PT-2023-12930 · Curl · Curl

Name of the Vulnerable Software and Affected Versions: curl affected versions not specified Description: The issue concerns a cyber espionage campaign, specifically the KV-botnet investigation. It involves various threats, including Kv-botnet, Beacon, Zuo rat, Hiatusrat, and Imminentmonitor rat...

Microsoft Windows Multiple Vulnerabilities (KB5033379)

This host is missing a critical security update according to Microsoft KB5033379 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Patch Tuesday, December 2023 Edition

The final Patch Tuesday of 2023 is upon us, with Microsoft Corp. today releasing fixes for a relatively small number of security holes in its Windows operating systems and other software. Even more unusual, there are no known "zero-day" threats targeting any of the vulnerabilities in Decembers...

Patch Tuesday - December 2023

Microsoft is addressing 34 vulnerabilities this December Patch Tuesday, including a single zero-day vulnerability and three critical remote code execution RCE vulnerabilities. December Patch Tuesday has historically seen fewer patches than a typical month, and this trend continues in 2023. This...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35642

Internet Connection Sharing ICS Denial of Service Vulnerability...

CVE-2023-35641

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35642

Internet Connection Sharing ICS Denial of Service Vulnerability...

CVE-2023-35630

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35630

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-35630

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

Remote code execution

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

Remote code execution

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

Denial of service

Internet Connection Sharing ICS Denial of Service Vulnerability...

CVE-2023-35630

CVE-2023-35630 is a Microsoft Windows Internet Connection Sharing (ICS) remote code execution vulnerability. The NVD entry lists CVSS v3.1 base score 8.8 (HIGH) with AV:A, AC:L, PR:N, UI:N, S:U, C:H, I:H, A:H, indicating adjacent-network exploitation with no user interaction. Multiple OpenVAS ent...

CVE-2023-35642 Internet Connection Sharing (ICS) Denial of Service Vulnerability

...

CVE-2023-35641 Internet Connection Sharing (ICS) Remote Code Execution Vulnerability

...

CVE-2023-35641

CVE-2023-35641 is an Internet Connection Sharing (ICS) remote code execution in Windows. Connected sources confirm affected component (Windows ICS) and classify the impact as remote code execution with the attacker needing adjacent network access, no user interaction, and no privileges required (...

kernel: use-after-free in smb2_is_status_io_timeout()

A use-after-free flaw was found in smb2isstatusiotimeout in CIFS in the Linux Kernel. After CIFS transfers response data to a system call, there are still local variable points to the memory region, and if the system call frees it faster than CIFS uses it, CIFS will access a free memory region,...