CVE-2023-21250

creationtimestamp| type| source ---|---|--- 2023-07-07 12:20:04+00:00| exploited| https://t.me/truesecator/4590...

Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabilities have been identified as actively exploited in targeted attacks. One of the vulnerabilities tracked as CVE-2023-26083 is a memory leak...

Google Releases Android Patch Update for 3 Actively Exploited Vulnerabilities

Google has released its monthly security updates for the Android operating system, addressing 46 new software vulnerabilities. Among these, three vulnerabilities have been identified as actively exploited in targeted attacks. One of the vulnerabilities tracked as CVE-2023-26083 is a memory leak...

Unauthorized Access Vulnerability in ASIS Security Zero Trust Access Control System

ASIS Security Zero Trust Access Control System AISDP is a secure access management product based on zero-trust architecture, providing users with fast and secure network access access solutions. An unauthorized access vulnerability exists in the AISDP system, which can be exploited by attackers t...

Oracle Linux 9 : open-vm-tools (ELSA-2023-3948)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-3948 advisory. 12.1.5-1.0.2 - CISA Major Incident CVE-2023-20867 open-vm-tools: authentication bypass vulnerability in the vgauth module Tenable has extracted the preceding...

Critical RCE Vulnerability Puts 330,000 Fortinet Firewalls at Risk

By Deeba Ahmed The vulnerability has a CVSS score of 9.8 out of 10, is a critical security bug that affects Fortinet appliances and has been actively exploited in the wild. This is a post from HackRead.com Read the original post: Critical RCE Vulnerability Puts 330,000 Fortinet Firewalls at Risk...

CVE-2023-36934

creationtimestamp| type| source ---|---|--- 2023-07-05 20:22:02+00:00| seen| https://t.me/cibsecurity/65993 2023-07-07 17:11:34+00:00| seen| https://t.me/KomunitiSiber/461 2023-07-07 19:29:54+00:00| seen| Telegram/cJn4kSlWReVHFbLO0GOo5QA8X14TYxKIXr-klbY-UU9XA 2023-07-09 07:12:32+00:00| exploited|...

CVE-2023-35829

creationtimestamp| type| source ---|---|--- 2023-07-03 13:25:05+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4673 2023-07-03 13:37:17+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4674 2023-07-04 17:21:31+00:00| published-proof-of-concept|...

CISA Flags 8 Actively Exploited Flaws in Samsung and D-Link Devices

The U.S. Cybersecurity and Infrastructure Security Agency CISA has placed a set of eight flaws to the Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. This includes six shortcomings affecting Samsung smartphones and two vulnerabilities impacting D-Link device...

MITRE Unveils Top 25 Most Dangerous Software Weaknesses of 2023: Are You at Risk?

MITRE has released its annual list of the Top 25 "most dangerous software weaknesses" for the year 2023. "These weaknesses lead to serious vulnerabilities in software," the U.S. Cybersecurity and Infrastructure Security Agency CISA said. "An attacker can often exploit these vulnerabilities to tak...

Cisco Duo Authentication Error Vulnerability

Cisco Duo is a fully managed solution from Cisco, Inc. Provides secure access to your applications and data. An authentication error vulnerability exists in Cisco Duo Two-Factor Authentication, which arises from incorrectly handling responses from Cisco Duo when the application is configured to...

PSA: Unpatched Critical Privilege Escalation Vulnerability in Ultimate Member Plugin Being Actively Exploited

Today, on June 29, 2023, the Wordfence Threat Intelligence Team became aware of an unpatched privilege escalation vulnerability being actively exploited in Ultimate Member, a WordPress plugin installed on over 200,000 sites, through our vulnerability changelog monitoring we do to ensure the...

2023 CWE Top 25 Most Dangerous Software Weaknesses

The Homeland Security Systems Engineering and Development Institute, sponsored by the Department of Homeland Security and operated by MITRE, has released the 2023 Common Weakness Enumeration CWE Top 25 Most Dangerous Software Weaknesseslink is external. The CWE Top 25 is calculated by analyzing...

CVE-2023-3390

creationtimestamp| type| source ---|---|--- 2023-06-29 00:13:14+00:00| seen| https://t.me/cibsecurity/65681 2023-07-27 16:50:08+00:00| published-proof-of-concept| https://t.me/crackcodes/3952 2023-07-27 16:50:53+00:00| published-proof-of-concept|...

Ultimate Member < 2.6.7 - Unauthenticated Privilege Escalation

The plugin does not prevent visitors from creating user accounts with arbitrary capabilities, effectively allowing attackers to create administrator accounts at will. This is actively being exploited in the wild. PoC POST /register/ HTTP/1.1 Host: wpscan-vulnerability-test-bench.ddev.site...

Attacks, Vulnerabilities and Actors 19 June to 25 June 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of twelve attacks executed, taking advantage of seventeen different vulnerabilities ...

Apple Safari Security Update (HT213816)

Apple Safari is prone to type confusion vulnerability SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:safari"; ifdescriptio...

Rocky Linux 8 : webkit2gtk3 (RLSA-2023:3433)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3433 advisory. - An out-of-bounds read was addressed with improved input validation. This issue is fixed in watchOS 9.5, iOS 15.7.6 and iPadOS 15.7.6, macOS Ventura...

INEX IXP-Manager 跨站脚本漏洞

INEX IXP-Manager is an INEX open source web application. A security vulnerability exists in INEX IXP-Manager versions prior to 6.3.1. An attacker exploited the vulnerability to perform cross-site scripting attacks...

U.S. Cybersecurity Agency Adds 6 Flaws to Known Exploited Vulnerabilities Catalog

The U.S. Cybersecurity and Infrastructure Security Agency has added a batch of six flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. This comprises three vulnerabilities that Apple patched this week CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439...