Siemens APOGEE and TALON Improper Access Control (CVE-2022-45937)

A vulnerability has been identified in APOGEE PXC Series BACnet All versions V3.5.5, APOGEE PXC Series P2 Ethernet All versions V2.8.20, TALON TC Series BACnet All versions V3.5.5. A low privilege authenticated attacker with network access to the integrated web server could download sensitive...

Siemens SCALANCE Improper Neutralization of Script-Related HTML Tags in a Web Page (CVE-2022-36325)

Affected devices do not properly sanitize data introduced by an user when rendering the web interface. This could allow an authenticated remote attacker with administrative privileges to inject code and lead to a DOM-based XSS. This plugin only works with Tenable.ot. Please visit...

SOCOMEC MODULYS GP (UPDATE A)

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.7 ATTENTION : Exploitable remotely/low attack complexity Vendor : SOCOMEC Equipment : MODULYS GP Vulnerability : Weak Encoding for Password 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to obtain sensitive...

CISA Releases Two Industrial Control Systems Advisories

CISA released two Industrial Control Systems ICS advisories on January 24, 2023.These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

CISA Releases Protecting Our Future: Partnering to Safeguard K–12 organizations from Cybersecurity Threats

Today, CISA released Protecting Our Future: Partnering to Safeguard K–12 organizations from Cybersecurity Threats. The report provides recommendations and resources to help K-12 schools and school districts address systemic cybersecurity risk. It also provides insight into the current threat...

Apple Releases Security Updates for Multiple Products 

Apple has released security updates to address vulnerabilities in multiple products. An attacker could exploit some of these vulnerabilities to take control of an affected device. CISA encourages users and administrators to review the Apple security updates page for the following products and app...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added...

Drupal Releases Security Advisories to Address Multiple Vulnerabilities

Drupal has released security advisories to address vulnerabilities affecting multiple products. An attacker could exploit these vulnerabilities to access sensitive information. CISA encourages users and administrators to review Drupal’s security advisories SA-CORE-2023-001, SA-CONTRIB-2023-002,...

Cisco Releases Security Advisory for Unified CM and Unified CM SME

Cisco released a security advisory for a vulnerability affecting Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME. A remote attacker could exploit this vulnerability to cause a denial-of-service condition. For updat...

CISA Releases One Industrial Control Systems Advisory

CISA released one Industrial Control Systems ICS advisory on January 19, 2023. This advisory provides timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisory for technical...

CVE-2022-23521

creationtimestamp| type| source ---|---|--- 2023-01-18 16:10:08+00:00| seen| https://t.me/truesecator/3955 2023-01-19 12:11:10+00:00| seen| MISP/eab08996-dae5-4549-af05-7d51a85fe0cc 2023-01-19 15:21:31+00:00| published-proof-of-concept| https://t.me/crackcodes/2317 2023-01-22 13:04:27+00:00| seen...

CVE-2022-41903

creationtimestamp| type| source ---|---|--- 2023-01-18 16:10:08+00:00| seen| https://t.me/truesecator/3955 2023-01-19 12:11:09+00:00| seen| MISP/81745fb9-5708-474a-970d-c009efdc14a7 2023-01-19 14:59:30+00:00| seen| https://t.me/ctinow/87892 2023-01-19 15:21:31+00:00| published-proof-of-concept|...

CISA Warns of Flaws in Siemens, GE Digital, and Contec Industrial Control Systems

The U.S. Cybersecurity and Infrastructure Security Agency CISA has published four Industrial Control Systems ICS advisories, calling out several security flaws affecting products from Siemens, GE Digital, and Contec. The most critical of the issues have been identified in Siemens SINEC INS that...

Mozilla Releases Security Updates for Firefox

Mozilla has released security updates to address vulnerabilities in Firefox ESR and Firefox. An attacker could exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Mozilla’s security advisories for Firefox ESR 102.7 and...

CVE-2022-36760

creationtimestamp| type| source ---|---|--- 2023-01-17 22:15:38+00:00| seen| https://t.me/cibsecurity/56618 2023-08-10 14:41:21+00:00| seen| Telegram/shGNMT66IqVdbwvO1SBhU-IDsQ0ajpJW95KIYQIjVVJrhsN 2023-08-19 09:10:41+00:00| seen| Telegram/qBTHksr0ww0o7AKBF6a5kb8hdQTggsaX26q5tG4XQIqucEK 2023-11-1...

CVE-2022-37436

creationtimestamp| type| source ---|---|--- 2023-01-17 22:15:37+00:00| seen| https://t.me/cibsecurity/56617 2023-11-13 01:42:55+00:00| seen| https://t.me/arpsyndicate/139 2024-10-15 10:14:15+00:00| seen| Telegram/HfSunJuoYNfbsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ 2025-04-04 18:36:30+00:00| seen|...

CVE-2006-20001

creationtimestamp| type| source ---|---|--- 2023-01-17 22:15:29+00:00| seen| https://t.me/cibsecurity/56612 2024-10-15 10:14:15+00:00| seen| Telegram/HfSunJuoYNfbsQCJ20cuXyI7bzH8EMEXzusn30k3vpXeQ 2025-05-13 10:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-25-133-01...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on January 17, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added...

CISA Updates Best Practices for Mapping to MITRE ATT&CK®

Today, CISA updated Best Practices for MITRE ATT&CK® Mapping. The MITRE ATT&CK® framework is a lens through which network defenders can analyze adversary behavior and, as CISA Executive Assistant Director Eric Goldstein noted in his June 2021 blog post on the framework, it directly supports...