Design/Logic Flaw

In Liferay Portal 7.2.0 through 7.4.3.25, and older unsupported versions, and Liferay DXP 7.4 before update 26, 7.3 before update 5, 7.2 before fix pack 19, and older unsupported versions the default value of the portal property http.header.version.verbosity is set to full, which allows remote...

BELL-CVE-2024-22017

Bulletin has no description...

BELL-CVE-2023-51042

Bulletin has no description...

CVE-2024-0414 DeShang DSCMS install.php access control

A vulnerability classified as problematic has been found in DeShang DSCMS up to 3.1.2/7.1. Affected is an unknown function of the file public/install.php. The manipulation leads to improper access controls. It is possible to launch the attack remotely. The exploit has been disclosed to the public...

CVE-2023-6244

creationtimestamp| type| source ---|---|--- 2024-01-11 16:41:39+00:00| seen| https://t.me/ctinow/166637 2024-01-27 06:11:52+00:00| seen| https://t.me/ctinow/174638...

putramanunggalfurniture.com Improper Access Control vulnerability OBB-3808691

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Navigate FDA 524b to get your medical cyber device to market

With amendment 524b officially enacted, medical devices across the United States and the globe are living under some new rules and procedures. You’re not alone if you are finding these new regulations a bit complex. Changes to business practices – particularly ones that involve millions of...

CVE-2023-46748

creationtimestamp| type| source ---|---|--- 2023-10-27 00:18:13+00:00| seen| https://t.me/cibsecurity/73014 2023-10-31 21:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-11-01 09:43:20+00:00| exploited| https://t.me/itsecnews/3578 2023-11-01 10:48:35+00:00| exploited|...

CVE-2023-5360

creationtimestamp| type| source ---|---|--- 2023-10-17 14:29:19+00:00| exploited| https://t.me/quanxiaowa/596 2023-10-18 13:37:08+00:00| seen| https://t.me/apsecurity/197 2023-10-18 13:37:08+00:00| seen| https://t.me/apsecurity/139 2023-10-21 10:55:43+00:00| published-proof-of-concept|...

Sirius - First Truly Open-Source General Purpose Vulnerability Scanner

Sirius is the first truly open-source general purpose vulnerability scanner. Today, the information security community remains the best and most expedient source for cybersecurity intelligence. The community itself regularly outperforms commercial vendors. This is the primary advantage Sirius Sca...

CVE-2023-36802

creationtimestamp| type| source ---|---|--- 2023-09-12 21:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2023-09-12 22:17:21+00:00| seen| https://t.me/ctinow/136491 2023-09-13 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1107 2023-09-13 10:06:37+00:00| see...

CVE-2023-41846

A vulnerability has been identified in Tecnomatix Plant Simulation V2201 All versions V2201.0008, Tecnomatix Plant Simulation V2302 All versions V2302.0002. The affected application is vulnerable to memory corruption while parsing specially crafted SPP files. This could allow an attacker to execu...

CVE-2023-4870 SourceCodester Contact Manager App Contact Information index.php cross site scripting

A vulnerability classified as problematic has been found in SourceCodester Contact Manager App 1.0. This affects an unknown part of the file index.php of the component Contact Information Handler. The manipulation of the argument contactID with the input "alert1 leads to cross site scripting. It ...

CVE-2025-34073

creationtimestamp| type| source ---|---|--- 2023-08-16 22:01:49+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/unix/http/maltrailrce.rb 2025-07-04 21:02:22+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3lt65boaqfs2s 2025-08-15...

CVE-2023-39269

A vulnerability has been identified in RUGGEDCOM i800, RUGGEDCOM i800NC, RUGGEDCOM i801, RUGGEDCOM i801NC, RUGGEDCOM i802, RUGGEDCOM i802NC, RUGGEDCOM i803, RUGGEDCOM i803NC, RUGGEDCOM M2100, RUGGEDCOM M2100F, RUGGEDCOM M2100NC, RUGGEDCOM M2200, RUGGEDCOM M2200F, RUGGEDCOM M2200NC, RUGGEDCOM M969...

CVE-2023-33921

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to...

Hey Yara, find some vulnerabilities

Intro Intro Finding vulnerabilities in software is no easy task by itself. Doing this at cloud scale is very challenging to perform manually, and we use tools to help us identify patterns or vulnerability signatures. Yara is one of those tools. Yara is a very popular tool with Blue teams, malware...

CVE-2023-28464

creationtimestamp| type| source ---|---|--- 2023-03-28 18:25:20+00:00| seen| Telegram/8p6JA5oMMOqwPorrqcuvwcmg79aWDchpNaHDfTZK-qhrPOA 2023-03-31 20:22:24+00:00| seen| https://t.me/cibsecurity/61255...

Understanding metrics to measure SOC effectiveness

The security operations center SOC plays a critical role in protecting an organizations assets and reputation by identifying, analyzing, and responding to cyberthreats in a timely and effective manner. Additionally, SOCs also help to improve overall security posture by providing add-on services...

PT-2023-11318 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: No vulnerable software or affected versions specified. Description: The provided information does not describe a vulnerability but rather a rejected CVE candidate number. There is no general information about an issue, estimated number of...