Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2023-76763)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

CVE-2019-13068

creationtimestamp| type| source ---|---|--- 2023-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51073...

CVE-2022-39291

creationtimestamp| type| source ---|---|--- 2023-03-27 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51071...

Tenda G103 Command Injection Vulnerability

Tenda G103 is an enterprise-grade Ap router from Tenda China. The Tenda G103 suffers from a command injection vulnerability that can be exploited by an attacker to obtain sensitive information via a crafted packet...

Rockwell Automation ThinManager ThinServer Buffer Overflow Vulnerability

Rockwell Automation ThinManager ThinServer is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers at the same time. A buffer overflow vulnerability exists in Rockwell Automation ThinManager ThinServer, which...

CVE-2022-26521

creationtimestamp| type| source ---|---|--- 2023-03-25 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51058...

XSS to RCE found in Trilium

Vulnerability Type Remote Code Execution RCE Authentication Required? No Affected Location - Search Notes Search Ancestor Output - Jump to Note Search Note Output - New Tab Search Notes Output Issue Summary The application contains a vulnerability where HTML characters within the title name of...

CVE-2023-28445

Deno is a runtime for JavaScript and TypeScript that uses V8 and is built in Rust. Resizable ArrayBuffers passed to asynchronous functions that are shrunk during the asynchronous operation could result in an out-of-bound read/write. It is unlikely that this has been exploited in the wild, as the...

CVE-2023-28432

creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:12+00:00| seen| https://t.me/cibsecurity/60525 2023-03-23 15:55:52+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4018 2023-03-23 16:34:19+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4019 2023-03-24...

CVE-2023-27637

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised productid GET parameter in order to exploit an insecure parameter in the front controller file designer.php, which could lead to a SQL...

Code injection

General Bytes Crypto Application Server CAS 20230120, as distributed with General Bytes BATM devices, allows remote attackers to execute arbitrary Java code by uploading a Java application to the /batm/app/admin/standalone/deployments directory, aka BATM-4780, as exploited in the wild in March...

CVE-2023-27638

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with a compromised tshirtecommercedesigncartid GET parameter in order to exploit an insecure parameter in the functions hookActionCartSave and...

CVE-2023-1545

creationtimestamp| type| source ---|---|--- 2023-03-21 13:34:49+00:00| seen| https://t.me/cibsecurity/60358 2025-02-23 04:00:07+00:00| published-proof-of-concept| Telegram/bVKl2rVR16OP4Ec2skHtd8ZoJjQCFrtWn4vAPJbiN3wMc 2025-02-24 22:00:05+00:00| published-proof-of-concept|...

From Ransomware to Cyber Espionage: 55 Zero-Day Vulnerabilities Weaponized in 2022

As many as 55 zero-day vulnerabilities were exploited in the wild in 2022, with most of the flaws discovered in software from Microsoft, Google, and Apple. While this figure represents a decrease from the year before, when a staggering 81 zero-days were weaponized, it still represents a significa...

Moodle 跨站脚本漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle. An attacker exploited the vulnerability to perform a cross-site scripting attack...

Moodle 跨站请求伪造漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle. An attacker exploited the vulnerability to perform a cross-site request forgery attack...

Moodle 跨站脚本漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. A security vulnerability exists in Moodle. An attacker exploited the vulnerability to perform a cross-site scripting attack...

CVE-2023-27326

creationtimestamp| type| source ---|---|--- 2023-03-20 18:20:51+00:00| seen| Telegram/1EJWyoHSyilfkqZWLU4GfdO5lUWefMlV9JG3pFlAJki-jhY 2023-03-21 09:33:30+00:00| published-proof-of-concept| https://t.me/dilagrafie/2616 2023-03-21 11:01:01+00:00| published-proof-of-concept|...

Rubrik is latest victim of the Clop ransomware zero-day campaign

Rubrik, a cybersecurity company specializing in cloud data management, has revealed that some of its systems were infiltrated by the Clop ransomware group. Rubrik is one of many companies attacked by Clop via an infamous zero-day vulnerability in the GoAnywhere file transfer software. The attack...

CVE-2023-1454

creationtimestamp| type| source ---|---|--- 2023-03-17 11:36:42+00:00| seen| https://t.me/cibsecurity/60236 2023-03-24 03:10:54+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4024 2023-04-13 07:21:20+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4168 2023-04-13...