CVE-2024-7205 sharing unnecessary device-sensitive information allows Secondary user able to take over devices as primary user

When the device is shared, the homepage module are before 2.19.0 in eWeLink Cloud Service allows Secondary user to take over devices as primary user via sharing unnecessary device-sensitive information...

CVE-2024-40725

creationtimestamp| type| source ---|---|--- 2024-07-18 10:13:30+00:00| seen| https://t.me/HackingInsights/6516 2024-07-18 13:27:13+00:00| seen| https://t.me/cvedetector/1150 2024-07-19 03:58:31+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8023 2024-07-20 15:31:46+00:00|...

CVE-2024-36412

creationtimestamp| type| source ---|---|--- 2024-07-17 15:58:21+00:00| published-proof-of-concept| https://t.me/softrinx/424 2024-07-17 15:58:21+00:00| published-proof-of-concept| https://t.me/softrinx/143160 2024-07-17 16:15:23+00:00| published-proof-of-concept| https://t.me/realLulzSec/13806...

Why Regulated Industries are Turning to Military-Grade Cyber Defenses

As cyber threats loom large and data breaches continue to pose increasingly significant risks. Organizations and industries that handle sensitive information and valuable assets make prime targets for cybercriminals seeking financial gain or strategic advantage. Which is why many highly regulated...

CVE-2024-0311

creationtimestamp| type| source ---|---|--- 2024-03-14 10:26:55+00:00| seen| https://t.me/ctinow/207597 2024-03-14 10:27:01+00:00| seen| https://t.me/ctinow/207604 2024-10-30 16:18:14+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8894 2024-10-31 15:27:18+00:00|...

CVE-2024-20696

creationtimestamp| type| source ---|---|--- 2024-01-09 20:16:32+00:00| seen| https://t.me/ctinow/165327 2025-04-17 17:57:22+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/12292 2025-08-26 18:36:20+00:00| seen| MISP/f7787455-9994-4047-b6f7-77347597c104...

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

Multiple threat actors, including LockBit ransomware affiliates, are actively exploiting a recently disclosed critical security flaw in Citrix NetScaler application delivery control ADC and Gateway appliances to obtain initial access to target environments. The joint advisory comes from the U.S...

CVE-2023-48659

An issue was discovered in MISP before 2.4.176. app/Controller/AppController.php mishandles parameter parsing...

CVE-2023-48657

An issue was discovered in MISP before 2.4.176. app/Model/AppModel.php mishandles filters...

Moderate: samba security, bug fix, and enhancement update

Samba is an open-source implementation of the Server Message Block SMB protocol and the related Common Internet File System CIFS protocol, which allow PC-compatible machines to share files, printers, and various information. The following packages have been upgraded to a later upstream version:...

What is NIS2, and how can you best prepare for the new cybersecurity requirements in the EU?

NIS2 is a European directive that includes new measures to ensure that organizations operating in the European Union EU have a high common level of network and infrastructure security. The "directive" outlines the goals all EU member states must achieve. However, each country will implement it in...

CISA Releases Update to Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells

The Cybersecurity and Infrastructure Security Agency CISA has released an update to a previously published Cybersecurity Advisory CSA, Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells. The CSA—originally released to warn network defenders of critical infrastructure organizations...

CVE-2023-40224

MISP 2.4.174 allows XSS in app/View/Events/index.ctp...

Microsoft SharePoint Server Spoofing Vulnerability (CNVD-2023-72196)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. A spoofing...

PT-2023-25897

Name of the Vulnerable Software and Affected Versions MISP version 2.4.172 Description The issue arises from MISP's mishandling of different certificate file extensions during server sync, leading to sensitive information disclosure through error messages. Recommendations For MISP version 2.4.172...

MISP 安全漏洞

MISP is an open source software solution. The product is used to collect, store, distribute, and share cybersecurity metrics and has features such as threat cybersecurity event analysis and malware analysis. A security vulnerability exists in MISP versions prior to 2.4.172 that stems from...

Design/Logic Flaw

Macrovideo v380pro v1.4.97 shares the device id and password when sharing the device...

CISA and Partners Update the #StopRansomware Guide, Developed through the Joint Ransomware Task Force (JRTF)

Today, CISA, the Federal Bureau of Investigation FBI, the National Security Agency NSA, and the Multi-State Information Sharing and Analysis Center MS-ISAC published an updated version of the StopRansomware Guide, as ransomware actors have accelerated their tactics and techniques since its initia...

Researcher Spotlight: Jacob Finn creates his own public-private partnership at Talos

After working in government for several years, this Talos threat hunter is diving into the dark web Growing up, Jacob Finn says he wanted to be a detective or maybe a veterinarian, but theres still plenty of time for that. Today with Talos, hes a detective. And while hes still hunting for bad...

samba security update

An update is available for samba. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Samba is an open-source implementation of the Server Message Block SMB protocol...