Launching Qualys Cloud Threat Database

We are proud to announce the release of the Qualys Cloud Threat Database which correlates more than 25 different threat intelligence feeds into a single source for all Qualys products to leverage. This comprehensive vulnerability and threat intelligence database pulls from trusted sources such as...

CVE-2023-0744

creationtimestamp| type| source ---|---|--- 2023-02-08 12:24:59+00:00| seen| https://t.me/cibsecurity/57758 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51257...

Actors, Threats and Vulnerabilities 30 January to 5 February 2023

For a detailed threat digest, download the pdf file here Summary For a detailed threat digest, download the pdf file here Hive Pro discovered four actors that have been active in the past week. The first, Sandworm Team, is a well-known Russian threat actor known for Sabotage and destruction. The...

Online Food Ordering System index.php Cross-Site Scripting Vulnerability

Online Food Ordering System is an online food ordering system. A cross-site scripting vulnerability exists in Online Food Ordering System, which is caused by a lack of effective filtering and escaping of user-supplied data in the page parameter of index.php page, which can be exploited by attacke...

CVE-2022-21587: Rapid7 Observed Exploitation of Oracle E-Business Suite Vulnerability

Emergent threats evolve quickly, and as we learn more about this vulnerability, this blog post will evolve, too. Rapid7 is responding to various compromises arising from the exploitation of CVE-2022-21587, a critical arbitrary file upload vulnerability rated 9.8 on the CVSS v3 risk metric impacti...

CVE-2023-23333

creationtimestamp| type| source ---|---|--- 2023-02-07 00:23:30+00:00| seen| https://t.me/cibsecurity/57622 2023-02-07 11:01:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7706 2023-02-09 14:48:00+00:00| published-proof-of-concept| https://t.me/malwar3s/28 2023-02-19...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2023-76764)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. Microsoft Edge suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges on the system...

D-Link DIR-846 Command Execution Vulnerability (CNVD-2023-27681)

The D-Link DIR-846 is a wireless router from D-Link, a Chinese company. The D-Link DIR-846 is vulnerable to a command execution vulnerability that could be exploited by attackers to execute arbitrary commands on the system...

WordPress Email Subscribers & Newsletters Plugin <= 5.5.2 is vulnerable to CSV Injection

Software Email Subscribers & Newsletters Type Plugin Vulnerable versions = 5.5.2 Fixed in 5.5.3 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-45810 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID bc18fb9ece3e Credits Mika Required privilege...

How the CISA catalog of vulnerabilities can help your organization

The Cybersecurity and Infrastructure Security Agency CISA maintains a "known exploited vulnerabilities catalog" which can be useful if you need help prioritizing the patching of vulnerabilities. In essence it is a long list of vulnerabilities that are actually being used by criminals to do harm,...

CVE-2023-25135

creationtimestamp| type| source ---|---|--- 2023-02-03 07:25:33+00:00| seen| https://t.me/cibsecurity/57440 2023-02-04 17:08:41+00:00| published-proof-of-concept| Telegram/AqbQcSruHnWkutfE8evxRkyLJKRGDqBk7h61RFWxZdE1Lg 2023-02-04 18:01:24+00:00| published-proof-of-concept|...

CVE-2022-46604

creationtimestamp| type| source ---|---|--- 2023-02-02 16:14:49+00:00| seen| https://t.me/cibsecurity/57393 2023-04-05 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51251 2023-04-10 10:59:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8091 2023-04-29...

CVE-2022-46552

D-Link DIR-846 Firmware FW100A53DBR was discovered to contain a remote command execution RCE vulnerability via the lan0dhcpsstaticlist parameter. This vulnerability is exploited via a crafted POST request...

CISA Adds Two Known Exploited Vulnerabilities to Catalog

CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise. Note: To view the newly adde...

WordPress Posts and Users Stats Plugin <= 1.1.3 is vulnerable to CSV Injection

Software Posts and Users Stats Type Plugin Vulnerable versions = 1.1.3 Fixed in 1.1.4 OWASP Top 10 A1: Injection Classification CSV Injection CVE CVE-2022-44738 Patch priority Low CVSS severity Low 5.8 Developer Claim ownership PSID adb9c8d12136 Credits Mika Required privilege Subscriber Publishe...

Can't Wait to Shut You Down — Remote DoS Using Wininit.exe

Akamai researchers explore a new vulnerability that can be exploited to lead to denial-of-service attacks against Windows machines...

Siretta QUARTZ-GOLD Buffer Overflow Vulnerability (CNVD-2023-17073)

Siretta QUARTZ-GOLD is a high-speed dual-port Gigabit Ethernet industrial router from Siretta.The Siretta QUARTZ-GOLD is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to cause arbitrary command execution via specially crafted network packets...

Adobe Acrobat and Reader Out-of-Bounds Read Vulnerability (CNVD-2023-51689)

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. An out-of-bounds read vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to cause a sensitive memory leak...

Adobe Acrobat and Reader Buffer Overflow Vulnerability (CNVD-2023-51685)

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. A buffer overflow vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to execute arbitrary code in the context of the current user...

Nexus PHP Cross-Site Scripting Vulnerability (CNVD-2023-05398)

NexusPHP is a free and open source complete solution for building PT websites. NexusPHP has a security vulnerability that can be exploited by attackers to permanently inject arbitrary web scripts or HTML via the title parameter used in /subtitles.php...