CVE-2023-0962

creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:10+00:00| seen| https://t.me/cibsecurity/58711 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51291...

CVE-2023-0961

creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:09+00:00| seen| https://t.me/cibsecurity/58710 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51290...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2023-68437)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 110, which stems from an invalid down conversion in GetTableSelectionMode, and can be exploited by attackers to cause undefined...

CVE-2023-23530

creationtimestamp| type| source ---|---|--- 2023-02-22 09:45:08+00:00| seen| https://t.me/GhostPrincess/10714 2023-02-22 13:30:07+00:00| exploited| https://t.me/truesecator/4102 2023-02-22 13:59:22+00:00| seen| https://t.me/thehackernews/3083 2023-02-25 06:30:00+00:00| seen|...

U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added three security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of shortcomings is as follows - CVE-2022-47986 CVSS score: 9.8 - IBM Aspera Faspex Code...

U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added three security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of shortcomings is as follows - CVE-2022-47986 CVSS score: 9.8 - IBM Aspera Faspex Code...

CVE-2023-20855

creationtimestamp| type| source ---|---|--- 2023-02-22 02:17:04+00:00| seen| https://t.me/cibsecurity/58655 2023-02-22 09:26:25+00:00| exploited| https://t.me/truesecator/4100...

CVE-2023-0943

creationtimestamp| type| source ---|---|--- 2023-02-21 22:16:49+00:00| seen| https://t.me/cibsecurity/58636 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51280...

K59591931: Drupal vulnerability CVE-2018-7602

Security Advisory Description A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to...

K18193959: Spring Framework vulnerability CVE-2018-1258

Security Advisory Description Spring Security in combination with Spring Framework versions prior to 5.0.6 contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CVE-2018-1258 Impact Traffix SD...

CVE-2023-0938

creationtimestamp| type| source ---|---|--- 2023-02-21 12:16:42+00:00| seen| https://t.me/cibsecurity/58570 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51288...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability CVE-2022-40765 Mitel MiVoice Connect...

CVE-2023-0915

creationtimestamp| type| source ---|---|--- 2023-02-19 12:14:49+00:00| seen| https://t.me/cibsecurity/58505 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51284...

CVE-2022-40347

creationtimestamp| type| source ---|---|--- 2023-02-17 16:13:09+00:00| seen| https://t.me/cibsecurity/58432 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51274...

CVE-2022-40032

creationtimestamp| type| source ---|---|--- 2023-02-17 16:13:08+00:00| seen| https://t.me/cibsecurity/58431 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51273...

CVE-2022-39952

creationtimestamp| type| source ---|---|--- 2023-02-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=974 2023-02-19 08:36:16+00:00| seen| Telegram/xsTtApY3O8LYaQlwSLnV7xep0iYsFMDc8zjy5nUPKpyG 2023-02-20 07:21:35+00:00| published-proof-of-concept| https://t.me/ctinow/9442...

BTCPay Server 跨站脚本漏洞

BTCPay Server is a self-hosted open source cryptocurrency payment processor. It is secure, private, uncensored and free. A cross-site scripting vulnerability exists in BTCPay Server versions prior to 1.7.12. An attacker exploited the vulnerability to perform a cross-site scripting attack...

Siemens Solid Edge Out-of-Bounds Reading Vulnerability (CNVD-2023-17664)

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. The software can be used for part design, assembly design, sheet metal design, welding design, etc. An out-of-bounds read vulnerability exists in Siemens Solid Edge, which can be exploited by attackers to cause sensitive...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added...

SUSE CVE-2009-0658

Buffer overflow in Adobe Reader 9.0 and earlier, and Acrobat 9.0 and earlier, allows remote attackers to execute arbitrary code via a crafted PDF document, related to a non-JavaScript function call and possibly an embedded JBIG2 image stream, as exploited in the wild in February 2009 by...