Month: November 2023

Cubecart command execution | CVE-2023-47675

November 23, 2023

NAME__________Cubecart command executionPlatforms Affected:CubeCart CubeCart 6.5.2Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Cubecart could allow a remote attacker to execute arbitrary commands on the...

Zimbra Collaboration Suite cross-site scripting | CVE-2023-43102

November 23, 2023

NAME__________Zimbra Collaboration Suite cross-site scriptingPlatforms Affected:Zimbra Zimbra Collaboration SuiteRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Zimbra Collaboration Suite is vulnerable to cross-site scripting, caused...

ANAC XML Bandi di Gara Plugin for WordPress cross-site scripting | CVE-2023-47656

November 23, 2023

NAME__________ANAC XML Bandi di Gara Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress ANAC XML Bandi di Gara Plugin for WordPress 7.5Risk...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39546

November 23, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

Honeywell ProWatch code execution | CVE-2023-6179

November 23, 2023

NAME__________Honeywell ProWatch code executionPlatforms Affected:Honeywell ProWatch 4.5Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Honeywell ProWatch could allow a local authenticated attacker to execute arbitrary...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39545

November 23, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39547

November 23, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39544

November 23, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

Actueel Financieel Nieuws Denk Internet Solutions Plugin for WordPress cross-site scripting | CVE-2023-47554

November 23, 2023

NAME__________Actueel Financieel Nieuws Denk Internet Solutions Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Actueel Financieel Nieuws Denk Internet Solutions...

Cubecart cross-site directory traversal | CVE-2023-47283

November 23, 2023

NAME__________Cubecart cross-site directory traversalPlatforms Affected:CubeCart CubeCart 6.5.2Risk Level:2.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Cubecart could allow a remote attacker to traverse directories on the...

Cubecart cross-site directory traversal | CVE-2023-42428

November 23, 2023

NAME__________Cubecart cross-site directory traversalPlatforms Affected:CubeCart CubeCart 6.5.2Risk Level:2.7Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Cubecart could allow a remote attacker to traverse directories on the...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe file upload | CVE-2023-39548

November 23, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe file uploadPlatforms Affected:NEC CLUSTERPRO X...

OpenHarmony information disclosure | CVE-2023-42774

November 23, 2023

NAME__________OpenHarmony information disclosurePlatforms Affected:OpenHarmony OpenHarmony 3.2.2Risk Level:6.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________OpenHarmony could allow a local attacker to obtain sensitive information, caused by...

Month: November 2023

Cubecart command execution | CVE-2023-47675

Zimbra Collaboration Suite cross-site scripting | CVE-2023-43102

ANAC XML Bandi di Gara Plugin for WordPress cross-site scripting | CVE-2023-47656

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39546

Honeywell ProWatch code execution | CVE-2023-6179

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39545

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39547

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39544

Actueel Financieel Nieuws Denk Internet Solutions Plugin for WordPress cross-site scripting | CVE-2023-47554

Cubecart cross-site directory traversal | CVE-2023-47283

Cubecart cross-site directory traversal | CVE-2023-42428

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe file upload | CVE-2023-39548

OpenHarmony information disclosure | CVE-2023-42774

GNU GnuTLS information disclosure | CVE-2023-5981

IBM Cloud Pak for Security information disclosure | CVE-2022-36777

Nextcloud Server server-side request forgery | CVE-2023-48306

OpenHarmony code execution | CVE-2023-6045

Yoast SEO: Local Plugin for WordPress cross-site request forgery | CVE-2023-28780

BZScore Live Score plugin for WordPress cross-site scripting | CVE-2023-47654

Nextcloud Server HTML injection | CVE-2023-48301

Nextcloud Mail server-side request forgery | CVE-2023-48307

AXIS OS denial of service | CVE-2023-21416

Mercedes me IOS APP information disclosure | CVE-2023-47392

Linux Kernel denial of service | CVE-2023-6238

[BLACKBASTA] – Ransomware Victim: furmanos[.]com

[BLACKBASTA] – Ransomware Victim: medion[.]com

[BLACKBASTA] – Ransomware Victim: grimaldialliance[.]com

[FOG] – Ransomware Victim: Reliance Connects (relianceconnects[.]com)

[AKIRA] – Ransomware Victim: Archie Cochrane Ford

You may have missed