CVE-2023-2686

CVE-2023-2686 describes a buffer overflow in the Silicon Labs Gecko SDK (MicriumOS example) prior to v4.2.3, enabling a connected device to write a payload onto the stack. The issue affects Gecko SDK 4.2.3 and earlier, with a network-exposed impact and high severity (CVSS v3.1: CRITICAL). The roo...

CVE-2023-2686

Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack...

CVE-2023-2686

Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack...

CVE-2023-2686

Buffer overflow in Wi-Fi Commissioning MicriumOS example in Silicon Labs Gecko SDK v4.2.3 or earlier allows connected device to write payload onto the stack...

LockBit Ransomware Evolving Tactics and Pervasive Impact in 2023

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary LockBit ransomware is a highly impactful Ransomware-as-a-Service RaaS variant that targets critical sectors globally. Since 2020, victims in the US alone have paid around $91 million in ransom payments...

Chinese Espionage Hackers Exploit ESXi Zero-Day

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary The Chinese-sponsored hacking group, UNC3886, has been actively exploiting the CVE-2023-20867 vulnerability and using advanced backdoors such as VirtualPita and VirtualPie to carry out malicious activiti...

Silicon Labs Gecko SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK, which arises from uninitialized vectors...

Silicon Labs EFR32 资源管理错误漏洞

Silicon Labs EFR32 is a family of SoC wireless components from Silicon Labs, Inc. A security vulnerability exists in the Silicon Labs EFR32 Bluetooth LE stack versions 5.1.0 through 5.1.1. An attacker could exploit the vulnerability by sending invalid pairing messages, which could cause legitimat...

Silicon Labs Gecko SDK 安全漏洞

The Silicon Labs Gecko SDK GSDK is an open source library from Silicon Labs. Combines the Silicon Labs Wireless Software Development Kit SDK and the Gecko platform into one integrated package. A security vulnerability exists in Silicon Labs Gecko SDK version v4.2.3 and earlier. An attacker...

PT-2023-20830 · Silicon · Silicon Labs Gecko Sdk

Name of the Vulnerable Software and Affected Versions: Silicon Labs Gecko SDK versions 4.2.3 and earlier Description: The issue allows a connected device to write a payload onto the stack due to a buffer overflow in the Wi-Fi Commissioning MicriumOS example. Recommendations: For Silicon Labs Geck...

Microsoft’s June 2023 Patch Tuesday Addresses 78 Vulnerabilities

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Microsofts June 2023 Patch Tuesday addressed 78 flaws, including 38 remote code execution vulnerabilities. Notable fixes included SharePoint and Exchange Server vulnerabilities, while no zero-day...

Microsoft Patch Tuesday, June 2023 Edition

Microsoft Corp. today released software updates to fix dozens of security vulnerabilities in its Windows operating systems and other software. This months relatively light patch load has another added bonus for system administrators everywhere: It appears to be the first Patch Tuesday since March...

CVE-2023-28620

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Cyberus Labs Cyberus Key plugin = 1.0 versions...

CVE-2023-28620

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Cyberus Labs Cyberus Key plugin = 1.0 versions...

CVE-2023-28620 WordPress Cyberus Key Plugin <= 1.0 is vulnerable to Cross Site Scripting (XSS)

Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Cyberus Labs Cyberus Key plugin = 1.0 versions...

CVE-2023-28620

CVE-2023-28620: WordPress Cyberus Key plugin (Cyberus Key)

DoubleFinger A Sneaky Loader Targets Cryptocurrency

Threat Level Attack Report For a detailed threat advisory, download the pdf file here Summary A sophisticated campaign utilized an advanced multi-stage DoubleFinger loader to deploy the GreetingGhoul malware, which is designed to steal cryptocurrency credentials. To receive real-time threat...

Fortinet Releases Patch for Pre-announced Critical Vulnerability

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary Fortinet has addressed a critical vulnerability in FortiOS and FortiProxy SSL-VPN, resolving a heap-based buffer overflow pre-authentication flaw. This update is crucial because the vulnerability...

Actors, Threats and Vulnerabilities 5 June to 11 June 2023

For a detailed threat digest, download the pdf file here Summary HiveForce Labs recently made several significant discoveries related to cybersecurity threats. Over the past week, the fact that there were a total of seven attacks executed, taking advantage of five different vulnerabilities in...

EulerOS Virtualization 3.0.6.0 : unbound (EulerOS-SA-2023-2215)

According to the versions of the unbound packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the 'ghost domain names' attack. The...