CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK

The Computer Emergency Response Team of Ukraine CERT-UA has warned of a new phishing campaign orchestrated by the Russia-linked APT28 group to deploy previously undocumented malware such as OCEANMAP, MASEPIE, and STEELHOOK to harvest sensitive information. The activity, which was detected by the...

CVE-2023-33053

creationtimestamp| type| source ---|---|--- 2023-12-23 14:16:31+00:00| seen| https://t.me/ctinow/158821 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

GHSA-7WW5-4WQC-M92C vulnerabilities

Vulnerabilities for packages: kaniko, flux-helm-controller, eksctl, helm, fuse-overlayfs-snapshotter, trivy, kots, kubevela, melange, k3d, zot, newrelic-infrastructure-agent, kubescape, up, cilium-cli, gitness, buildkitd, flux-source-controller, skaffold, k8sgpt, grype, helm-push, ctop...

GHSA-45X7-PX36-X8W8 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, prometheus-adapter-fips, cortex, dockerize-fips, prometheus-mongodb-exporter, timestamp-authority-fips, eksctl, prometheus-node-exporter, spark-operator, cosign, hugo, nfs-subdir-external-provisioner, gomplate, pulumi, tigera-operator-fips, trivy...

AZL-32195 CVE-2023-48795 affecting package cert-manager for versions less than 1.11.2-7

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

AZL-34581 CVE-2023-48795 affecting package cert-manager for versions less than 1.12.12-1

The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6 and other products, allows remote attackers to bypass integrity checks such that some packets are omitted from the extension negotiation message, and a client and server may consequently end up with a connecti...

Russian Foreign Intelligence Service (SVR) Exploiting JetBrains TeamCity CVE Globally

SUMMARY The U.S. Federal Bureau of Investigation FBI, U.S. Cybersecurity & Infrastructure Security Agency CISA, U.S. National Security Agency NSA, Polish Military Counterintelligence Service SKW, CERT Polska CERT.PL, and the UK’s National Cyber Security Centre NCSC assess Russian Foreign...

Siemens SINUMERIK

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

CVE-2022-45061

creationtimestamp| type| source ---|---|--- 2023-12-10 16:04:31+00:00| seen| https://t.me/arpsyndicate/1650 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

AZL-34585 CVE-2023-6337 affecting package cert-manager for versions less than 1.12.12-1

HashiCorp Vault and Vault Enterprise 1.12.0 and newer are vulnerable to a denial of service through memory exhaustion of the host when handling large unauthenticated and authenticated HTTP requests from a client. Vault will attempt to map the request to memory, resulting in the exhaustion of...

CVE-2013-7445

creationtimestamp| type| source ---|---|--- 2023-11-29 17:21:28+00:00| seen| https://t.me/arpsyndicate/777 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2019-19814

creationtimestamp| type| source ---|---|--- 2023-11-29 16:24:09+00:00| seen| https://t.me/arpsyndicate/768 2024-03-12 16:17:03+00:00| seen| https://t.me/ctinow/205792 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-46316

creationtimestamp| type| source ---|---|--- 2023-11-29 12:57:36+00:00| seen| https://t.me/arpsyndicate/737 2024-01-23 18:51:28+00:00| published-proof-of-concept| https://t.me/hackingbra/78 2024-08-16 09:02:40+00:00| published-proof-of-concept| https://t.me/Rootsec2/2557 2025-04-24 03:08:34+00:00|...

Apache Superset - Elevation of Privilege

Overview An attacker with access to the SQL Lab and the abuser and abuserrole tables can elevate his privileges to become administrator. Details On a more general level, diverse tables who are supposed to be only readable can be modified using the WITH … AS and RETURNING keywords. Modification of...

Loytec L-INX Automation Servers Information Disclosure / Cleartext Secrets

CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389 + Title : Multiple vulnerabilities in Loytec L-INX Automation Servers + Vendor : LOYTEC electronics GmbH + Affected Products : LINX-151, Firmware 7.2.4, LINX-212, firmware 6.2.4 + Affected Components : L-INX Automation Servers +...

Loytec LINX Automation Servers Information Disclosure / Cleartext Secrets Vulnerability

Loytec LINX-151 with firmware version 7.2.4 and LINX-212 with firmware version 6.2.4 suffer from file disclosure vulnerabilities that leak secrets as well as issues with stories secrets in the clear. + CVE : CVE-2023-46386, CVE-2023-46387, CVE-2023-46388, CVE-2023-46389 + Title : Multiple...

CVE-2023-49083

creationtimestamp| type| source ---|---|--- 2023-11-27 19:39:15+00:00| published-proof-of-concept| https://github.com/pyca/cryptography/security/advisories/GHSA-jfhm-5ghh-2f97 2023-12-20 09:42:33+00:00| seen| https://t.me/ctinow/156829 2026-03-19 00:00:00+00:00| seen|...

CVE-2023-46100 Cert manager has a use of uninitialized resource vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource...

CVE-2023-46100 Cert manager has a use of uninitialized resource vulnerability

in OpenHarmony v3.2.2 and prior versions allow a local attacker get sensitive buffer information through use of uninitialized resource...

CVE-2023-29383

creationtimestamp| type| source ---|---|--- 2023-11-17 02:53:33+00:00| seen| https://t.me/arpsyndicate/184 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/ 2026-07-29 12:02:29+00:00| seen| https://t.me/reverseame/3369 2026-07-30 00:02:30+00:00| seen|...