Month: July 2023

khodakhah NodCMS cross-site scripting | CVE-2023-3641

July 15, 2023

NAME__________khodakhah NodCMS cross-site scriptingPlatforms Affected:khodakhah NodCMS 3.4.1Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________khodakhah NodCMS is vulnerable to cross-site scripting, caused by improper validation...

Google Android denial of service | CVE-2023-21243

July 15, 2023

NAME__________Google Android denial of servicePlatforms Affected:Google AndroidRisk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Google Android is vulnerable to a denial of service, caused...

POST SMTP Mailer plugin for WordPress cross-site scripting | CVE-2023-3082

July 15, 2023

NAME__________POST SMTP Mailer plugin for WordPress cross-site scriptingPlatforms Affected:Post SMTP POST SMTP Mailer plugin for WordPress 2.5.7Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________POST...

Multiple BD Alaris system products cross-site scripting | CVE-2023-30564

July 15, 2023

NAME__________Multiple BD Alaris system products cross-site scriptingPlatforms Affected:BD Alaris Point-of-Care Unit (PCU) Model 8015 12.1.3 BD Alaris Guardrails Editor 12.1.2...

Kofax Power PDF code execution | CVE-2023-37337

July 15, 2023

NAME__________Kofax Power PDF code executionPlatforms Affected:Kofax Power PDF 4.1Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Kofax Power PDF could allow a remote attacker to...

Palo Alto Networks PAN-OS information disclosure | CVE-2023-38046

July 15, 2023

NAME__________Palo Alto Networks PAN-OS information disclosurePlatforms Affected:Palo Alto Networks PAN-OS 10.2 Palo Alto Networks PAN-OS 11.0Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Palo Alto...

WP Mail Logging plugin for WordPress cross-site scripting | CVE-2023-3081

July 15, 2023

NAME__________WP Mail Logging plugin for WordPress cross-site scriptingPlatforms Affected:WP Mail Logging Team WP Mail Logging Team WP Mail Logging plugin...

Multiple BD Alaris system products information disclosure | CVE-2023-30565

July 15, 2023

NAME__________Multiple BD Alaris system products information disclosurePlatforms Affected:BD Alaris Point-of-Care Unit (PCU) Model 8015 12.1.3 BD Alaris Guardrails Editor 12.1.2...

Kofax Power PDF information disclosure | CVE-2023-37357

July 15, 2023

NAME__________Kofax Power PDF information disclosurePlatforms Affected:Kofax Power PDF 4.1Risk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Kofax Power PDF could allow a remote attacker to...

FluentSMTP plugin for WordPress cross-site scripting | CVE-2023-3087

July 15, 2023

NAME__________FluentSMTP plugin for WordPress cross-site scriptingPlatforms Affected:FluentSMTP & WPManageNinja Team FluentSMTP plugin for WordPress 2.2.4Risk Level:7.2Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________FluentSMTP plugin for...

Kofax Power PDF buffer overflow | CVE-2023-37335

July 15, 2023

NAME__________Kofax Power PDF buffer overflowPlatforms Affected:Kofax Power PDF 4.1Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Kofax Power PDF is vulnerable to a heap-based buffer...

Kofax Power PDF code execution | CVE-2023-37350

July 15, 2023

Kofax Power PDF code execution | CVE-2023-38088

July 15, 2023

Microsoft Edge for Android (Chromium-based) tampering | CVE-2023-36888

July 15, 2023

NAME__________Microsoft Edge for Android (Chromium-based) tamperingPlatforms Affected:Microsoft Edge for AndroidRisk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge for Android (Chromium-based) is vulnerable to...

Month: July 2023

khodakhah NodCMS cross-site scripting | CVE-2023-3641

Google Android denial of service | CVE-2023-21243

POST SMTP Mailer plugin for WordPress cross-site scripting | CVE-2023-3082

Multiple BD Alaris system products cross-site scripting | CVE-2023-30564

Kofax Power PDF code execution | CVE-2023-37337

Palo Alto Networks PAN-OS information disclosure | CVE-2023-38046

WP Mail Logging plugin for WordPress cross-site scripting | CVE-2023-3081

Multiple BD Alaris system products information disclosure | CVE-2023-30565

Kofax Power PDF information disclosure | CVE-2023-37357

FluentSMTP plugin for WordPress cross-site scripting | CVE-2023-3087

Kofax Power PDF buffer overflow | CVE-2023-37335

Kofax Power PDF code execution | CVE-2023-37350

Kofax Power PDF code execution | CVE-2023-38088

Microsoft Edge for Android (Chromium-based) tampering | CVE-2023-36888

AC Repair and Services System SQL Injection | CVE-2023-3658

Honeywell Experion PKS, LX, and PlantCruise denial of service | CVE-2023-24480

AC Repair and Services System cross-site scripting | CVE-2023-3659

Kofax Power PDF buffer overflow | CVE-2023-38093

Kofax Power PDF code execution | CVE-2023-37333

Kofax Power PDF information disclosure | CVE-2023-38078

Kofax Power PDF code execution | CVE-2023-38091

Kofax Power PDF buffer overflow | CVE-2023-38092

Kofax Power PDF code execution | CVE-2023-37347

Kofax Power PDF buffer overflow | CVE-2023-38090

[INCRANSOM] – Ransomware Victim: Darlington EMS

[INCRANSOM] – Ransomware Victim: Schuck-Gruppe

[APT73] – Ransomware Victim: gureco[.]pl

[APT73] – Ransomware Victim: lgpunjab[.]gov[.]in

[INCRANSOM] – Ransomware Victim: IPE Engwicht

You may have missed