CVE-2023-51435

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause information leak...

CVE-2023-23427

Some Honor products are affected by incorrect privilege assignment vulnerability, successful exploitation could cause device service exceptions...

TOTOLINK EX1800T setRebootScheCfg Interface Command Execution Vulnerability

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setRebootScheCfg interface, which can be exploited by an attacker to execute arbitrary commands on the system...

Arbitrary File Download Vulnerability in Electronic Document Security Management System of Beijing Yisetong Technology Development Co., Ltd (CNVD-2024-05347)

Electronic document security management system is a controllable authorization of electronic document security sharing management system, using real-time dynamic encryption and decryption protection technology and real-time rights recovery mechanism, to provide all kinds of electronic documents...

Cryptography has a denial of service vulnerability

Cryptography is a Python library that provides cryptography functionality. Cryptography suffers from a denial of service vulnerability that can be exploited by an attacker to cause a program to crash...

GitLab: Account Takeover via Password Reset without user interactions

The report submitted to GitLab described a vulnerability that allowed account takeover via the password reset form. The vulnerability was triggered by modifying the JSON request to include the victim's email along with the attacker's email. This resulted in the password reset email being sent to...

Double-Extortion Play Ransomware Strikes 300 Organizations Worldwide

The threat actors behind the Play ransomware are estimated to have impacted approximately 300 entities as of October 2023, according to a new joint cybersecurity advisory from Australia and the U.S. "Play ransomware actors employ a double-extortion model, encrypting systems after exfiltrating dat...

Delta Dental Hit with 7 Million User Data Breach in MOVEit-Linked Attack

By Waqas Since its emergence in May 2023, the MOVEit vulnerability has been exploited by the Russian-linked Cl0p ransomware gang,… This is a post from HackRead.com Read the original post: Delta Dental Hit with 7 Million User Data Breach in MOVEit-Linked Attack...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-0019723)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

CVE-2023-42327

creationtimestamp| type| source ---|---|--- 2023-12-12 18:42:51+00:00| exploited| https://t.me/truesecator/5193 2026-07-26 02:02:17+00:00| seen| https://t.me/EchelonEyes/2294 2026-07-26 07:01:48+00:00| seen| https://t.me/zhatez/853 2026-07-27 00:00:53+00:00| seen| https://t.me/EchelonEyes/2294...

Tenda W30E setUmountUSBPartition Function Command Execution Vulnerability

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which stems from the setUmountUSBPartition function failing to correctly filter constructor command special characters, commands, etc. The vulnerability can b...

Google Android suffers from unspecified vulnerability (CNVD-2023-9749629)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause elevation of privilege...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Microsoft Visual Studio software, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00198)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Excel Security Feature Bypass Vulnerability (CNVD-2024-02715)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by an attacker to bypass security features and impact confidentiality, integrity, and availability...

Advanced threat predictions for 2024

Advanced persistent threats APTs are the most dangerous threats, as they employ complex tools and techniques, and often are highly targeted and hard to detect. Amid the global crisis and escalating geopolitical confrontations, these sophisticated cyberattacks are even more dangerous, as there is...

Cerber Ransomware Exploits Atlassian Confluence Vulnerability CVE-2023-22518

We encountered the Cerber ransomware exploiting the Atlassian Confluence vulnerability CVE-2023-22518 in its operations...

PT-2023-15880 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to a race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition...

MOXA PT-G503 Unauthorized Access Vulnerability

MOXA PT-G503 is a series of Layer 2 managed switches from MOXA China. The MOXA PT-G503 unauthorized access vulnerability can be exploited by a remote attacker to submit a special request that can be used to gain unauthorized access to and manipulate user session data...