‼ CVE-2023-4659 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator, simply by changing the token value to "admin". It is also possible to perform POST, GET and DELETE requests without any token value. Therefore, an unprivileged remote user is able to create, delete and modify users within theapplication.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3769 ‼
📖 Read
via "National Vulnerability Database".
Incorrect data input validation vulnerability, which could allow an attacker with access to the network to implement fuzzing techniques that would allow him to gain knowledge about specially crafted packets that would create a DoS condition through the MMS protocol when initiating communication, achieving a complete system reboot of the device and its services.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3770 ‼
📖 Read
via "National Vulnerability Database".
 Incorrect validation vulnerability of the data entered, allowing an attacker with access to the network on which the affected device is located to use the discovery port protocol (1925/UDP) to obtain device-specific information without the need for authentication.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3744 ‼
📖 Read
via "National Vulnerability Database".
Server-Side Request Forgery vulnerability in SLims version 9.6.0. This vulnerability could allow an authenticated attacker to send requests to internal services or upload the contents of relevant files via the "scrape_image.php" file in the imageURL parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-5290 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate is unused by its CNA. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2015-10124 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Most Popular Posts Widget Plugin up to 0.8 on WordPress. It has been classified as critical. Affected is the function add_views/show_views of the file functions.php. The manipulation leads to sql injection. It is possible to launch the attack remotely. Upgrading to version 0.9 is able to address this issue. The patch is identified as a99667d11ac8d320006909387b100e9a8b5c12e1. It is recommended to upgrade the affected component. VDB-241026 is the identifier assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
🕴 Iran-Linked APT34 Spy Campaign Targets Saudis 🕴
📖 Read
via "Dark Reading".
The Menorah malware can upload and download files, as well as execute shell commands.📖 Read
via "Dark Reading".
Dark Reading
Iran-Linked APT34 Spy Campaign Targets Saudis
The Menorah malware can upload and download files, as well as execute shell commands.
🕴 Which DFIR Challenges Does the Middle East Face? 🕴
📖 Read
via "Dark Reading".
Demand for digital forensics and incident response (DFIR) surges in the Middle East, a new IDC report finds. Is automation the answer?📖 Read
via "Dark Reading".
Dark Reading
Which DFIR Challenges Does the Middle East Face?
Demand for digital forensics and incident response (DFIR) surges in the Middle East, a new IDC report finds. Is automation the answer?
🕴 Norway Urges Europe-Wide Ban on Meta's Targeted Ad Data Collection 🕴
📖 Read
via "Dark Reading".
Norway wants to permanently ban the owner of Facebook and Instagram from collecting sensitive user data across Europe, saying its current policies violate GDPR rules.📖 Read
via "Dark Reading".
Dark Reading
Norway Urges Europe-Wide Ban on Meta's Targeted Ad Data Collection
Norway wants to permanently ban the owner of Facebook and Instagram from collecting sensitive user data across Europe, saying its current policies violate GDPR rules.
🕴 FBI: Crippling 'Dual Ransomware Attacks' on the Rise 🕴
📖 Read
via "Dark Reading".
Once they compromise an victim with an initial ransomware attack, threat actors are ready to deploy a secondary attack with a different strain, which could leave even more damage.📖 Read
via "Dark Reading".
Dark Reading
FBI: Crippling 'Dual Ransomware Attacks' on the Rise
Once they compromise an victim with an initial ransomware attack, threat actors are ready to deploy a secondary attack with a different strain, which could leave even more damage.
‼ CVE-2023-37605 ‼
📖 Read
via "National Vulnerability Database".
Buffer Overflow vulnerability in baramundi software GmbH EMM Agent 23.1.50 and before allows an attacker to cause a denial of service via a crafted request to the password parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40744 ‼
📖 Read
via "National Vulnerability Database".
** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: The CNA or individual who requested this candidate did not associate it with any vulnerability during 2023. Notes: none.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0809 ‼
📖 Read
via "National Vulnerability Database".
In Mosquitto before 2.0.16, excessive memory is allocated based on malicious initial packets that are not CONNECT packets.📖 Read
via "National Vulnerability Database".
🦿 Cyberghost VPN Review (2023): Features, Pricing, and Security 🦿
📖 Read
via "Tech Republic".
In this comprehensive review of Cyberghost VPN, we cover its features, pricing, security, and overall performance. Find out if this is the right VPN for you.📖 Read
via "Tech Republic".
TechRepublic
CyberGhost VPN Review (2025): Features, Pricing, and Security
Is CyberGhost VPN truly fast, secure, and great for streaming? Explore its performance, privacy features, and streaming compatibility in our review.
🕴 KillNet Claims DDoS Attack Against Royal Family Website 🕴
📖 Read
via "Dark Reading".
The royal takedown was a brief but effective PR stunt for Russia's most notorious hacktivist group.📖 Read
via "Dark Reading".
Dark Reading
KillNet Claims DDoS Attack Against Royal Family Website
The royal takedown was a brief but effective PR stunt for Russia's most notorious hacktivist group.
🕴 North Korea Poses as Meta to Deploy Complex Backdoor at Aerospace Org 🕴
📖 Read
via "Dark Reading".
The Lazarus Group's "LightlessCan" malware executes multiple native Windows commands within the RAT itself, making detection significantly harder, security vendor says.📖 Read
via "Dark Reading".
Dark Reading
North Korea Poses as Meta to Deploy Complex Backdoor at Aerospace Org
The Lazarus Group's "LightlessCan" malware executes multiple native Windows commands within the RAT itself, making detection significantly harder, security vendor says.
🕴 Visa Program Combats Friendly Fraud Losses For Small Businesses Globally 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Dark Reading
Visa Program Combats Friendly Fraud Losses For Small Businesses Globally
SAN FRANCISCO -- (BUSINESS WIRE) -- Today, Visa Inc. (NYSE:V), a world leader in digital payments, spotlighted the evolution of its dispute program, making it easier for merchants to fight first-party misuse, also known as friendly fraud or first-party fraud…
👍1
🦿 Common Errors When Connecting Multiple iPhones to One Apple ID 🦿
📖 Read
via "Tech Republic".
Surprises often arise when connecting two iPhones to the same Apple ID. Addressing several key settings helps avoid common mistakes.📖 Read
via "Tech Republic".
TechRepublic
Common Errors When Connecting Multiple iPhones to One Apple ID
Don't be surprised when connecting multiple iPhones to one Apple ID. Learn how to prevent common errors and issues with this guide.
‼ CVE-2023-44463 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in pretix before 2023.7.1. Incorrect parsing of configuration files causes the application to trust unchecked X-Forwarded-For headers even though it has not been configured to do so. This can lead to IP address spoofing by users of the application.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43361 ‼
📖 Read
via "National Vulnerability Database".
Buffer Overflow vulnerability in Vorbis-tools v.1.4.2 allows a local attacker to execute arbitrary code and cause a denial of service during the conversion of wav files to ogg files.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43267 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in the publish article function of emlog pro v2.1.14 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the title field.📖 Read
via "National Vulnerability Database".