CVE-2023-28252 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-28266

Technical details (affected product/component, root cause, impact, fix) are not provided in the connected documents. Monitor for updates.

CVE-2023-28266 Windows Common Log File System Driver Information Disclosure Vulnerability

...

CVE-2023-23277

creationtimestamp| type| source ---|---|--- 2023-04-11 18:23:24+00:00| seen| https://t.me/cibsecurity/61871...

Nokoyawa ransomware attacks with Windows zero-day

Updated April 20, 2023 In February 2023, Kaspersky technologies detected a number of attempts to execute similar elevation-of-privilege exploits on Microsoft Windows servers belonging to small and medium-sized businesses in the Middle East, in North America, and previously in Asia regions. These...

Security Bulletin: The IBM® Engineering Lifecycle Engineering product using IBM Java - Eclipse OpenJ9 is vulnerable to CVE-2022-3676

Summary A flaw in Eclipse OpenJ9 leads to type confusion under certain circumstances, which can be exploited to access or modify memory. This may allow malicious untrusted code to elevate its privileges. Following IBM® Engineering Lifecycle Engineering product is vulnerable to this attack, it has...

Windows Common Log File System Driver Information Disclosure Vulnerability

...

Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2023-26067

creationtimestamp| type| source ---|---|--- 2023-04-11 00:22:46+00:00| seen| https://t.me/cibsecurity/61798 2023-09-19 08:50:09+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/lexmarkfaxtracesettings.rb 2024-01-26 17:05:27+00:00|...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...

CVE-2023-28252

Windows Common Log File System Driver Elevation of Privilege Vulnerability Recent assessments: ccondon-r7 at April 12, 2023 3:18pm UTC reported: This was discovered because of zero-day exploitation perpetrated by a skilled adversary — final payload was Nokoyawa ransomware in at least one case, as...

CVE-2023-1406

creationtimestamp| type| source ---|---|--- 2023-04-10 18:36:03+00:00| seen| https://t.me/cibsecurity/61761...

containers-common bug fix and enhancement update

An update is available for containers-common. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The containers-common package contains common configuration files a...

WALinuxAgent bug fix update

An update is available for WALinuxAgent. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The Windows Azure Linux Agent supports provisioning and running Linux...

389-ds:1.4 bug fix update

An update is available for 389-ds-base, module.389-ds-base. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list 389 Directory Server is an LDAP version 3 LDAPv3...

CVE-2023-1787

creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:54+00:00| seen| https://t.me/cibsecurity/61522...

CVE-2023-1708

creationtimestamp| type| source ---|---|--- 2023-04-06 00:26:44+00:00| seen| https://t.me/cibsecurity/61512...

CVE-2023-27488

creationtimestamp| type| source ---|---|--- 2023-04-04 22:25:49+00:00| seen| https://t.me/cibsecurity/61422...

CVE-2023-1671

creationtimestamp| type| source ---|---|--- 2023-04-04 14:36:57+00:00| seen| https://t.me/cibsecurity/61374 2023-04-05 15:15:02+00:00| seen| https://t.me/truesecator/4254 2023-04-24 04:35:31+00:00| published-proof-of-concept| https://t.me/CNArsenal/525 2023-04-25 09:47:32+00:00|...

Malicious Package

Overview prism-subapps-react-common is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if thi...