CVE-2018-20060

creationtimestamp| type| source ---|---|--- 2023-10-23 11:43:47+00:00| seen| https://t.me/cibsecurity/72293 2026-04-02 17:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0395/...

Synology DiskStation Manager (DSM) < 3.1 Information Disclosure Vulnerability (Feb 2015)

Synology DiskStation Manager DSM is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CERT-UA Reports: 11 Ukrainian Telecom Providers Hit by Cyberattacks

The Computer Emergency Response Team of Ukraine CERT-UA has revealed that threat actors "interfered" with at least 11 telecommunication service providers in the country between May and September 2023. The agency is tracking the activity under the name UAC-0165, stating the intrusions led to servi...

GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: metrics-server-fips, k3s, kubernetes, prometheus-adapter, kubernetes-fips, rancher-webhook-fips, up, kubevela, buildkitd, kube-oidc-proxy, caddy, rancher-webhook...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, k3s, kubernetes, prometheus-adapter, kubernetes-fips, rancher-webhook-fips, up, kubevela, buildkitd, kube-oidc-proxy, caddy, rancher-webhook...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: buildkitd, prometheus-adapter, caddy, kubernetes, up, k3s, kubevela...

AZL-34588 CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-31639 CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: metrics-server-fips, prometheus-adapter-fips, prometheus-mongodb-exporter, aws-efs-csi-driver, prometheus-node-exporter, spark-operator, cosign, hugo, nfs-subdir-external-provisioner, gomplate, pulumi, mc, bom, kubeflow, kubeflow-katib, tekton-chains, amass,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: nats, pulumi-language-yaml, kubeflow, mc, pulumi-language-dotnet, nodetaint, helm, metacontroller, flux-source-controller, certificate-transparency, kind, ollama, scorecard, fuse-overlayfs-snapshotter, kubevela, cortex, pulumi-language-java, minio, gobuster, dgraph,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: nats, pulumi-language-yaml, kubeflow, mc, pulumi-language-dotnet, nodetaint, helm, metacontroller, flux-source-controller, certificate-transparency, kind, ollama, scorecard, fuse-overlayfs-snapshotter, kubevela, cortex, pulumi-language-java, minio, gobuster, dgraph,...

AZL-31296 CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

LDAP Login Scanner

This module attempts to login to the LDAP service. Module Options msf use auxiliary/scanner/ldap/ldaplogin msf auxiliaryldaplogin show actions ...actions... msf auxiliaryldaplogin set ACTION msf auxiliaryldaplogin show options ...show and set options... msf auxiliaryldaplogin run This module...

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

Ukrainian military entities are the target of a phishing campaign that leverages drone manuals as lures to deliver a Go-based open-source post-exploitation toolkit called Merlin. "Since drones or Unmanned Aerial Vehicles UAVs have been an integral tool used by the Ukrainian military, malware-lace...

The vulnerability of the web_cert_download_handler() function in D-Link’s wireless access points, the DWL-6610AP, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the webcertdownloadhandler function in D-Link DWL-6610AP wireless access points relates to the lack of measures taken to neutralize special elements used in the operating system’s processing of the certDownload parameter. Exploiting this vulnerability can allow an attacker to...

D-LINK DWL-6610 Command Injection Vulnerability

The D-Link DWL-6610 is a wireless access point from D-Link. A security vulnerability exists in the D-LINK DWL-6610, which is caused by a command injection vulnerability in the function webcertdownloadhandler. An attacker can use this vulnerability to execute arbitrary commands via the certDownloa...

Siemens SIMATIC IPCs

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

A new cyber attack campaign is leveraging the PowerShell script associated with a legitimate red teaming tool to plunder NTLMv2 hashes from compromised Windows systems primarily located in Australia, Poland, and Belgium. The activity has been codenamed Steal-It by Zscaler ThreatLabz. "In this...