Month: April 2023

CVE prog

CTHthemes Outdoor theme for WordPress cross-site scripting | CVE-2023-29236

April 9, 2023

NAME__________CTHthemes Outdoor theme for WordPress cross-site scriptingPlatforms Affected:CTHthemes Outdoor theme for WordPress 3.9.6Risk Level:7.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________CTHthemes Outdoor theme for WordPress...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20147

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20145

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20140

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20149

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command execution | CVE-2023-20124

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 Routers command executionPlatforms Affected:Cisco RV016 Multi-WAN VPN Routers Cisco RV042...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20142

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20139

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20141

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20144

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20143

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

Golang Go denial of service | CVE-2023-24536

April 9, 2023

NAME__________Golang Go denial of servicePlatforms Affected:Golang Go 1.19.7 Golang Go 1.20.2Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Golang Go is vulnerable to a...

CVE prog

Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scripting | CVE-2023-20150

April 9, 2023

NAME__________Cisco Small Business RV016, RV042, RV042G, RV082, RV320, and RV325 routers cross-site scriptingPlatforms Affected:Cisco Small Business RV042 Dual WAN VPN...

CVE prog

BudiBase server-side request forgery | CVE-2023-29010

April 9, 2023

NAME__________BudiBase server-side request forgeryPlatforms Affected:BudiBase BudiBase 2.4.2Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________BudiBase is vulnerable to server-side request forgery, caused by a flaw...

CVE prog

Intranda GmbH Goobi viewer cross-site scripting | CVE-2023-29016

April 9, 2023

NAME__________Intranda GmbH Goobi viewer cross-site scriptingPlatforms Affected:intranda GmbH Goobi viewer 23.02Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Intranda GmbH Goobi viewer is vulnerable to...

CVE prog

SageMath FlintQS security bypass | CVE-2023-29465

April 9, 2023

NAME__________SageMath FlintQS security bypassPlatforms Affected:SageMath FlintQS 1.0Risk Level:5.5Exploitability:Proof of ConceptConsequences:Bypass Security DESCRIPTION__________SageMath FlintQS could allow a local authenticated attacker to...

CVE prog

Apache Airflow Spark Provider information disclosure | CVE-2023-28710

April 9, 2023

NAME__________Apache Airflow Spark Provider information disclosurePlatforms Affected:Apache Airflow Spark Provider 4.0.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache Airflow Spark Provider could allow a...

CVE prog

Svelte SvelteKit cross-site request forgery | CVE-2023-29008

April 9, 2023

NAME__________Svelte SvelteKit cross-site request forgeryPlatforms Affected:Svelte SvelteKit 1.15.1Risk Level:4.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Svelte SvelteKit is vulnerable to cross-site request forgery, caused by...

CVE prog

Dell Power Manager privilege escalation | CVE-2023-28051

April 9, 2023

NAME__________Dell Power Manager privilege escalationPlatforms Affected:Dell Power Manager 3.10Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Dell Power Manager could allow a local authenticated attacker...

CVE prog

Intranda GmbH Goobi viewer cross-site scripting | CVE-2023-29014

April 9, 2023

NAME__________Intranda GmbH Goobi viewer cross-site scriptingPlatforms Affected:intranda GmbH Goobi viewer 23.02Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Intranda GmbH Goobi viewer is vulnerable to...

CVE prog

Intranda GmbH Goobi viewer cross-site scripting | CVE-2023-29015

April 9, 2023

NAME__________Intranda GmbH Goobi viewer cross-site scriptingPlatforms Affected:intranda GmbH Goobi viewer 23.02Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Intranda GmbH Goobi viewer is vulnerable to...

CVE prog

Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command execution | CVE-2023-20121

April 9, 2023

NAME__________Cisco Evolved Programmable Network Manager, Identity Services Engine and Prime Infrastructure command executionPlatforms Affected:Cisco Prime Infrastructure Cisco Identity Services Engine...

CVE prog

Apache Airflow Drill Provider information disclosure | CVE-2023-28707

April 9, 2023

NAME__________Apache Airflow Drill Provider information disclosurePlatforms Affected:Apache Airflow Drill Provider 2.3.1Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache Airflow Drill Provider could allow a...

hacker arms raised brighter

Breached shutdown sparks migration to ARES data leak forums

April 9, 2023

A threat group called ARES is gaining notoriety on the cybercrime scene by selling and leaking databases stolen from corporations and...

[KILLSEC] – Ransomware Victim: Nationwide Legal

November 24, 2024

[KILLSEC] – Ransomware Victim: Eassy Life

November 24, 2024

[INCRANSOM] – Ransomware Victim: Service Avicole JGL

November 24, 2024

[KILLSEC] – Ransomware Victim: Vogue Homes

November 24, 2024

[KILLSEC] – Ransomware Victim: Efi Sales

November 24, 2024