‼ CVE-2023-28692 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Kevon Adonis WP Abstracts plugin <=Â 2.6.3 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40839 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADF3C' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADF3C" function to execute commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40837 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin function 'sub_ADD50' contains a command execution vulnerability. In the "formSetIptv" function, obtaining the "list" and "vlanId" fields, unfiltered passing these two fields as parameters to the "sub_ADD50" function to execute commands.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40597 ‼
📖 Read
via "National Vulnerability Database".
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can exploit an absolute path traversal to execute arbitrary code that is located on a separate disk.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-20266 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability in Cisco Emergency Responder, Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management Edition (Unified CM SME), and Cisco Unity Connection could allow an authenticated, remote attacker to elevate privileges to root on an affected device. This vulnerability exists because the application does not properly restrict the files that are being used for upgrades. An attacker could exploit this vulnerability by providing a crafted upgrade file. A successful exploit could allow the attacker to elevate privileges to root. To exploit this vulnerability, the attacker must have valid platform administrator credentials on an affected device.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40595 ‼
📖 Read
via "National Vulnerability Database".
In Splunk Enterprise versions lower than 8.2.12, 9.0.6, and 9.1.1, an attacker can execute a specially crafted query that they can then use to serialize untrusted data. The attacker can use the query to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24401 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Davidsword Mobile Call Now & Map Buttons plugin <=Â 1.5.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-24397 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Reservation.Studio Reservation.Studio widget plugin <=Â 1.0.11 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40593 ‼
📖 Read
via "National Vulnerability Database".
In Splunk Enterprise versions lower than 9.0.6 and 8.2.12, a malicious actor can send a malformed security assertion markup language (SAML) request to the `/saml/acs` REST endpoint which can cause a denial of service through a crash or hang of the Splunk daemon.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40844 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6 US_AC6V1.0BR_V15.03.05.16_multi_TD01.bin is vulnerable to Buffer Overflow via function 'formWifiBasicSet.'📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27621 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in MrDemonWolf Livestream Notice plugin <=Â 1.2.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34372 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Didier Sampaolo SpamReferrerBlock plugin <=Â 2.22 versions.📖 Read
via "National Vulnerability Database".
🦿 How to Go Passwordless with NordPass Passkeys 🦿
📖 Read
via "Tech Republic".
With passkeys, you no longer need to use a password to log into supported websites. Here's how to use them with password manager NordPass.📖 Read
via "Tech Republic".
TechRepublic
How to Go Passwordless with NordPass Passkeys
With passkeys, you no longer need to use a password to log into supported websites. Here's how to use them with password manager NordPass.
🕴 New York Times Spoofed to Hide Russian Disinformation Campaign 🕴
📖 Read
via "Dark Reading".
"Operation Doppelganger" has convincingly masqueraded as multiple news sites with elaborate fake stories containing real bylines of journalists, blasting them out on social media platforms.📖 Read
via "Dark Reading".
Dark Reading
New York Times Spoofed to Hide Russian Disinformation Campaign
"Operation Doppelganger" has convincingly masqueraded as multiple news sites with elaborate fake stories containing real bylines of journalists, blasting them out on social media platforms.
‼ CVE-2023-36811 ‼
📖 Read
via "National Vulnerability Database".
borgbackup is an opensource, deduplicating archiver with compression and authenticated encryption. A flaw in the cryptographic authentication scheme in borgbackup allowed an attacker to fake archives and potentially indirectly cause backup data loss in the repository. The attack requires an attacker to be able to: 1. insert files (with no additional headers) into backups and 2. gain write access to the repository. This vulnerability does not disclose plaintext to the attacker, nor does it affect the authenticity of existing archives. Creating plausible fake archives may be feasible for empty or small archives, but is unlikely for large archives. The issue has been fixed in borgbackup 1.2.5. Users are advised to upgrade. Additionally to installing the fixed code, users must follow the upgrade procedure as documented in the change log. Data loss after being attacked can be avoided by reviewing the archives (timestamp and contents valid and as expected) after any "borg check --repair" and before "borg prune". There are no known workarounds for this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40184 ‼
📖 Read
via "National Vulnerability Database".
xrdp is an open source remote desktop protocol (RDP) server. In versions prior to 0.9.23 improper handling of session establishment errors allows bypassing OS-level session restrictions. The `auth_start_session` function can return non-zero (1) value on, e.g., PAM error which may result in in session restrictions such as max concurrent sessions per user by PAM (ex ./etc/security/limits.conf) to be bypassed. Users (administrators) don't use restrictions by PAM are not affected. This issue has been addressed in release version 0.9.23. Users are advised to upgrade. There are no known workarounds for this issue.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40582 ‼
📖 Read
via "National Vulnerability Database".
find-exec is a utility to discover available shell commands. Versions prior to 1.0.3 did not properly escape user input and are vulnerable to Command Injection via an attacker controlled parameter. As a result, attackers may run malicious shell commands in the context of the running process. This issue has been addressed in version 1.0.3. users are advised to upgrade. Users unable to upgrade should ensure that all input passed to find-exec comes from a trusted source.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-41039 ‼
📖 Read
via "National Vulnerability Database".
RestrictedPython is a restricted execution environment for Python to run untrusted code. Python's "format" functionality allows someone controlling the format string to "read" all objects accessible through recursive attribute lookup and subscription from objects he can access. This can lead to critical information disclosure. With `RestrictedPython`, the format functionality is available via the `format` and `format_map` methods of `str` (and `unicode`) (accessed either via the class or its instances) and via `string.Formatter`. All known versions of `RestrictedPython` are vulnerable. This issue has been addressed in commit `4134aedcff1` which has been included in the 5.4 and 6.2 releases. Users are advised to upgrade. There are no known workarounds for this vulnerability.📖 Read
via "National Vulnerability Database".
🕴 APT Attacks From 'Earth Estries' Hit Gov't, Tech With Custom Malware 🕴
📖 Read
via "Dark Reading".
A sophisticated threat actor managed to fly under the radar for three years, despite flexing serious muscle.📖 Read
via "Dark Reading".
Dark Reading
APT Attacks From 'Earth Estries' Hit Gov't, Tech With Custom Malware
A sophisticated threat actor managed to fly under the radar for three years, despite flexing serious muscle.
🕴 Chinese Group Spreads Android Spyware Via Trojan Signal, Telegram Apps 🕴
📖 Read
via "Dark Reading".
Thousands of devices have become infected with "BadBazaar," malware previously used to spy on Uyghur and Turkic ethnic minorities in China.📖 Read
via "Dark Reading".
Dark Reading
Chinese Group Spreads Android Spyware via Trojan Signal, Telegram Apps
Thousands of devices have become infected with "BadBazaar," malware previously used to spy on Uyghur and Turkic ethnic minorities in China.
❤1
🦿 FBI-Led Global Effort Takes Down Massive Qakbot Botnet 🦿
📖 Read
via "Tech Republic".
After more than 15 years in the wild, the Qakbot botnet, a zombie network of over 700,000 computers worldwide, is hanging on the FBI's trophy wall for now.📖 Read
via "Tech Republic".
TechRepublic
FBI-Led Global Effort Takes Down Massive Qakbot Botnet
After 15+ years in the wild, the Qakbot botnet, a zombie network of over 700K computers worldwide, is hanging on the FBI's trophy wall.