CVE-2018-8590

CVE-2018-8590 is a remote code execution vulnerability in Microsoft Word caused by improper handling of objects in memory. An attacker can exploit it by tricking a user into opening a specially crafted Word document, delivered via email, the web, or another vector. The connected TALOS blog entry ...

CVE-2020-1341

CVE-2020-1341 affects Microsoft Edge (Chromium-based). The issue is an Elevation of Privilege when DLLs are allowed to download without an additional user prompt. Exploitation requires a user to browse to a malicious site and initiate a DLL download, which could lead to elevated privileges on the...

CVE-2019-1491

Summary (CVE-2019-1491) : A Microsoft SharePoint Server information-disclosure vulnerability allows an attacker to read arbitrary files on the server by sending a specially crafted request. Public details from multiple sources confirm exploitation requires targeting affected SharePoint APIs and r...

CVE-2020-0817

CVE-2020-0817 corresponds to a remote code execution flaw in the Windows Remote Desktop Client. The connected advisory CPAI-2020-0074 states there is a remote code execution vulnerability in the Windows Remote Desktop Client and that successful exploitation could allow an attacker to run arbitrar...

CVE-2020-0818

Technical details for CVE-2020-0818 are not publicly available in the provided documents. Monitor for updates as information may be released later.

WordPress Organization chart plugin <= 1.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Lana Codes Patchstack Alliance in the WordPress Organization chart plugin versions = 1.4.1. Solution Update the WordPress Organization chart plugin to the latest available version at least 1.4.2...

Bouncy Castle BC Code Issue Vulnerability

Bouncy Castle BC is a cryptographic library for C and Java applications organized by Bouncy Castle. A code issue vulnerability exists in Bouncy Castle BC-FJA versions prior to 1.0.2.4, which stems from a temporary key used by the BC-FJA FIPS module that may be zeroed out while the module is still...

Google TensorFlow code issue vulnerability (CNVD-2022-80685)

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. A code issue vulnerability exists in Google TensorFlow, which stems from a logical error in the organization of data, where the conversion from char to bool is undefined if the const char array is not 0...

Yanluowang Ransomware Leaks Analysis: Organization, Collaboration with HelloKitty, Babuk and Conti

Yanluowang Ransomware Leaks Analysis: Organization, Collaboration with HelloKitty, Babuk and Conti By Jambul Tologonov· November 22, 2022 Introduction On October 31, 2022, Yanluowang’s TOR site was hacked displaying a message “check and mate!! Yanluowang Matrix chat hacked @yanluowangleaks Time’s...

Yanluowang Ransomware Leaks Analysis: Organization, Collaboration with HelloKitty, Babuk and Conti

Yanluowang Ransomware Leaks Analysis: Organization, Collaboration with HelloKitty, Babuk and Conti By Jambul Tologonov· November 22, 2022 Introduction On October 31, 2022, Yanluowang’s TOR site was hacked displaying a message “check and mate!! Yanluowang Matrix chat hacked @yanluowangleaks Time’s...

CVE-2022-2944

The connected document details a vulnerability in the WordPress Countdown Widget plugin (WordPress) where versions prior to 3.1.9.3 are affected by an Admin+ Stored XSS flaw. The issue arises from inadequate sanitisation/escaping of certain parameters, enabling stored cross-site scripting by high...

CVE-2022-2940

Technical details are not publicly available in the provided documents. Monitor for updates.

CVE-2022-42903

Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...

Code injection

Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...

PT-2022-26654 · Zoho · Zoho Manageengine Supportcenter Plus

Name of the Vulnerable Software and Affected Versions: Zoho ManageEngine SupportCenter Plus versions through 11024 Description: The issue allows low-privileged users to view the organization users list. Recommendations: For versions through 11024, update to a version that contains a fix for this...

CVE-2022-42903

Summary: CVE-2022-42903 affects Zoho ManageEngine SupportCenter Plus up to version 11.0 Build 11024. The issue allows low-privileged users to view the organization users list, indicating an access-control exposure. Affected product/versions (per provided documents): Zoho ManageEngine SupportCente...

CVE-2022-42903

Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...

CVE-2022-42903

Zoho ManageEngine SupportCenter Plus through 11024 allows low-privileged users to view the organization users list...

Cross site scripting

Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity ManagementSCIM account management enabled, Zulip Server 5.0 through 5.6 checked the SCIM bearer token using a comparator that did not run in constant time. Therefore, it might theoretically be...

CVE-2022-41914 Non-constant-time SCIM token comparison in Zulip Server

Zulip is an open-source team collaboration tool. For organizations with System for Cross-domain Identity ManagementSCIM account management enabled, Zulip Server 5.0 through 5.6 checked the SCIM bearer token using a comparator that did not run in constant time. Therefore, it might theoretically be...