‼ CVE-2023-5255 ‼
📖 Read
via "National Vulnerability Database".
For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4911 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.📖 Read
via "National Vulnerability Database".
🕴 USPS Anchors Snowballing Smishing Campaigns 🕴
📖 Read
via "Dark Reading".
Researchers found 164 domains connected to a single threat actor located in Tehran.📖 Read
via "Dark Reading".
Dark Reading
USPS Anchors Snowballing Smishing Campaigns
Researchers found 164 domains connected to a single threat actor located in Tehran.
🕴 Attacks on Maximum Severity WS_FTP Bug Have Been Limited — So Far 🕴
📖 Read
via "Dark Reading".
While CVE-2023-40044 is critical, threat watchers hope it won't be another MOVEit for customers of Progress Software's file transfer technology.📖 Read
via "Dark Reading".
Dark Reading
Attacks on Maximum Severity WS_FTP Bug Have Been Limited — So Far
While CVE-2023-40044 is critical, threat watchers hope it won't be another MOVEit for customers of Progress Software's file transfer technology.
‼ CVE-2023-33272 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39645 ‼
📖 Read
via "National Vulnerability Database".
Theme volty tvcmspaymenticon up to v4.0.1 was discovered to contain a SQL injection vulnerability via the component /tvcmspaymenticon/ajax.php?action=update_position&recordsArray.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43176 ‼
📖 Read
via "National Vulnerability Database".
A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43953 ‼
📖 Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33270 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43898 ‼
📖 Read
via "National Vulnerability Database".
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40519 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575_ee9195b0, 01.01.01.30097902_fd999e76, and 00.12.01.9565588_1254b459 allows remote attackers to inject arbitrary web script or HTML via the disconnectMessage parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33268 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44973 ‼
📖 Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33271 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL Certificate check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33273 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43951 ‼
📖 Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43952 ‼
📖 Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management component.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33269 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40830 ‼
📖 Read
via "National Vulnerability Database".
Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44974 ‼
📖 Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.📖 Read
via "National Vulnerability Database".
🕴 Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024 🕴
📖 Read
via "Dark Reading".
📖 Read
via "Dark Reading".
Dark Reading
Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024
LONDON, U.K., September 28, 2023 – Worldwide end-user spending on security and risk management is projected to total $215 billion in 2024, an increase of 14.3% from 2023, according to new forecast from Gartner, Inc. In 2023, global security and risk management…