online Voting System SQL Injection Vulnerability (CNVD-2023-29415)

Campcodes Advanced Online Voting System is an online voting system. The Campcodes Advanced Online Voting System v1.0 is vulnerable to SQL injection. The vulnerability stems from the lack of validation of external input SQL statements in the parameter description of the file /admin/positionsadd.ph...

Google Chrome Security Update (stable-channel-update-for-desktop_14-2023-04) - Windows

Google Chrome is prone to type confusion vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome";...

Campcodes Online Traffic Offense Management System SQL Injection Vulnerability

Campcodes Online Traffic Offense Management System is a web-based traffic offense management system. A SQL injection vulnerability exists in Campcodes Online Traffic Offense Management System v1.0. The vulnerability stems from the lack of validation of external input SQL statements in the paramet...

Adobe Acrobat Reader Access Control Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader suffers from an Access Control Error vulnerability that can be exploited by an attacker to execute arbitrary code in the context of the current...

Microsoft Visual Studio Remote Code Execution Vulnerability (CNVD-2023-29362)

Microsoft Windows is a windowed operating system developed by Microsoft Corporation in the United States. A remote code execution vulnerability exists in Microsoft Visual Studio, which can be exploited by attackers to execute code on the target host...

Adobe Substance 3D Stager Input Validation Error Vulnerability

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An input validation error vulnerability exists in Adobe Substance 3D Stager version 2.0.1 and earlier versions, which can be exploited by an attacker to execute arbitrary code in the context of the current...

Severe Android and Novi Survey Vulnerabilities Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency CISA has added two vulnerabilities to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The two flaws are listed below - CVE-2023-20963 CVSS score: 7.8 - Android Framework Privilege Escalation...

Apple iOS < 16.4.1 Multiple Vulnerabilities (HT213720)

Binary data appleios1641check.nbin...

Microsoft Addresses Zero-Day and Wormable Vulnerabilities

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Microsofts April 2023 Patch Tuesday and security updates address one actively exploited the zero-day vulnerability and a total of 97 flaws, consisting of 7 critical and 90 important vulnerabilitie...