Update now! Ruckus vulnerability added to CISA’s list of actively exploited bugs

Along with six older vulnerabilities, the Cybersecurity and Infrastructure Agency CISA has added a vulnerability in multiple Ruckus wireless products to the Known Exploited Vulnerabilities Catalog. This means that Federal Civilian Executive Branch FCEB agencies need to remediate these...

CVE-2023-1698

creationtimestamp| type| source ---|---|--- 2023-05-15 12:29:25+00:00| seen| https://t.me/cibsecurity/64081 2023-08-21 10:50:46+00:00| published-proof-of-concept| https://t.me/CNArsenal/903 2023-09-10 01:34:36+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/5109 2023-09-10...

Rockwell Automation FactoryTalk Vantagepoint Cross-Site Request Forgery Vulnerability

Rockwell Automation FactoryTalk Vantagepoint is Rockwell Automation's platform for organizing, correlating, and normalizing disparate data from manufacturing and production processes and business systems in the Unified Production Model UPM. A cross-site request forgery vulnerability exists in...

Rockwell Automation Arena Simulation Software Buffer Overflow Vulnerability (CNVD-2023-49823)

Rockwell Automation Arena Simulation Software is a suite of simulation software from Rockwell Automation that provides 3D animation and graphics capabilities. A buffer overflow vulnerability exists in Rockwell Automation Arena Simulation Software, which can be exploited by an attacker to execute...

SAP BusinessObjects Platform Cross-Site Scripting Vulnerability

SAP BusinessObjects Platform is a centralized suite for data reporting, visualization, and sharing from SAP, Germany. A cross-site scripting vulnerability exists in SAP BusinessObjects Platform, which can be exploited by remote attackers to inject malicious script or HTML code that can be used to...

Rockwell Automation ArmorStart ST Cross-Site Scripting Vulnerability (CNVD-2023-44295)

Rockwell Automation ArmorStart ST is a simple and cost-effective solution for machine-side control architectures from Rockwell Automation. A cross-site scripting vulnerability exists in Rockwell Automation ArmorStart ST, which can be exploited by an attacker to view user data and modify the web...

WordPress reCAPTCHA for all Plugin <= 1.22 is vulnerable to Broken Access Control

Software reCAPTCHA for all Type Plugin Vulnerable versions = 1.22 Fixed in 1.23 OWASP Top 10 A5: Broken Access Control Classification Broken Access Control CVE CVE-2023-32599 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID 97d938ca1868 Credits Jonas Höbenreich Required...

Debian dla-3419 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3419 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3419-1 [email protected]...

CVE-2023-2648

creationtimestamp| type| source ---|---|--- 2023-05-11 12:15:09+00:00| seen| https://t.me/cibsecurity/63862 2024-12-21 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-21 2024-12-27 00:00:00+00:00| exploited| The Shadowserver...

Microsoft’s May 2023 update addresses two Zero-Day Vulnerabilities

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Microsoft released a security update in May 2023 to address 40 CVEs, including two zero-day vulnerabilities that have already been exploited in the wild. To receive real-time threat advisories,...

Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero-Day Bugs

Microsoft has rolled out Patch Tuesday updates for May 2023 to address 38 security flaws, including two zero-day bugs that it said are being actively exploited in the wild. Trend Micro's Zero Day Initiative ZDI said the volume is the lowest since August 2021, although it pointed out that "this...

Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited Zero-Day Bugs

Microsoft has rolled out Patch Tuesday updates for May 2023 to address 38 security flaws, including two zero-day bugs that it said are being actively exploited in the wild. Trend Micro's Zero Day Initiative ZDI said the volume is the lowest since August 2021, although it pointed out that "this...

Intel NUC 安全漏洞

Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC. An attacker has exploited this vulnerability to cause an information disclosure...

Security Updates for Microsoft SharePoint Server 2019 (May 2023)

The Microsoft SharePoint Server 2019 installation on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities: - A Sharepoint Server spoofing vulnerability. CVE-2023-24950 - A Sharepoint Server information disclosure vulnerability. CVE-2023-24950 - A...

Intel Processors 安全漏洞

Intel Processors are American Intel Corporation's offerings to interpret computer instructions and process data in computer software. A security vulnerability exists in Intel Processors. Attackers have exploited the vulnerability to cause information leakage...

CVE-2023-28283

creationtimestamp| type| source ---|---|--- 2023-05-09 22:44:50+00:00| seen| https://t.me/cibsecurity/63675 2023-05-10 09:55:33+00:00| exploited| https://t.me/kasperskyb2b/610...

CISA Adds One Known Exploited Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-29336 Microsoft Win32k contains an unspecified vulnerability that allows for privilege escalation up to SYSTEM privileges. These types of vulnerabilities are...

Actors, Threats and Vulnerabilities 01 to 07 May 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of eight attacks executed, taking advantage of different vulnerabilities in various...

NETGEAR SRX5308 Cross-Site Scripting Vulnerability (CNVD-2023-43019)

The NETGEAR SRX5308 is a VPN firewall appliance from NETGEAR. The NETGEAR SRX5308 suffers from a cross-site scripting vulnerability that originates from an incorrect operation of the parameter smtpServer.fromAddr. The vulnerability can be exploited by an attacker to obtain sensitive information...

ASUS RT-AC51U Cross-Site Scripting Vulnerability

The ASUS RT-AC51U is a wireless router from the Chinese company ASUS. A cross-site scripting vulnerability exists in ASUS RT-AC51U 3.0.0.4.380.8591 and earlier versions, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an...