Month: October 2023

MediaTek Chipsets privilege escalation | CVE-2023-32822

October 3, 2023

NAME__________MediaTek Chipsets privilege escalationPlatforms Affected:MediaTek Android MediaTek ChipsetsRisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________MediaTek Chipsets could allow a local authenticated attacker to gain...

eeroOS denial of service | CVE-2023-5324

October 3, 2023

NAME__________eeroOS denial of servicePlatforms Affected:eero eeroOS 6.16.4-11Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________eeroOS is vulnerable to a denial of service, caused by...

Best Courier Management System cross-site scripting | CVE-2023-5302

October 3, 2023

NAME__________Best Courier Management System cross-site scriptingPlatforms Affected:Sourcecodester Best Courier Management System 1.0Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Best Courier Management System is vulnerable...

PDF-XChange Editor information disclosure | CVE-2023-42106

October 3, 2023

NAME__________PDF-XChange Editor information disclosurePlatforms Affected:Tracker Software PDF-XChange EditorRisk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________PDF-XChange Editor could allow a remote attacker to obtain sensitive...

Linux Kernel information disclosure | CVE-2023-39193

October 3, 2023

NAME__________Linux Kernel information disclosurePlatforms Affected:Linux KernelRisk Level:5.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Linux Kernel could allow a local authenticated attacker to obtain sensitive information,...

Dolibarr ERP/CRM cross-site scripting | CVE-2023-5323

October 3, 2023

NAME__________Dolibarr ERP/CRM cross-site scriptingPlatforms Affected:Dolibarr Dolibarr ERP/CRM 3.0.0 Dolibarr Dolibarr ERP/CRM 3.3.1 Dolibarr Dolibarr ERP/CRM 3.5.3 Dolibarr Dolibarr ERP/CRM 3.9.0...

WebM Project Libvpx denial of service | CVE-2023-44488

October 3, 2023

NAME__________WebM Project Libvpx denial of servicePlatforms Affected:WebM Project Libvpx 1.13.0Risk Level:7.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________WebM Project Libvpx is vulnerable to a...

TTSPlanning SQL injection | CVE-2023-5300

October 3, 2023

NAME__________TTSPlanning SQL injectionPlatforms Affected:TTSPlanning TTSPlanningRisk Level:6.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________TTSPlanning is vulnerable to SQL injection. A remote authenticated attacker could send specially...

MediaTek Chipsets privilege escalation | CVE-2023-32823

October 3, 2023

Ministry of Health, Labour and Welfare FD Application XML external entity injection | CVE-2023-42132

October 3, 2023

NAME__________Ministry of Health, Labour and Welfare FD Application XML external entity injectionPlatforms Affected:Ministry of Health Labour and Welfare FD Application...

Linux Kernel denial of service | CVE-2023-42754

October 3, 2023

NAME__________Linux Kernel denial of servicePlatforms Affected:Linux Kernel 6.1 Linux Kernel 6.2.16Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Linux Kernel is vulnerable to a...

MediaTek Chipsets privilege escalation | CVE-2023-32826

October 3, 2023

MediaTek Chipsets privilege escalation | CVE-2023-32828

October 3, 2023

MediaTek Chipsets information disclosure | CVE-2023-32819

October 3, 2023

NAME__________MediaTek Chipsets information disclosurePlatforms Affected:MediaTek Android MediaTek ChipsetsRisk Level:4.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________MediaTek Chipsets could allow a local authenticated attacker to obtain...

Month: October 2023

MediaTek Chipsets privilege escalation | CVE-2023-32822

eeroOS denial of service | CVE-2023-5324

Best Courier Management System cross-site scripting | CVE-2023-5302

PDF-XChange Editor information disclosure | CVE-2023-42106

Linux Kernel information disclosure | CVE-2023-39193

Dolibarr ERP/CRM cross-site scripting | CVE-2023-5323

WebM Project Libvpx denial of service | CVE-2023-44488

TTSPlanning SQL injection | CVE-2023-5300

MediaTek Chipsets privilege escalation | CVE-2023-32823

Ministry of Health, Labour and Welfare FD Application XML external entity injection | CVE-2023-42132

Linux Kernel denial of service | CVE-2023-42754

MediaTek Chipsets privilege escalation | CVE-2023-32826

MediaTek Chipsets privilege escalation | CVE-2023-32828

MediaTek Chipsets information disclosure | CVE-2023-32819

MediaTek Chipsets denial of service | CVE-2023-32820

MediaTek Chipsets privilege escalation | CVE-2023-32830

MediaTek Chipsets privilege escalation | CVE-2023-32827

MediaTek Chipsets privilege escalation | CVE-2023-32824

8 Base Ransomware Victim: Ted Pella Inc[.]

8 Base Ransomware Victim: Sabian Inc

BianLian Ransomware Victim: Saint Mark Catholic Church

BianLian Ransomware Victim: Kramer Tree Specialists, Inc

BianLian Ransomware Victim: F Hinds

BianLian Ransomware Victim: Lutheran Church and Preschool

Red Teaming vs. Blue Teaming in Cyber Security Explored

UK Scam Losses Surge 50% Yearly, Reaching £11.4 Billion

Struggling with Shadow AI: Over a Third of Firms Face Challenges

Aggressive Chinese APT Group Earth Estries Unleashes New Backdoors on Governments

Darknet Services Driving Holiday Scams: Protect Your E-Commerce Business

You may have missed