File Upload Vulnerability in Rainbond

Rainbond is a cloud-native application management platform. Rainbond suffers from a file upload vulnerability that can be exploited by an attacker to gain server privileges...

D-Link Multiple DIR Devices RCE Vulnerability (Sep 2019)

Multiple D-Link DIR devices are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

D-Link Multiple DIR Devices RCE Vulnerability (Feb 2022)

Multiple D-Link DIR devices are prone to a remote command execution RCE vulnerability. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2023-0962

creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:10+00:00| seen| https://t.me/cibsecurity/58711 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51291...

CVE-2023-0961

creationtimestamp| type| source ---|---|--- 2023-02-23 00:52:09+00:00| seen| https://t.me/cibsecurity/58710 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51290...

Unspecified Vulnerability in Mozilla Firefox (CNVD-2023-68437)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in Mozilla Firefox prior to version 110, which stems from an invalid down conversion in GetTableSelectionMode, and can be exploited by attackers to cause undefined...

CVE-2023-23530

creationtimestamp| type| source ---|---|--- 2023-02-22 09:45:08+00:00| seen| https://t.me/GhostPrincess/10714 2023-02-22 13:30:07+00:00| exploited| https://t.me/truesecator/4102 2023-02-22 13:59:22+00:00| seen| https://t.me/thehackernews/3083 2023-02-25 06:30:00+00:00| seen|...

U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added three security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of shortcomings is as follows - CVE-2022-47986 CVSS score: 9.8 - IBM Aspera Faspex Code...

U.S. Cybersecurity Agency CISA Adds Three New Vulnerabilities in KEV Catalog

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday added three security flaws to its Known Exploited Vulnerabilities KEV catalog, based on evidence of active exploitation. The list of shortcomings is as follows - CVE-2022-47986 CVSS score: 9.8 - IBM Aspera Faspex Code...

CVE-2023-20855

creationtimestamp| type| source ---|---|--- 2023-02-22 02:17:04+00:00| seen| https://t.me/cibsecurity/58655 2023-02-22 09:26:25+00:00| exploited| https://t.me/truesecator/4100...

CVE-2023-0943

creationtimestamp| type| source ---|---|--- 2023-02-21 22:16:49+00:00| seen| https://t.me/cibsecurity/58636 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51280...

K59591931: Drupal vulnerability CVE-2018-7602

Security Advisory Description A remote code execution vulnerability exists within multiple subsystems of Drupal 7.x and 8.x. This potentially allows attackers to exploit multiple attack vectors on a Drupal site, which could result in the site being compromised. This vulnerability is related to...

K18193959: Spring Framework vulnerability CVE-2018-1258

Security Advisory Description Spring Security in combination with Spring Framework versions prior to 5.0.6 contains an authorization bypass when using method security. An unauthorized malicious user can gain unauthorized access to methods that should be restricted. CVE-2018-1258 Impact Traffix SD...

CVE-2023-0938

creationtimestamp| type| source ---|---|--- 2023-02-21 12:16:42+00:00| seen| https://t.me/cibsecurity/58570 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51288...

CISA Adds Three Known Exploited Vulnerabilities to Catalog

CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-47986 IBM Aspera Faspex Code Execution Vulnerability CVE-2022-41223 Mitel MiVoice Connect Code Injection Vulnerability CVE-2022-40765 Mitel MiVoice Connect...

CVE-2023-0915

creationtimestamp| type| source ---|---|--- 2023-02-19 12:14:49+00:00| seen| https://t.me/cibsecurity/58505 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51284...

CVE-2022-40347

creationtimestamp| type| source ---|---|--- 2023-02-17 16:13:09+00:00| seen| https://t.me/cibsecurity/58432 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51274...

CVE-2022-40032

creationtimestamp| type| source ---|---|--- 2023-02-17 16:13:08+00:00| seen| https://t.me/cibsecurity/58431 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51273...

CVE-2022-39952

creationtimestamp| type| source ---|---|--- 2023-02-17 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=974 2023-02-19 08:36:16+00:00| seen| Telegram/xsTtApY3O8LYaQlwSLnV7xep0iYsFMDc8zjy5nUPKpyG 2023-02-20 07:21:35+00:00| published-proof-of-concept| https://t.me/ctinow/9442...

Siemens Solid Edge Out-of-Bounds Reading Vulnerability (CNVD-2023-17664)

Siemens Solid Edge is a 3D CAD software from Siemens, a German company. The software can be used for part design, assembly design, sheet metal design, welding design, etc. An out-of-bounds read vulnerability exists in Siemens Solid Edge, which can be exploited by attackers to cause sensitive...