From Cryptojacking to DDoS Attacks: Diicot Expands Tactics with Cayosin Botnet

Cybersecurity researchers have discovered previously undocumented payloads associated with a Romanian threat actor named Diicot , revealing its potential for launching distributed denial-of-service DDoS attacks. "The Diicot name is significant, as it's also the name of the Romanian organized crim...

CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

Cross site scripting

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

CVE-2023-34565

The CVE-2023-34565 entry affects NetBox 3.5.1, with a stored Cross-Site Scripting (XSS) vulnerability in the Create Wireless LAN Groups function. According to multiple sources, NetBox 3.5.1 is vulnerable to XSS in that feature, labeled as stored XSS in CNNVD/CVE records, and the vulnerability has...

CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

Netbox 跨站脚本漏洞

NetBox is a Django, PostgreSql based tool for IP Address Management IPAM and Data Center Infrastructure Management DCIM from the NetBox community. A security vulnerability exists in Netbox version 3.5.1 that stems from a stored cross-site scripting XSS vulnerability in the Create Wireless LAN...

PT-2023-24923 · Netbox · Netbox

Name of the Vulnerable Software and Affected Versions: Netbox version 3.5.1 Description: The issue is related to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function. This allows for malicious scripts to be injected into the website, potentially leading to unauthorized access or...

CVE-2023-34565

Netbox 3.5.1 is vulnerable to Cross Site Scripting XSS in the "Create Wireless LAN Groups" function...

CVE-2023-20716

In wlan, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07796883; Issue ID: ALPS07796883...

PT-2023-17577 · Mediatek +3 · Mt5221 +4

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a possible out of bounds write in wlan due to a missing bounds check. This could lead to local escalation of privilege, with...

PT-2023-17578 · Wlan · Wlan

Name of the Vulnerable Software and Affected Versions: wlan affected versions not specified Description: The issue is related to a possible out of bounds write in wlan due to a missing bounds check. This could lead to local escalation of privilege, with System execution privileges needed. User...

PT-2023-18323 · Unknown · Wlan Firmware

Name of the Vulnerable Software and Affected Versions: WLAN Firmware affected versions not specified Description: The issue is related to a transient Denial of Service DOS in WLAN Firmware that occurs while parsing FT Information Elements. Recommendations: At the moment, there is no information...

CVE-2023-25780

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence...

Authentication flaw

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence...

CVE-2023-25780 Status Internet Co.,Ltd. PowerBPM - Broken Access Control

It is identified a vulnerability of insufficient authentication in an important specific function of Status PowerBPM. A LAN attacker with normal user privilege can exploit this vulnerability to modify substitute agent to arbitrary users, resulting in serious consequence...

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller (WLC) microprogramming software, related to access control deficiencies, allows attackers to circumvent security restrictions.

The vulnerability of Cisco Aironet Access Point microprogramming software and Cisco Wireless LAN Controller WLC microprogramming software is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to bypass security restrictions remotely...

CVE-2023-25780

Status PowerBPM is affected by an access control/authentication flaw. The vulnerability allows a LAN attacker with normal user privileges to modify the substitute agent for arbitrary users, potentially leading to serious consequences. Documents refer to insufficient authentication in a specific S...

PT-2023-3606 · Zyxel · Zyxel Usg Flex Series +4

Name of the Vulnerable Software and Affected Versions: Zyxel ATP series versions 5.10 through 5.36 Patch 2 Zyxel USG FLEX series versions 5.00 through 5.36 Patch 2 Zyxel USG FLEX 50W series versions 5.10 through 5.36 Patch 2 Zyxel USG20W-VPN series versions 5.10 through 5.36 Patch 2 Zyxel VPN...

The vulnerability of the NTLM Security Support Provider implementation in the Windows operating system allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the NTLM Security Support Provider in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

CVE-2023-32113

SAP GUI for Windows - version 7.70, 8.0, allows an unauthorized attacker to gain NTLM authentication information of a victim by tricking it into clicking a prepared shortcut file. Depending on the authorizations of the victim, the attacker can read and modify potentially sensitive information aft...