Month: October 2023

Online Art Gallery Project SQL injection | CVE-2023-44162

October 31, 2023

NAME__________Online Art Gallery Project SQL injectionPlatforms Affected:Online Art Gallery Project Online Art Gallery Project 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Online Art Gallery...

SugarCRM code execution |

October 31, 2023

NAME__________SugarCRM code executionPlatforms Affected:SugarCRM SugarCRM 12.0.3 SugarCRM SugarCRM 13.0.1Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________SugarCRM could allow a remote attacker to execute arbitrary...

Thumbnail carousel slider plugin for WordPress cross-site request forgery | CVE-2023-5821

October 31, 2023

NAME__________Thumbnail carousel slider plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Thumbnail carousel slider plugin for WordPress 1.0 WordPress Thumbnail carousel...

ZenTao information disclosure | CVE-2023-46376

October 31, 2023

NAME__________ZenTao information disclosurePlatforms Affected:ZenTao ZenTao 4.1.3Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________ZenTao could allow a remote attacker to obtain sensitive information, caused by...

ZPE Systems Nodegrid OS command execution | CVE-2023-43322

October 31, 2023

NAME__________ZPE Systems Nodegrid OS command executionPlatforms Affected:ZPE Systems Nodegrid OS 5.8.10 ZPE Systems Nodegrid OS 5.10.3Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ZPE Systems...

Online Art Gallery Project SQL injection | CVE-2023-43738

October 31, 2023

Online Art Gallery Project SQL injection | CVE-2023-44376

October 31, 2023

Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code execution | CVE-2023-39936

October 31, 2023

NAME__________Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code executionPlatforms Affected:Ashlar-Vellum Cobalt 1204.77 Ashlar-Vellum Graphite 13.0.48 Ashlar-Vellum Xenon 1204.77...

Animated Counters plugin for WordPress cross-site scripting | CVE-2023-5774

October 31, 2023

NAME__________Animated Counters plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Animated Counters plugin for WordPress 1.7 WordPress Animated Counters plugin for WordPress...

DragonPath 707GR1 cross-site scripting | CVE-2023-5789

October 31, 2023

NAME__________DragonPath 707GR1 cross-site scriptingPlatforms Affected:DragonPath 707GR1Risk Level:2.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________DragonPath 707GR1 is vulnerable to cross-site scripting, caused by improper validation of...

Online Art Gallery Project SQL injection | CVE-2023-44375

October 31, 2023

BaserCMS cross-site request forgery | CVE-2023-43649

October 31, 2023

NAME__________BaserCMS cross-site request forgeryPlatforms Affected:BaserCMS BaserCMS 1.6.13.1 BaserCMS BaserCMS 1.6.11.4 BaserCMS BaserCMS 1.6.15 baserCMS baserCMS 3.0.7 baserCMS baserCMS 3.0.8 baserCMS...

ZenTao cross-site scripting | CVE-2023-46374

October 31, 2023

NAME__________ZenTao cross-site scriptingPlatforms Affected:ZenTao ZenTao 4.1.3Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________ZenTao is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

BaserCMS cross-site scripting | CVE-2023-29009

October 31, 2023

NAME__________BaserCMS cross-site scriptingPlatforms Affected:BaserCMS BaserCMS 1.6.13.1 BaserCMS BaserCMS 1.6.11.4 BaserCMS BaserCMS 1.6.15 baserCMS baserCMS 3.0.7 baserCMS baserCMS 3.0.8 baserCMS baserCMS...

Peppermint directory traversal | CVE-2023-46864

October 31, 2023

NAME__________Peppermint directory traversalPlatforms Affected:Peppermint Labs Peppermint 0.2.4Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Peppermint could allow a remote attacker to traverse directories on the...

Month: October 2023

Online Art Gallery Project SQL injection | CVE-2023-44162

SugarCRM code execution |

Thumbnail carousel slider plugin for WordPress cross-site request forgery | CVE-2023-5821

ZenTao information disclosure | CVE-2023-46376

ZPE Systems Nodegrid OS command execution | CVE-2023-43322

Online Art Gallery Project SQL injection | CVE-2023-43738

Online Art Gallery Project SQL injection | CVE-2023-44376

Ashlar-Vellum Cobalt, Graphite, Xenon, Argon, Lithium, and Cobalt Share code execution | CVE-2023-39936

Animated Counters plugin for WordPress cross-site scripting | CVE-2023-5774

DragonPath 707GR1 cross-site scripting | CVE-2023-5789

Online Art Gallery Project SQL injection | CVE-2023-44375

BaserCMS cross-site request forgery | CVE-2023-43649

ZenTao cross-site scripting | CVE-2023-46374

BaserCMS cross-site scripting | CVE-2023-29009

Peppermint directory traversal | CVE-2023-46864

BaserCMS cross-site scripting | CVE-2023-43648

Peppermint directory traversal | CVE-2023-46863

Cacti SQL injection | CVE-2023-46490

BaserCMS cross-site scripting | CVE-2023-43647

BaserCMS file upload | CVE-2023-43792

Apache Airflow Celery provider and Apache Airflow information disclosure | CVE-2023-46215

Knight Ransomware Victim: Veneto Transportes

Canada Bans WeChat and Kaspersky Apps On Government Devices

Huawei, Vivo phones tag Google app as TrojanSMS-PA malware

[MEDUSA] – Ransomware Victim: Albion College

[FUNKSEC] – Ransomware Victim: 10M israeli data for sell

[FUNKSEC] – Ransomware Victim: asiapacfish[.]org

[FOG] – Ransomware Victim: Gallade Chemical (galladechem[.]com)

[AKIRA] – Ransomware Victim: Billet Precision

You may have missed