CVE-2023-35885

creationtimestamp| type| source ---|---|--- 2023-07-21 10:59:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8707 2023-07-22 15:31:47+00:00| published-proof-of-concept| Telegram/72q6K-Gw2SSBLexfL7RRBs4aQAazbzl569yjTYRGLrjOQ 2023-07-23 03:58:34+00:00|...

CVE-2023-21237

creationtimestamp| type| source ---|---|--- 2023-06-28 22:19:19+00:00| seen| https://t.me/cibsecurity/65664 2024-03-05 18:10:03+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-03-06 13:41:52+00:00| exploited| https://t.me/informationsecuritychannel/51677 2024-03-24 21:16:55+00:00| see...

CVE-2019-8451

creationtimestamp| type| source ---|---|--- 2023-06-16 15:55:55+00:00| seen| https://t.me/criticalbug/975 2023-11-17 08:44:59+00:00| seen| https://t.me/arpsyndicate/242 2024-03-18 07:23:33+00:00| published-proof-of-concept| https://t.me/lostsec/164 2024-10-09 19:49:41+00:00| seen|...

CVE-2020-35665

creationtimestamp| type| source ---|---|--- 2023-06-09 23:11:26+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/terramasterunauthrcecve202035665.rb 2024-10-25 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities -...

CVE-2023-3140

creationtimestamp| type| source ---|---|--- 2023-06-07 14:35:01+00:00| seen| https://t.me/cibsecurity/65033 2025-01-06 21:35:36+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/232 2026-03-25 03:00:10+00:00| seen| https://www.knime.com/security/advisoriesCVE-2026-4649...

CVE-2023-27639

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter filename in the tshirtecommerce/ajax.php?type=svg endpoint, to allow a remote attacker to traverse directories on the system in order to...

PT-2023-21276 · Prestashop · Tshirtecommerce

Name of the Vulnerable Software and Affected Versions: tshirtecommerce aka Custom Product Designer component version 2.1.4 for PrestaShop Description: An issue allows a remote attacker to forge an HTTP request with the POST parameter type in the "/tshirtecommerce/fonts.php" endpoint, enabling...

CVE-2023-27640

An issue was discovered in the tshirtecommerce aka Custom Product Designer component 2.1.4 for PrestaShop. An HTTP request can be forged with the POST parameter type in the /tshirtecommerce/fonts.php endpoint, to allow a remote attacker to traverse directories on the system in order to open files...

CVE-2022-47379

creationtimestamp| type| source ---|---|--- 2023-05-15 14:29:49+00:00| seen| https://t.me/cibsecurity/64101 2023-08-11 08:14:17+00:00| seen| Telegram/mZjVEjJ9UySCRyqlZinbXkTti1EvxKvFP59xnKSPk7h14g 2026-03-17 12:00:00+00:00| seen| https://www.cisa.gov/news-events/ics-advisories/icsa-26-076-01...

Malwarebytes achieves perfect score in latest AVLab assessment

Malwarebytes has once again earned a perfect score in AVLabs March 2023 real-world malware detection tests, marking the sixth consecutive quarter achieving this feat. Let's delve into the details of the test and how both consumer and business products outperformed competitors in exhaustive testin...

CVE-2023-24955

creationtimestamp| type| source ---|---|--- 2023-05-09 22:44:55+00:00| seen| https://t.me/cibsecurity/63677 2023-05-10 13:00:06+00:00| seen| https://t.me/truesecator/4360 2023-09-30 12:17:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/9116 2023-12-15 08:55:17+00:00|...

Rapture, a Ransomware Family With Similarities to Paradise

In March and April 2023, we observed a type of ransomware targeting its victims via a minimalistic approach with tools that leave only a minimal footprint behind. Our findings revealed many of the preparations made by the perpetrators and how quickly they managed to carry out the ransomware attac...

CVE-2023-1767

The Snyk Advisor website https://snyk.io/advisor/ was vulnerable to a stored XSS prior to 28th March 2023. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create a package in NPM with an associated markdown README fi...

PT-2023-17227 · Snyk · Snyk Advisor

Name of the Vulnerable Software and Affected Versions: Snyk Advisor versions prior to 28th March 2023 Description: The issue concerns a stored XSS vulnerability. A feature of Snyk Advisor is to display the contents of a scanned package's Readme on its package health page. An attacker could create...

Fixed in Apache Tomcat 9.0.74

Moderate: Apache Tomcat denial of service CVE-2023-28709 The fix for CVE-2023-24998 was incomplete. If non-default HTTP connector settings were used such that the maxParameterCount could be reached using query string parameters and a request was submitted that supplied exactly maxParameterCount...

Ransomware review: April 2023

This article is based on research by Marcelo Rivero, Malwarebytes' ransomware specialist, who monitors information published by ransomware gangs on their Dark Web sites. In this report, "known attacks" are those where the victim didn't pay a ransom. This provides the best overall picture of...

The Bug Report - March 2023 Edition

The Bug Report – March 2023 Edition By Trellix · April 05, 2023 This story was also written by Kasimir Schulz. It really is bussin, though. Why am I here? Welcome back to the Bug Report, Ides of March edition! Last month was highlighted by glimpses into the past, with a historic attack technique...

CVE-2022-43769

creationtimestamp| type| source ---|---|--- 2023-04-03 22:25:06+00:00| seen| https://t.me/cibsecurity/61355 2023-04-08 20:04:44+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8078 2023-05-11 14:42:41+00:00| seen|...

Western Digital Hit by Network Security Breach - Critical Services Disrupted!

Data storage devices maker Western Digital on Monday disclosed a "network security incident" that involved unauthorized access to its systems. The breach is said to have occurred on March 26, 2023, enabling an unnamed third party to gain access to a "number of the company's systems." Following th...

CISA Known Exploited Vulnerability Catalog March 2023

For a detailed CISAs KEV Catalog, download the pdf file here Summary For a detailed CISAs KEV Catalog, download the pdf file here The Known Exploited Vulnerability KEV catalog, maintained by CISA, is the authoritative source of vulnerabilities that have been exploited in the wild. To be included ...