CVE-2023-37629

creationtimestamp| type| source ---|---|--- 2023-07-12 20:26:01+00:00| seen| https://t.me/cibsecurity/66585 2023-07-19 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51598 2023-09-04 18:05:47+00:00| published-proof-of-concept| https://t.me/codeb0ss/1114...

Update now! Microsoft patches a whopping 130 vulnerabilities

Its that time of the month again. For the July 2023 Patch Tuesday, Microsoft has issued security updates for 130 vulnerabilities. Nine of the vulnerabilities are rated as critical and four of them are known to be actively exploited. The Cybersecurity & Infrastructure Security Agency CISA has...

VulnCheck KEV: CVE-2023-38198

acme.sh before 3.0.6 runs arbitrary commands from a remote server via eval, as exploited in the wild in June 2023...

Microsoft Outlook 2016 Multiple Vulnerabilities (KB5002427)

This host is missing an critical security update according to Microsoft KB5002427 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Outlook 2013 Service Pack 1 Multiple Vulnerabilities (KB5002432)

This host is missing an critical security update according to Microsoft KB5002432 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Part 1: An In-Depth Look at the Latest Vulnerability Threat Landscape

The number of vulnerabilities is steadily increasing over the years, as evidenced by the 206,000 vulnerabilities reported and still counting in the National Vulnerability Database NVD. With each subsequent year, this trend has persisted since 2016, surpassing the previous vulnerability count. In...

Apple Addresses A Zero-Day Vulnerability Which Is Actively Exploited in Wild

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The zero-day vulnerability CVE-2023-37450 discovered in multiple Apple products is being actively exploited in the wild, specifically when processing web content. This vulnerability can potentially resul...

PT-2023-3476 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Microsoft Windows affected versions not specified Description: The issue is related to errors in security settings of the SmartScreen component, which is part of Windows operating systems. It allows a remote attacker to bypass security...

Apple Mac OS X Security Update (HT213825)

Apple Mac OS X Arbitrary Code Execution Vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-2796

creationtimestamp| type| source ---|---|--- 2023-07-10 20:24:00+00:00| seen| https://t.me/cibsecurity/66257 2023-08-06 12:37:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8800 2025-02-05 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities ...

Milesight UR32L urvpn_client http_connection_readcb Functional Buffer Overflow Vulnerability

The Milesight UR32L is a 4G industrial router from China's Milesight. A buffer overflow vulnerability exists in the Milesight UR32L urvpnclient httpconnectionreadcb function, which can be exploited by an attacker to cause a buffer overflow and execute arbitrary code on the system, or cause an...

Banner Management CMS 1.0 Database Disclosure

==================================================================================================================================== | Title : Banner Management CMS v1.0 Database Disclosure Exploit | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

IBM Db2 安全漏洞

IBM Db2 is a relational database management system from International Business Machines IBM. The system executes on UNIX, Linux, IBMi, z/OS, and Windows server versions. A security vulnerability exists in IBM Db2. An attacker has exploited the vulnerability to cause a denial of service on the...

CVE-2023-21250

creationtimestamp| type| source ---|---|--- 2023-07-07 12:20:04+00:00| exploited| https://t.me/truesecator/4590...

Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabilities have been identified as actively exploited in targeted attacks. One of the vulnerabilities tracked as CVE-2023-26083 is a memory leak...

Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabilities have been identified as actively exploited in targeted attacks. One of the vulnerabilities tracked as CVE-2023-26083 is a memory leak...

Unauthorized Access Vulnerability in ASIS Security Zero Trust Access Control System

ASIS Security Zero Trust Access Control System AISDP is a secure access management product based on zero-trust architecture, providing users with fast and secure network access access solutions. An unauthorized access vulnerability exists in the AISDP system, which can be exploited by attackers t...

Oracle Linux 9 : open-vm-tools (ELSA-2023-3948)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3948 advisory. 12.1.5-1.0.2 - CISA Major Incident CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module Tenable has extracted the preceding...

Critical RCE Vulnerability Puts 330,000 Fortinet Firewalls at Risk

By Deeba Ahmed The vulnerability has a CVSS score of 9.8 out of 10, is a critical security bug that affects Fortinet appliances and has been actively exploited in the wild. This is a post from HackRead.com Read the original post: Critical RCE Vulnerability Puts 330,000 Fortinet Firewalls at Risk...

CVE-2023-36934

creationtimestamp| type| source ---|---|--- 2023-07-05 20:22:02+00:00| seen| https://t.me/cibsecurity/65993 2023-07-07 17:11:34+00:00| seen| https://t.me/KomunitiSiber/461 2023-07-07 19:29:54+00:00| seen| Telegram/cJn4kSlWReVHFbLO0GOo5QA8X14TYxKIXr-klbY-UU9XA 2023-07-09 07:12:32+00:00| exploited|...