PT-2023-19381 · Rockstar Games · Grand Theft Auto V

Name of the Vulnerable Software and Affected Versions: Grand Theft Auto V for PC affected versions not specified Description: The issue allows attackers to achieve partial remote code execution or modify files on a PC. It has been exploited in the wild in January 2023. The vulnerability can be us...

VulnCheck KEV: CVE-2023-24059

Grand Theft Auto V for PC allows attackers to achieve partial remote code execution or modify files on a PC, as exploited in the wild in January 2023...

CSRF leading to remove Administrators users

Description remove function is vulnerable to CSRF lead to remove any Administrators users GET /admin/permissions/remove/?domid=2&daid=15 Proof of Concept 1/ visit /admin/domains/1/ 2/ delete button to remove permission is vulnerable to CSRF...

Unhandled Revert in _performERC721Transfer Function Resulting in Loss of Tokens

Lines of code Vulnerability details Impact The performERC1155BatchTransfers function could lead to a loss of tokens if the safeBatchTransferFrom function reverts and the code does not properly handle the revert. This can be exploited by an attacker who can call the performERC1155BatchTransfers...

SUSE SLES12: MozillaFirefox / MozillaFirefox-devel / etc (SUSE-SU-2023:0111-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:0111-1 advisory. - Updated to version 102.7.0 ESR bsc1207119: - CVE-2022-46871: Updated an out of date library libusrsctp which contained several...

ManageEngine Vulnerability CVE-2022-47966

Recently, Zoho ManageEngine released a security advisory for CVE-2022-47966, which allows for pre-authentication remote code execution in at least 24 ManageEngine products, including ADSelfService Plus and ServiceDesk Plus. This vulnerability stems from the products’ use of an outdated Apache...

CVE-2023-23605

Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 108 and Firefox ESR 102.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerabilit...

Oracle Business Intelligence Enterprise Edition has an unspecified vulnerability (CNVD-2023-05499)

Oracle Business Intelligence Enterprise Edition is an intelligent business analytics software from Oracle Corporation USA. Oracle Business Intelligence Enterprise Edition is a security vulnerability that can be exploited by a low-privilege attacker to compromise Oracle Business Intelligence...

CVE-2022-44877, critical RCE in CentOS Control Web Panel exploited in the wild: everything you need to know

Detect and mitigate CVE-2022-44877, a CentOS Control Web Panel CWP unauthenticated RCE exploited in the wild. Security teams are advised to patch urgently...

CVE-2023-22278

creationtimestamp| type| source ---|---|--- 2023-01-17 12:25:00+00:00| exploited| https://t.me/cibsecurity/56573 2025-04-04 19:37:03+00:00| exploited| https://t.me/DarkWebInformerCVEAlerts/10545...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This type of vulnerability is a frequent attack vector for malicious cyber actors and poses a significant risk to the federal enterprise. Note: To view the newly added...

libXpm 安全漏洞

libXpm is an image file format library from lib open source. A security vulnerability exists in libXpm. An attacker exploited the vulnerability to cause an application denial of service...

FiND 安全漏洞

FiND is an application by the German individual developer AenBleidd. A security vulnerability exists in FiND. An attacker exploited the vulnerability to cause a buffer overflow...

Security Vulnerabilities fixed in Firefox ESR 102.7 — Mozilla

An out of date library libusrsctp contained vulnerabilities that could potentially be exploited. Due to the Firefox GTK wrapper code's use of text/plain for drag data and GTK treating all text/plain MIMEs containing file URLs as being dragged a website could arbitrarily read a file via a call to...

libXpm 安全漏洞

libXpm is an image file format library from lib open source. A security vulnerability exists in libXpm. An attacker exploited the vulnerability to cause an application denial of service...

A week in security (January 9—15)

Last week on Malwarebytes Labs: Slack private code on GitHub stolen Crypto-inspired Magecart skimmer surfaces via digital crime haven Security vulnerabilities in major car brands revealed Microsoft ends extended support for Windows 7 and Windows Server 2008 today Pokemon NFT card game malware...

Abusing a GitHub Codespaces Feature For Malware Delivery

Proof of Concept POC: We investigate one of the GitHub Codespaces’ real-time code development and collaboration features that attackers can abuse for cloud-based trusted malware delivery. Once exploited, malicious actors can abuse legitimate GitHub accounts to create a malware file server...

CVE-2023-23488

creationtimestamp| type| source ---|---|--- 2023-01-15 09:28:44+00:00| seen| https://t.me/DailyToolz/582 2023-01-16 17:30:07+00:00| seen| https://t.me/truesecator/3945 2023-01-19 15:57:30+00:00| seen|...

Adobe InCopy Buffer Overflow Vulnerability (CNVD-2023-05227)

Adobe InCopy is a text editing software for authoring from Adobe. Adobe InCopy is vulnerable to a buffer overflow vulnerability that could be exploited by attackers to execute arbitrary code in the context of the current user...

Lead Management System SQL Injection Vulnerability (CNVD-2023-05741)

Lead management system is a lead management system developed by Mayuri K. A SQL injection vulnerability exists in Lead Management System v1.0, which stems from the lack of validation of external input SQL statements in the id parameter of removeBrand.php, and can be exploited by attackers to The...