CVE-2023-42916

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been exploited against versio...

CVE-2023-42917

A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2, macOS Sonoma 14.1.2, Safari 17.1.2. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been exploited against...

Update now! Chrome fixes actively exploited zero-day vulnerability

Google has released an update to Chrome which includes seven security fixes including one for a vulnerability which is known to have already been exploited. If you’re a Chrome user on Windows, Mac, or Linux, you should update as soon as possible. The easiest way to update Chrome is to set it to...

CVE-2023-49104

creationtimestamp| type| source ---|---|--- 2023-11-29 11:34:38+00:00| exploited| https://t.me/truesecator/5139 2023-11-30 09:52:30+00:00| seen| https://t.me/arpsyndicate/814 2026-07-26 02:02:18+00:00| seen| https://t.me/EchelonEyes/2200 2026-07-27 00:00:55+00:00| seen|...

CVE-2023-49105

creationtimestamp| type| source ---|---|--- 2023-11-29 11:34:38+00:00| exploited| https://t.me/truesecator/5139 2023-12-05 08:46:19+00:00| seen| https://t.me/CNArsenal/1661 2023-12-05 10:22:03+00:00| published-proof-of-concept| https://t.me/darkcommunityofficial/149 2023-12-06 11:34:28+00:00| see...

WordPress Email Address Encoder Plugin <= 1.0.22 is vulnerable to Cross Site Scripting (XSS)

Software Email Address Encoder Type Plugin Vulnerable versions = 1.0.22 Fixed in 1.0.23 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-48765 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 4b554f8ca93c Credits LVT-tholv2k Required privilege...

Attacks, Vulnerabilities and Actors 20 November to 26 November 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs has recently made several significant discoveries related to cybersecurity threats. Over the past week, we identified a total of eight executed attacks, six instances of adversary activity, and one exploited...

Exploit for Improper Input Validation in Atlassian Confluence_Data_Center

CVE-2023-22515-Scan About This is simple scanner for CVE-...

CVE-2023-6021

creationtimestamp| type| source ---|---|--- 2023-11-25 12:14:52+00:00| published-proof-of-concept| Telegram/B3MfWlGpx-qQr-PJTpFgE5RGDaIYA5WKuQnODf6UIO8APlw 2024-03-27 17:30:05+00:00| exploited| https://t.me/truesecator/5575 2024-11-17 03:14:18+00:00| published-proof-of-concept|...

WordPress Awesome Support Plugin <= 6.1.4 is vulnerable to Cross Site Request Forgery (CSRF)

Software Awesome Support Type Plugin Vulnerable versions = 6.1.4 Fixed in 6.1.5 OWASP Top 10 A2: Broken Authentication Classification Cross Site Request Forgery CSRF CVE CVE-2023-48323 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID afdaccd9618c Credits thiennv Required...

CVE-2023-49103

creationtimestamp| type| source ---|---|--- 2023-11-22 17:10:53+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5912 2023-11-23 07:46:50+00:00| published-proof-of-concept| https://t.me/proxybar/1841 2023-11-23 09:27:42+00:00| seen|...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-4911 GNU C Library Buffer Overflow Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks...

Adobe After Effects Out-of-Bounds Read Vulnerability (CNVD-2023-91792)

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An out-of-bounds read vulnerability exists in Adobe After Effects versions...

Adobe After Effects Uninitialized Pointer Access Vulnerability

Adobe After Effects is a set of visual effects and motion graphics production software from the American company Audobee Adobe. The software is mainly used for 2D and 3D synthesis, animation and visual effects production. An uninitialized pointer access vulnerability exists in Adobe After Effects...

Adobe RoboHelp Server Information Disclosure Vulnerability

Adobe RoboHelp Server is a server-based application for FrameMaker and RoboHelp enterprise users. An information disclosure vulnerability exists in Adobe RoboHelp Server, which can be exploited by an attacker to obtain sensitive information...

Adobe Animate Out-of-Bounds Read Vulnerability (CNVD-2023-91795)

Adobe Animate is a set of Flash animation software from the American company Audobee Adobe. An out-of-bounds read vulnerability exists in Adobe Animate 23.0.2 and earlier versions, which can be exploited by attackers to obtain sensitive information...

Adobe Media Encoder Out-of-Bounds Read Vulnerability (CNVD-2023-100306)

Adobe Media Encoder is an audio and video encoding application from the American company Audobee Adobe. Adobe Media Encoder suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute arbitrary code on a system...

Adobe Audition Out-of-Bounds Read Vulnerability (CNVD-2023-88659)

Adobe Audition is a set of multi-track editing tools from the American company Audobee Adobe. The product is mainly used to include multi-track, waveforms and spectral display of the perfect toolset for audio content mixing, editing and creation. An out-of-bounds read vulnerability exists in Adob...

Adobe Premiere Pro Out-of-Bounds Read Vulnerability (CNVD-2023-95448)

Adobe Premiere Pro is a set of non-linear editing video editing software from the American company Audobee Adobe. Adobe Premiere Pro suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context of the current user...

CVE-2019-15642

creationtimestamp| type| source ---|---|--- 2023-11-17 05:26:25+00:00| seen| https://t.me/arpsyndicate/209 2024-12-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-25 2025-01-14 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabiliti...