Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites...

Over 1 Million WordPress Sites Infected by Balada Injector Malware Campaign

Over one million WordPress websites are estimated to have been infected by an ongoing campaign to deploy malware called Balada Injector since 2017. The massive campaign, per GoDaddy's Sucuri, "leverages all known and recently discovered theme and plugin vulnerabilities" to breach WordPress sites...

CISA Warns of 5 Actively Exploited Security Flaws: Urgent Action Required

The U.S. Cybersecurity and Infrastructure Security Agency CISA on Friday added five security flaws to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation in the wild. This includes three high-severity flaws in the Veritas Backup Exec Agent software...

CVE-2023-28205

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2023-28206

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. App...

CVE-2023-28205

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

CVE-2023-28206

An out-of-bounds write issue was addressed with improved input validation. This issue is fixed in macOS Monterey 12.6.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1, iOS 15.7.5 and iPadOS 15.7.5, macOS Big Sur 11.7.6. An app may be able to execute arbitrary code with kernel privileges. App...

CVE-2023-28205

A use after free issue was addressed with improved memory management. This issue is fixed in Safari 16.4.1, iOS 15.7.5 and iPadOS 15.7.5, iOS 16.4.1 and iPadOS 16.4.1, macOS Ventura 13.3.1. Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report...

Apple Releases Updates to Address Zero-Day Flaws in iOS, iPadOS, macOS, and Safari

Apple on Friday released security updates for iOS, iPadOS, macOS, and Safari web browser to address a pair of zero-day flaws that are being exploited in the wild. The two vulnerabilities are as follows - CVE-2023-28205 - A use after free issue in WebKit that could lead to arbitrary code execution...

About the security content of Safari 16.4.1

About the security content of Safari 16.4.1 This document describes the security content of Safari 16.4.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

macOS 13.x < 13.3.1 Multiple Vulnerabilities (HT213721)

The remote host is running a version of macOS / Mac OS X that is 13.x prior to 13.3.1. It is, therefore, affected by multiple vulnerabilities: - An app may be able to execute arbitrary code with kernel privileges. Apple is aware of a report that this issue may have been actively exploited...

CVE-2023-0580

Insecure Storage of Sensitive Information vulnerability in ABB My Control System on-premise allows an attacker who successfully exploited this vulnerability to gain access to the secure application data or take control of the application. Of the services that make up the My Control System...

CVE-2023-0912

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51282...

CVE-2023-0905

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51285...

CVE-2023-23156

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51272...

CVE-2023-0902

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51287 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51292...

CVE-2023-0904

creationtimestamp| type| source ---|---|--- 2023-04-06 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51286...

CVE-2023-20073

creationtimestamp| type| source ---|---|--- 2023-04-05 20:26:37+00:00| seen| https://t.me/cibsecurity/61484 2023-08-19 14:06:35+00:00| published-proof-of-concept| https://t.me/proxybar/1687 2023-08-20 02:49:35+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4948 2023-08-20...

Update Android now! Google patches three important vulnerabilities

In the April 2023 Android security bulletin, Google announced security updates which include fixes for two critical remote code execution RCE vulnerabilities and one vulnerability that has been exploited in the wild. The vulnerabilities are impacting Android systems running versions 11, 12, 12L,...

CVE-2023-0493

creationtimestamp| type| source ---|---|--- 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51254 2023-12-11 00:57:29+00:00| seen| https://t.me/arpsyndicate/1683 2025-03-31 17:31:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9712...