CVE-2023-38894

A Prototype Pollution issue in Cronvel Tree-kit v.0.7.4 and before allows a remote attacker to execute arbitrary code via the extend function...

Huawei EMUI 安全漏洞

SIMATIC Cloud Connect 7 is an IoT gateway for connecting programmable logic controllers to cloud services and allows field devices with an OPC UA server interface to be connected as OPC UA clients.SIMATIC Drive Controllers are designed for the automation of production machines and combine the...

Old exploit kits still kicking around in 2023

The year is 2023 and there still are some people using Internet Explorer on planet Earth. More shocking perhaps, is the fact there are still threat actors maintaining exploit kit infrastructure and dropping new malware. In this quick blog post, we review two well-known toolkits from the past,...

CVE-2023-32617

CVE-2023-32617 affects certain Intel NUC BIOS firmware: NUC Rugged Kit, NUC Kit, and Compute Element BIOS. The root cause is improper input validation in the BIOS firmware, which could allow a privileged user to escalate privileges via local access. Intel’s advisory and related Red Hat/NVD entrie...

Some Intel Products Security Vulnerabilities

The Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in some Intel products that stems from improper input validation. An attacker could exploit the vulnerability to elevate privileges. The following products are affected: IntelR NUC Rugged Kit, IntelR...

PT-2023-23913 · Intel · Intel Nuc Rugged Kit +2

Name of the Vulnerable Software and Affected Versions: IntelR NUC Rugged Kit, IntelR NUC Kit and IntelR Compute Element BIOS firmware affected versions not specified Description: The issue is related to improper input validation in the BIOS firmware of certain Intel products, which may allow a...

The vulnerability of the PackageKit component in the macOS operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of PackageKit component in the macOS operating system is related to access control deficiencies. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Intel NUC Security Vulnerability

Intel NUC is a small minicomputer from Intel Corporation USA. A security vulnerability exists in Intel NUC. An attacker could exploit this vulnerability to obtain sensitive information. The following products are affected: IntelR NUC 13 Extreme Compute Element, IntelR NUC 13 Extreme Kit, IntelR N...

Intel RealSense ID Security Vulnerability

Intel RealSense ID is a facial recognition solution from Intel Corporation USA that relies on its RealSense depth sensing technology. A security vulnerability exists in IntelR RealSenseTM SDKs prior to version 0.25.0 that stems from incorrect default permissions. An attacker could exploit the...

Intel PSR Code Issue Vulnerability

Intel PSR is a management and security status application from IntelR Corporation. A security vulnerability exists in IntelR PSR SDK versions prior to 1.0.0.20. An attacker can exploit the vulnerability to elevate privileges...

Intel AMT SDK Security Vulnerability

Intel AMT SDK is an IntelR development kit for providing basic development capabilities for Active Management Technology AMT. A security vulnerability exists in IntelR AMT and IntelR Standard Manageability that originates from incorrect input validation. An attacker could exploit the vulnerabilit...

EvilProxy Phishing Kit Hits 100+ Firms, Bypasses MFA via Reverse Proxy

By Habiba Rashid The EvilProxy phishing kit is a malicious tool that has emerged as a key player, as it exploits MFA's limitations. So far, it has targeted over 100 firms. This is a post from HackRead.com Read the original post: EvilProxy Phishing Kit Hits 100+ Firms, Bypasses MFA via Reverse Pro...

SUSE: Security Advisory (SUSE-SU-2023:3232-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2023:3239-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Malicious code in @tendable/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 530df54e3b7520850cd182b11fa3bb60f72e996b941a80467c006de084372f29 The OpenSSF Package Analysis project identified '@tendable/ui-kit' @ 99.0.1 npm as malicious. It is considered malicious because: - The package...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in the Zoom Client SDK prior to version 5.15.5 that stems from an issue with the exposure of sensitive information...

Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in the Zoom Client SDK prior to version 5.14.10 that stems from an improper input validation issue...

Intel® NUC Kit and Mini PC BIOS Firmware Advisory

Summary: Potential security vulnerabilities in some Intel® NUC Kit and Mini PC BIOS firmware may allow escalation of privilege or information disclosure. Intel is releasing firmware updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2022-37336 Description:...

jackson-databind: Possible DoS if using JDK serialization to serialize JsonNode

A flaw was found in Jackson Databind. This issue may allow a malicious user to cause a denial of service 2 GB transient heap usage per read in uncommon situations involving JsonNode JDK serialization...

SUSE: Security Advisory (SUSE-SU-2023:3161-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...