Code injection

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-27638

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommercedesigncartid GET parameter in order to exploit an insecure parameter in the functions hookActionCartSave and...

CVE-2023-1545

creationtimestamp| type| source ---|---|--- 2023-03-21 13:34:49+00:00| seen| https://t.me/cibsecurity/60358 2025-02-23 04:00:07+00:00| published-proof-of-concept| Telegram/bVKl2rVR16OP4Ec2skHtd8ZoJjQCFrtWn4vAPJbiN3wMc 2025-02-24 22:00:05+00:00| published-proof-of-concept|...

From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022

As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple. While this figure represents a decrease from the year before, when a staggering 81 zero-days were weaponized, it still represents a significa...

Moodle 跨站脚本漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle. An attacker exploited the vulnerability to perform a cross-site scripting attack...

Moodle 跨站请求伪造漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle. An attacker exploited the vulnerability to perform a cross-site request forgery attack...

Moodle 跨站脚本漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle. An attacker exploited the vulnerability to perform a cross-site scripting attack...

CVE-2023-27326

creationtimestamp| type| source ---|---|--- 2023-03-20 18:20:51+00:00| seen| Telegram/1EJWyoHSyilfkqZWLU4GfdO5lUWefMlV9JG3pFlAJki-jhY 2023-03-21 09:33:30+00:00| published-proof-of-concept| https://t.me/dilagrafie/2616 2023-03-21 11:01:01+00:00| published-proof-of-concept|...

Rubrik is latest victim of the Clop ransomware zero-day campaign

Rubrik, a cybersecurity company specializing in cloud data management, has revealed that some of its systems were infiltrated by the Clop ransomware group. Rubrik is one of many companies attacked by Clop via an infamous zero-day vulnerability in the GoAnywhere file transfer software. The attack...

CVE-2023-1454

creationtimestamp| type| source ---|---|--- 2023-03-17 11:36:42+00:00| seen| https://t.me/cibsecurity/60236 2023-03-24 03:10:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4024 2023-04-13 07:21:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4168 2023-04-13...

Adobe Experience Manager URL Redirection Vulnerability (CNVD-2023-45909)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A URL...

Adobe Experience Manager URL Redirection Vulnerability (CNVD-2023-45906)

Adobe Experience Manager AEM is a set of content management solutions that can be used to build websites, mobile applications and forms from the American company Audobee Adobe. The program supports mobile content management, marketing and sales campaign management and multi-site management. A URL...

CVE-2023-27587

creationtimestamp| type| source ---|---|--- 2023-03-16 08:24:44+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3946 2023-03-17 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7945 2025-01-31 00:00:00+00:00| exploited| The Shadowserver...

Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency

Multiple threat actors, including a nation-state group, exploited a critical three-year-old security flaw in Progress Telerik to break into an unnamed federal entity in the U.S. The disclosure comes from a joint advisory issued by the Cybersecurity and Infrastructure Security Agency CISA, Federal...

CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on March 15 added a security vulnerability impacting Adobe ColdFusion to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The critical flaw in question is CVE-2023-26360 CVSS score: 8.6, which...

CISA Issues Urgent Warning: Adobe ColdFusion Vulnerability Exploited in the Wild

The U.S. Cybersecurity and Infrastructure Security Agency CISA on March 15 added a security vulnerability impacting Adobe ColdFusion to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The critical flaw in question is CVE-2023-26360 CVSS score: 8.6, which...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2023-67110)

Oracle MySQL Server is a relational database from Oracle Corporation. A denial of service vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Oracle MySQL Server Denial of Service Vulnerability (CNVD-2023-67112)

Oracle MySQL Server is a relational database from Oracle Corporation. A denial of service vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause unauthorized MySQL Server hangs or frequent repeated crashes...

Microsoft Internet Control Message Protocol (ICMP) Remote Code Execution Vulnerability

Microsoft Internet Control Message Protocol ICMP is a remote code execution vulnerability in Microsoft Internet Control Message Protocol ICMP, an ICMP protocol used in Windows. A remote code execution vulnerability exists in Microsoft Internet Control Message Protocol ICMP, which could be exploit...

Microsoft PostScript and PCL6 Class Printer Driver Remote Code Execution Vulnerability (CNVD-2023-28102)

Microsoft PostScript Printer Driver is a Microsoft standard printer driver for PostScript printers from Microsoft. Microsoft PostScript and PCL6 Class Printer Driver is a remote code execution vulnerability that can be exploited by attackers to remotely execute code...