Double-Extortion Play Ransomware Strikes 300 Organizations Worldwide

The threat actors behind the Play ransomware are estimated to have impacted approximately 300 entities as of October 2023, according to a new joint cybersecurity advisory from Australia and the U.S. "Play ransomware actors employ a double-extortion model, encrypting systems after exfiltrating dat...

Delta Dental Hit with 7 Million User Data Breach in MOVEit-Linked Attack

By Waqas Since its emergence in May 2023, the MOVEit vulnerability has been exploited by the Russian-linked Cl0p ransomware gang,… This is a post from HackRead.com Read the original post: Delta Dental Hit with 7 Million User Data Breach in MOVEit-Linked Attack...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-0019723)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

CVE-2023-42327

creationtimestamp| type| source ---|---|--- 2023-12-12 18:42:51+00:00| exploited| https://t.me/truesecator/5193 2026-07-26 02:02:17+00:00| seen| https://t.me/EchelonEyes/2294 2026-07-26 07:01:48+00:00| seen| https://t.me/zhatez/853 2026-07-27 00:00:53+00:00| seen| https://t.me/EchelonEyes/2294...

Tenda W30E setUmountUSBPartition Function Command Execution Vulnerability

The Tenda W30E is a router from the Chinese company Tenda. A command execution vulnerability exists in Tenda W30E version V16.01.0.124843, which stems from the setUmountUSBPartition function failing to correctly filter constructor command special characters, commands, etc. The vulnerability can b...

Google Android suffers from unspecified vulnerability (CNVD-2023-9749629)

Google Android is a Linux-based open source operating system from Google. Google Android has a security vulnerability that can be exploited by attackers to cause elevation of privilege...

The vulnerability of the Microsoft Visual Studio software, related to uncontrolled resource consumption, allows a hacker to trigger a service failure.

The vulnerability of the Microsoft Visual Studio software development tool is related to an uncontrolled consumption of resources. Exploiting this vulnerability can allow a hacker to cause a service failure...

The vulnerability of Adobe InDesign’s computer layout automation tool, related to the manipulation of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of Adobe InDesign’s computer layout automation tool is related to the handling of the zero pointer. Exploiting this vulnerability can allow an attacker to cause a service failure...

Microsoft Dynamics 365 (on-premises) cross-site scripting vulnerability (CNVD-2024-00198)

Microsoft Dynamics 365 is a suite of ERP business solutions for multinational organizations from Microsoft USA. The product includes financial management, production management and business intelligence management. A cross-site scripting vulnerability exists in Microsoft Dynamics 365 on-premises,...

Microsoft Excel Security Feature Bypass Vulnerability (CNVD-2024-02715)

Microsoft Excel is a spreadsheet processing software in the Office suite from Microsoft USA. A security feature bypass vulnerability exists in Microsoft Excel, which can be exploited by an attacker to bypass security features and impact confidentiality, integrity, and availability...

Advanced threat predictions for 2024

Advanced persistent threats APTs are the most dangerous threats, as they employ complex tools and techniques, and often are highly targeted and hard to detect. Amid the global crisis and escalating geopolitical confrontations, these sophisticated cyberattacks are even more dangerous, as there is...

Cerber Ransomware Exploits Atlassian Confluence Vulnerability CVE-2023-22518

We encountered the Cerber ransomware exploiting the Atlassian Confluence vulnerability CVE-2023-22518 in its operations...

PT-2023-15880 · Kernel · Kernel

Name of the Vulnerable Software and Affected Versions: Kernel module affected versions not specified Description: The issue is related to a race condition vulnerability in the kernel module. Successful exploitation of this vulnerability may cause variable values to be read with the condition...

MOXA PT-G503 Unauthorized Access Vulnerability

MOXA PT-G503 is a series of Layer 2 managed switches from MOXA China. The MOXA PT-G503 unauthorized access vulnerability can be exploited by a remote attacker to submit a special request that can be used to gain unauthorized access to and manipulate user session data...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 An Exploitation script developed to exploit the...

Google Android Information Disclosure Vulnerability (CNVD-2023-101640)

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Google Android Information Disclosure Vulnerability (CNVD-2023-99041)

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability, which is caused by the disclosure of side channel information in the input method. The vulnerability can be exploited by an attacker to obtain sensitive...

CVE-2023-45868

The Learning Module in ILIAS 7.25 2023-09-12 release allows an attacker with basic user privileges to achieve a high-impact Directory Traversal attack on confidentiality and availability. By exploiting this network-based vulnerability, the attacker can move specified directories, normally outside...

PT-2023-26844 · Unknown · Pingfederate

Name of the Vulnerable Software and Affected Versions: PingFederate affected versions not specified Description: The issue allows a new MFA device to be paired without requiring second factor authentication from an existing registered device. A threat actor may be able to exploit this to register...

D-Link DIR-619 formSetWAN_Wizard56 Function Buffer Overflow Vulnerability

The D-Link DIR-619L is a wireless router. A buffer overflow vulnerability exists in the D-Link DIR-619 formSetWANWizard56 function due to incorrect boundary checking in the formSetWANWizard56 function. An attacker could exploit this vulnerability to cause a denial of service...