CVE-2023-45237

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

CVE-2023-45236

EDK2's Network Package is susceptible to a predictable TCP Initial Sequence Number. This vulnerability can be exploited by an attacker to gain unauthorized access and potentially lead to a loss of Confidentiality...

CVE-2023-22527

creationtimestamp| type| source ---|---|--- 2024-01-16 06:26:36+00:00| seen| https://t.me/ctinow/168641 2024-01-16 08:50:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/6432 2024-01-16 10:25:17+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus3/2024 2024-01-16...

CVE-2020-26876

creationtimestamp| type| source ---|---|--- 2024-01-16 04:21:25+00:00| exploited| https://t.me/arpsyndicate/2823 2026-06-19 12:53:12+00:00| exploited| https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/4107ceba-0bed-4035-aa9b-b9fe0c1f3d76 2026-06-23 14:04:05+00:00| exploited|...

Trend Micro Apex Central Arbitrary File Upload Vulnerability

Trend Micro Apex Central is a Web-based product console from Trend Micro. An arbitrary file upload vulnerability exists in Trend Micro Apex Central, which can be exploited by an attacker to create arbitrary files on an affected installation...

Windows Defender SmartScreen Vulnerability Exploited with Phemedrone Stealer

By Deeba Ahmed Attackers Leveraging Windows Vulnerability in Phemedrone Malware Campaign for Enhanced Stealth. This is a post from HackRead.com Read the original post: Windows Defender SmartScreen Vulnerability Exploited with Phemedrone Stealer...

Critical RCE Vulnerability Uncovered in Juniper SRX Firewalls and EX Switches

Juniper Networks has released updates to fix a critical remote code execution RCE vulnerability in its SRX Series firewalls and EX Series switches. The issue, tracked as CVE-2024-21591, is rated 9.8 on the CVSS scoring system. "An out-of-bounds write vulnerability in J-Web of Juniper Networks Jun...

Joomla! vulnerability is being actively exploited

The Cybersecurity and Infrastructure Security Agency CISA has added a vulnerability for the Joomla! Content Management System CMS to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. This means that Federal Civilian Executive Branch FCEB agencies need to...

CVE-2023-49254

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

Design/Logic Flaw

Authenticated user can execute arbitrary commands in the context of the root user by providing payload in the "destination" field of the network test tools. This is similar to the vulnerability CVE-2021-28151 mitigated on the user interface level by blacklisting characters with JavaScript, howeve...

Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02210)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.city.vlan parameter of the formGetIptv method failing to correctly validate the length and size of the input data, and can be exploite...

Microsoft Message Queuing Information Disclosure Vulnerability (CNVD-2024-04951)

Microsoft Message Queuing is the solution for implementing asynchronous and synchronous scenarios that require high performance. An information disclosure vulnerability exists in Microsoft Message Queuing, which can be exploited by an attacker to obtain sensitive information from heap memory...

Microsoft Message Queuing Denial of Service Vulnerability (CNVD-2024-04948)

Microsoft Message Queuing is the solution for implementing asynchronous and synchronous scenarios that require high performance. A denial of service vulnerability exists in Microsoft Message Queuing, which can be exploited by an attacker to cause a denial of service on a system...

Microsoft Visual Studio Elevation of Privilege Vulnerability (CNVD-2024-11163)

Microsoft Visual Studio is a family of development tool suites from Microsoft, and a largely complete development toolset that includes most of the tools needed throughout the software life cycle. An elevation of privilege vulnerability exists in Microsoft Visual Studio, which can be exploited by...

Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02214)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stbpvid parameter of the formSetIptv method failing to correctly validate the length of the input data, and can be exploited by an...

Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02213)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the adv.iptv.stballvlans parameter of the formSetIptv method failing to correctly validate the length of the input data, and can be exploited b...

Adobe Substance 3D Stager Out-of-Bounds Read Vulnerability (CNVD-2024-02725)

Adobe Substance 3D Stager is a virtual 3D studio from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Substance 3D Stager 2.1.3 and earlier versions, which can be exploited by attackers to obtain sensitive information...

Tenda AX1803 Buffer Overflow Vulnerability (CNVD-2024-02212)

Tenda AX1803 is a dual-band Gigabit WIFI6 router from Tenda China. A buffer overflow vulnerability exists in Tenda AX1803 v1.0.0.1, which originates from the iptv.stb.port parameter of the formGetIptv method failing to correctly validate the length and size of the input data, and can be exploited...

IBM CICS Transaction Gateway Access Control Error Vulnerability

IBM CICS Transaction Gateway is a connector for modernizing enterprise CICS assets from International Business Machines IBM. An access control error vulnerability exists in IBM CICS Transaction Gateway version 9.3, which can be exploited by an attacker to transfer or view files...

CVE-2024-21893

creationtimestamp| type| source ---|---|--- 2024-01-10 20:21:17+00:00| seen| https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus2/2024 2024-01-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1197 2024-01-11 11:25:20+00:00| seen|...