PT-2023-5383 · D Link · D-Link Dwl-6610Ap

Name of the Vulnerable Software and Affected Versions: D-LINK DWL-6610AP version 4.3.0.8B003C Description: A command injection issue was discovered in the web cert download handler function, allowing attackers to execute arbitrary commands via the certDownload parameter. This could potentially...

INTERPOL Nabs Hacking Crew OPERA1ER's Leader Behind $11 Million Cybercrime

A suspected senior member of a French-speaking hacking crew known as OPERA1ER has been arrested as part of an international law enforcement operation codenamed Nervone, Interpol has announced. "The group is believed to have stolen an estimated USD 11 million -- potentially as much as 30 million -...

GHSA-HR8G-6V94-X4M9 Bouncy Castle For Java LDAP injection vulnerability

Bouncy Castle provides the X509LDAPCertStoreSpi.java class which can be used in conjunction with the CertPath API for validating certificate paths. Pre-1.73 the implementation did not check the X.500 name of any certificate, subject, or issuer being passed in for LDAP wild cards, meaning the...

Artemis - A Modular Web Reconnaissance Tool And Vulnerability Scanner

A modular web reconnaissance tool and vulnerability scanner based on Karton https://github.com/CERT-Polska/karton. The Artemis project has been initiated by the KN Cyber science club of Warsaw University of Technology and is currently being maintained by CERT Polska. Artemis is experimental...

CVE-2023-20178

creationtimestamp| type| source ---|---|--- 2023-06-08 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1039 2023-06-08 10:30:23+00:00| seen| https://t.me/kasperskyb2b/679 2023-06-08 13:51:47+00:00| seen| https://t.me/truesecator/4479 2023-06-10 08:33:18+00:00| seen|...

AZL-27020 CVE-2023-2253 affecting package cert-manager for versions less than 1.11.2-14

A flaw was found in the /v2/catalog endpoint in distribution/distribution, which accepts a parameter to control the maximum number of records returned query string: n. This vulnerability allows a malicious user to submit an unreasonably large value for n, causing the allocation of a massive strin...

CVE-2022-3162 affecting package cert-manager for versions less than 1.11.2-1

CVE-2022-3162 affecting package cert-manager for versions less than 1.11.2-1. An upgraded version of the package is available that resolves this issue...

DEBIAN-CVE-2023-0767

An attacker could construct a PKCS 12 cert bundle in such a way that could allow for arbitrary memory writes via PKCS 12 Safe Bag attributes being mishandled. This vulnerability affects Firefox 110, Thunderbird 102.8, and Firefox ESR 102.8...

CVE-2023-20161

creationtimestamp| type| source ---|---|--- 2023-05-18 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1027 2023-05-18 07:31:55+00:00| seen| https://t.me/cibsecurity/64361 2023-05-18 11:59:24+00:00| published-proof-of-concept| https://t.me/truesecator/4394 2023-05-22...

CVE-2023-22787

creationtimestamp| type| source ---|---|--- 2023-05-10 13:22:06+00:00| seen| https://www.cert.at/de/warnungen/2023/5/kritische-sicherheitslucken-in-arubaos-und-aruba-instantos-updates-verfugbar...

CVE-2023-24943

creationtimestamp| type| source ---|---|--- 2023-05-09 22:39:03+00:00| seen| https://t.me/cibsecurity/63666 2023-05-10 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1023 2023-05-10 13:00:06+00:00| seen| https://t.me/truesecator/4360...

pki-core: When using the caServerKeygen_DirUserCert profile, user can get certificates for other UIDs by entering name in Subject field

A flaw was found in pki-core, which could allow a user to get a certificate for another user identity when directory-based authentication is enabled. This flaw allows an authenticated attacker on the adjacent network to impersonate another user within the scope of the domain, but they would not b...

CERT-UA Warns of SmokeLoader and RoarBAT Malware Attacks Against Ukraine

An ongoing phishing campaign with invoice-themed lures is being used to distribute the SmokeLoader malware in the form of a polyglot file, according to the Computer Emergency Response Team of Ukraine CERT-UA. The emails, per the agency, are sent using compromised accounts and come with a ZIP...

CVE-2023-29942

creationtimestamp| type| source ---|---|--- 2023-05-05 18:25:17+00:00| seen| https://t.me/cibsecurity/63376 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

CVE-2023-29935

creationtimestamp| type| source ---|---|--- 2023-05-05 18:25:03+00:00| seen| https://t.me/cibsecurity/63366 2026-03-19 00:00:00+00:00| seen| https://www.cert.ssi.gouv.fr/avis/CERTFR-2026-AVI-0316/...

Siemens TIM 4R-IE Devices Concurrent Execution Using Shared Resource with Improper Synchronization (CVE-2016-4954)

The processpacket function in ntpproto.c in ntpd in NTP 4.x before 4.2.8p8 allows remote attackers to cause a denial of service peer- variable modification by sending spoofed packets from many source IP addresses in a certain scenario, as demonstrated by triggering an incorrect leap indication...

APT28 Targets Ukrainian Government Entities with Fake "Windows Update" Emails

The Computer Emergency Response Team of Ukraine CERT-UA has warned of cyber attacks perpetrated by Russian nation-state hackers targeting various government bodies in the country. The agency attributed the phishing campaign to APT28, which is also known by the names Fancy Bear, Forest Blizzard,...

ABB M2M ETHERNET Improper Authentication (CVE-2018-17926)

The product M2M ETHERNET FW Versions 2.22 and prior, ETH-FW Versions 1.01 and prior is vulnerable in that an attacker can upload a malicious language file by bypassing the user authentication mechanism. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-...

CVE-2023-28963

An Improper Authentication vulnerability in cert-mgmt.php, used by the J-Web component of Juniper Networks Junos OS allows an unauthenticated, network-based attacker to read arbitrary files from temporary folders on the device. This issue affects Juniper Networks Junos OS: All versions prior to...

CVE-2023-28963

Summary: CVE-2023-28963 is an Improper Authentication vulnerability in cert-mgmt.php of Juniper Networks Junos OS J-Web component. An unauthenticated, network-based attacker can read arbitrary files from temporary folders on affected devices. Affected software: Juniper Networks Junos OS running J...