NAME__________Open vSwitch denial of servicePlatforms Affected:Open vSwitch Open vSwitchRisk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Open vSwitch is vulnerable to a denial of...
NAME__________IBM Sterling Order Management privilege escalationPlatforms Affected:IBM Sterling Order Management 10.0Risk Level:5.4Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________IBM Sterling Order Management 10.0 could allow...
NAME__________Apple macOS Ventura privilege escalationPlatforms Affected:Apple macOS Ventura 13.3 Apple iOS 16.4 Apple iPadOS 16.4Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Apple macOS Ventura...
NAME__________Online Graduate Tracer System for College of ICT Alumni session hijackingPlatforms Affected:Risk Level:4.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Online Graduate Tracer System for College...
NAME__________xml2js code executionPlatforms Affected:Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________xml2js could allow a remote attacker to execute arbitrary code on the system, caused...
NAME__________Keysight Technologies Hawkeye cross-site scriptingPlatforms Affected:Risk Level:3.5Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Keysight Technologies Hawkeye is vulnerable to cross-site scripting, caused by improper validation...
NAME__________IBM Sterling Order Management information disclosurePlatforms Affected:IBM Sterling Order Management 10.0Risk Level:5.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________IBM Sterling Order Management 10.0 does not...
NAME__________Ulearn file uploadPlatforms Affected:Risk Level:9.1Exploitability:Consequences:Gain Access DESCRIPTION__________Ulearn could allow a remote authenticated attacker to upload arbitrary files, caused by the...
NAME__________OrangeScrum cross-site scriptingPlatforms Affected:Risk Level:7.3Exploitability:Consequences:Cross-Site Scripting DESCRIPTION__________OrangeScrum is vulnerable to cross-site scripting, caused by improper validation of user-supplied input. A...
The maintainers of the vm2 JavaScript sandbox module have shipped a patch to address a critical flaw that could be...
The Iranian nation-state group known as MuddyWater has been observed carrying out destructive attacks on hybrid environments under the guise...
Apple on Friday released security updates for iOS, iPadOS, macOS, and Safari web browser to address a pair of zero-day...
Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-28205 No description provided CVE-2021-44228Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases...
Following reports of a ransomware attack, Taiwanese PC vendor MSI (short for Micro-Star International) confirmed today that its network was...
An estimated one million WordPress websites have been compromised during a long-lasting campaign that exploits "all known and recently discovered...
Proof-of-concept exploit code has been released for a recently disclosed critical vulnerability in the popular VM2 library, a JavaScript sandbox that...
For-profit companies reportedly linked to sextortion activity are targeting victims using various deceptive tactics to pressure them into paying for...
On Friday, U.S. Cybersecurity and Infrastructure Security Agency (CISA) increased by five its list of security issues that threat actors...
The Information provided at the time of posting was detected as "Brute Ratel C4". Depending on when you are viewing...
High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info grinnellplans -- grinnellplans A vulnerability...
WindowSpy is a Cobalt Strike Beacon Object File meant for targetted user surveillance. The goal of this project was to...
Of late, security researchers stumbled across a group of English-speaking European teenagers who are offering services such as malware-as-a-subscription, hacking...
In yet another sign that Telegram is increasingly becoming a thriving hub for cybercrime, researchers have found that threat actors...
LockBit 3.0 Ransomware NOTE: No files or stolen information are by RedPacket Security. Any legal issues relating to the content...
