GHSA-RCJV-MGP8-QVMR vulnerabilities

Vulnerabilities for packages: kubevela, kube-oidc-proxy, kubernetes, buildkitd, rancher-webhook, rancher-webhook-fips, up, caddy, metrics-server-fips, prometheus-adapter, kubernetes-fips, k3s...

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5. A patched version of the package is available...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: kubevela, kube-oidc-proxy, kubernetes, buildkitd, rancher-webhook, rancher-webhook-fips, up, caddy, metrics-server-fips, prometheus-adapter, kubernetes-fips, k3s...

CVE-2023-45142 vulnerabilities

Vulnerabilities for packages: prometheus-adapter, buildkitd, caddy, kubevela, kubernetes, up, k3s...

AZL-31639 CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

AZL-34588 CVE-2023-39325 affecting package cert-manager for versions less than 1.11.2-5

A malicious HTTP/2 client which rapidly creates requests and immediately resets them can cause excessive server resource consumption. While the total number of requests is bounded by the http2.Server.MaxConcurrentStreams setting, resetting an in-progress request allows the attacker to create a ne...

CVE-2023-39325 vulnerabilities

Vulnerabilities for packages: grpcurl, prometheus-postgres-exporter-fips, metacontroller, kubeflow-katib, yq, zot, secrets-store-csi-driver-provider-gcp, falcoctl-fips, fuse-overlayfs-snapshotter, minio, aws-efs-csi-driver-fips, nats, dex-k8s-authenticator, kube-state-metrics-fips,...

GHSA-QPPJ-FM5R-HXR3 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, flux-kustomize-controller, gitness, amass, ollama, oauth2-proxy, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, nodetaint, gomplate, skaffold, ko, kpt, kubeflow-katib, minio, nginx-mainline, nats, metrics-server,...

CVE-2023-44487 vulnerabilities

Vulnerabilities for packages: flux-notification-controller, flux-kustomize-controller, gitness, amass, ollama, oauth2-proxy, secrets-store-csi-driver-provider-gcp, fuse-overlayfs-snapshotter, nodetaint, gomplate, skaffold, ko, kpt, kubeflow-katib, minio, nginx-mainline, nats, metrics-server,...

AZL-31296 CVE-2023-44487 affecting package cert-manager for versions less than 1.11.2-5

The HTTP/2 protocol allows a denial of service server resource consumption because request cancellation can reset many streams quickly, as exploited in the wild in August through October 2023...

LDAP Login Scanner

This module attempts to login to the LDAP service. Module Options msf use auxiliary/scanner/ldap/ldaplogin msf auxiliaryldaplogin show actions ...actions... msf auxiliaryldaplogin set ACTION msf auxiliaryldaplogin show options ...show and set options... msf auxiliaryldaplogin run This module...

Ukrainian Military Targeted in Phishing Campaign Leveraging Drone Manuals

Ukrainian military entities are the target of a phishing campaign that leverages drone manuals as lures to deliver a Go-based open-source post-exploitation toolkit called Merlin. "Since drones or Unmanned Aerial Vehicles UAVs have been an integral tool used by the Ukrainian military, malware-lace...

D-Link Wireless Access Point Web Cert Download Handler Buffer Overflow

The vulnerability of the webcertdownloadhandler function in D-Link DWL-6610AP wireless access points relates to the lack of measures taken to neutralize special elements used in the operating system’s processing of the certDownload parameter. Exploiting this vulnerability can allow an attacker to...

D-LINK DWL-6610 Command Injection Vulnerability

The D-Link DWL-6610 is a wireless access point from D-Link. A security vulnerability exists in the D-LINK DWL-6610, which is caused by a command injection vulnerability in the function webcertdownloadhandler. An attacker can use this vulnerability to execute arbitrary commands via the certDownloa...

Siemens SIMATIC IPCs

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...

Cybercriminals Using PowerShell to Steal NTLMv2 Hashes from Compromised Windows

A new cyber attack campaign is leveraging the PowerShell script associated with a legitimate red teaming tool to plunder NTLMv2 hashes from compromised Windows systems primarily located in Australia, Poland, and Belgium. The activity has been codenamed Steal-It by Zscaler ThreatLabz. "In this...

Ukraine's CERT Thwarts APT28's Cyberattack on Critical Energy Infrastructure

The Computer Emergency Response Team of Ukraine CERT-UA on Tuesday said it thwarted a cyber attack against an unnamed critical energy infrastructure facility in the country. The intrusion, per the agency, started with a phishing email containing a link to a malicious ZIP archive that activates th...

Exploit for Code Injection in Citrix Netscaler_Application_Delivery_Controller

cve-2023-3519-citrix-scanner This script is a basic Citrix Sc...

Groupnotes Inc. Videostream Mac client allows for privilege escalation to root account

Overview Groupnotes Inc. Videostream Mac client installs a LaunchDaemon that runs with root privileges. The daemon is vulnerable to a race condition that allows for arbitrary file writes. A low privileged attacker can escalate privileges to root on affected systems. Description Every five hours t...