Month: November 2023

Microsoft Edge (Chromium-based) code execution | CVE-2023-36008

November 18, 2023

NAME__________Microsoft Edge (Chromium-based) code executionPlatforms Affected:Microsoft Edge (Chromium-based) 118.0 Microsoft Edge (Chromium-based) 119.0Risk Level:6.6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Microsoft Edge (Chromium-based) could allow...

Wireshark denial of service | CVE-2023-6174

November 18, 2023

NAME__________Wireshark denial of servicePlatforms Affected:Wireshark Wireshark 4.0.10Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Wireshark is vulnerable to a denial of service, caused by...

AMD Processors security bypass | CVE-2023-20519

November 18, 2023

NAME__________AMD Processors security bypassPlatforms Affected:AMD 3rd Generation EPYC AMD 4th Generation EPYCRisk Level:3.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________AMD Processors could allow a local...

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family weak security | CVE-2023-44319

November 18, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family weak securityPlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE XR-300WG...

MISP unspecified | CVE-2023-48658

November 18, 2023

NAME__________MISP unspecifiedPlatforms Affected:MISP MISP 2.4.167 MISP MISP 2.4.168 MISP MISP 2.4.169 MISP MISP 2.4.171 MISP MISP 2.4.172 MISP MISP 2.4.174...

OpenNDS Captive Portal denial of service | CVE-2023-38322

November 18, 2023

NAME__________OpenNDS Captive Portal denial of servicePlatforms Affected:OpenNDS Captive Portal 10.1.1 OpenNDS Captive Portal 10.1.0 OpenNDS Captive Portal 9.10.0Risk Level:3.7Exploitability:UnprovenConsequences:Denial of...

OpenNDS Captive Portal denial of service | CVE-2023-38315

November 18, 2023

NAME__________OpenNDS Captive Portal denial of servicePlatforms Affected:OpenNDS Captive Portal 10.1.1 OpenNDS Captive Portal 10.1.0 OpenNDS Captive Portal 9.10.0Risk Level:5.3Exploitability:UnprovenConsequences:Denial of...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39544

November 18, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39547

November 18, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

MISP unspecified | CVE-2023-48656

November 18, 2023

NAME__________MISP unspecifiedPlatforms Affected:MISP MISP 2.4.167 MISP MISP 2.4.168 MISP MISP 2.4.169 MISP MISP 2.4.171 MISP MISP 2.4.172 MISP MISP 2.4.174...

Code Projects Inventory Management cross-site scripting | CVE-2023-46580

November 18, 2023

NAME__________Code Projects Inventory Management cross-site scriptingPlatforms Affected:Code Projects Inventory Management 1.0Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Code Projects Inventory Management is vulnerable to...

MISP unspecified | CVE-2023-48655

November 18, 2023

NAME__________MISP unspecifiedPlatforms Affected:MISP MISP 2.4.167 MISP MISP 2.4.168 MISP MISP 2.4.169 MISP MISP 2.4.171 MISP MISP 2.4.172 MISP MISP 2.4.174...

OpenNDS Captive Portal weak security | CVE-2023-38324

November 18, 2023

NAME__________OpenNDS Captive Portal weak securityPlatforms Affected:OpenNDS Captive Portal 10.1.1 OpenNDS Captive Portal 10.1.0 OpenNDS Captive Portal 9.10.0Risk Level:6.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________OpenNDS...

Code Projects Inventory Management SQL injection | CVE-2023-46581

November 18, 2023

NAME__________Code Projects Inventory Management SQL injectionPlatforms Affected:Code Projects Inventory Management 1.0Risk Level:5.4Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Code Projects Inventory Management is vulnerable to...

OpenNDS Captive Portal denial of service | CVE-2023-38320

November 18, 2023

NAME__________OpenNDS Captive Portal denial of servicePlatforms Affected:OpenNDS Captive Portal 10.1.1 OpenNDS Captive Portal 10.1.0 OpenNDS Captive Portal 9.10.0Risk Level:5.3Exploitability:UnprovenConsequences:Denial of...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe file upload | CVE-2023-39548

November 18, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe file uploadPlatforms Affected:NEC CLUSTERPRO X...

OpenNDS Captive Portal denial of service | CVE-2023-38314

November 18, 2023

NAME__________OpenNDS Captive Portal denial of servicePlatforms Affected:OpenNDS Captive Portal 10.1.1 OpenNDS Captive Portal 10.1.0 OpenNDS Captive Portal 9.10.0Risk Level:5.3Exploitability:UnprovenConsequences:Denial of...

Dreamer CMS cross-site request forgery | CVE-2023-48020

November 18, 2023

NAME__________Dreamer CMS cross-site request forgeryPlatforms Affected:I Teach You Dreamer CMS 4.1.3Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Dreamer CMS is vulnerable to cross-site request...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39545

November 18, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

OpenNDS Captive Portal denial of service | CVE-2023-38313

November 18, 2023

Code Projects Inventory Management SQL injection | CVE-2023-46582

November 18, 2023

NAME__________Code Projects Inventory Management SQL injectionPlatforms Affected:Code Projects Inventory Management 1.0Risk Level:3.8Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Code Projects Inventory Management is vulnerable to...

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39546

November 18, 2023

NAME__________NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command executionPlatforms Affected:NEC CLUSTERPRO X...

MISP unspecified | CVE-2023-48657

November 18, 2023

NAME__________MISP unspecifiedPlatforms Affected:MISP MISP 2.4.167 MISP MISP 2.4.168 MISP MISP 2.4.169 MISP MISP 2.4.171 MISP MISP 2.4.172 MISP MISP 2.4.174...

MISP unspecified | CVE-2023-48659

November 18, 2023

NAME__________MISP unspecifiedPlatforms Affected:MISP MISP 2.4.167 MISP MISP 2.4.168 MISP MISP 2.4.169 MISP MISP 2.4.171 MISP MISP 2.4.172 MISP MISP 2.4.174...

Month: November 2023

Microsoft Edge (Chromium-based) code execution | CVE-2023-36008

Wireshark denial of service | CVE-2023-6174

AMD Processors security bypass | CVE-2023-20519

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family weak security | CVE-2023-44319

MISP unspecified | CVE-2023-48658

OpenNDS Captive Portal denial of service | CVE-2023-38322

OpenNDS Captive Portal denial of service | CVE-2023-38315

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39544

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39547

MISP unspecified | CVE-2023-48656

Code Projects Inventory Management cross-site scripting | CVE-2023-46580

MISP unspecified | CVE-2023-48655

OpenNDS Captive Portal weak security | CVE-2023-38324

Code Projects Inventory Management SQL injection | CVE-2023-46581

OpenNDS Captive Portal denial of service | CVE-2023-38320

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe file upload | CVE-2023-39548

OpenNDS Captive Portal denial of service | CVE-2023-38314

Dreamer CMS cross-site request forgery | CVE-2023-48020

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39545

OpenNDS Captive Portal denial of service | CVE-2023-38313

Code Projects Inventory Management SQL injection | CVE-2023-46582

NEC CLUSTERPRO X, NEC EXPRESSCLUSTER X, NEC CLUSTERPRO X SingleServerSafe, and NEC EXPRESSCLUSTER X SingleServerSafe command execution | CVE-2023-39546

MISP unspecified | CVE-2023-48657

MISP unspecified | CVE-2023-48659

HackerOne Bug Bounty Disclosure: share-information-of-tables-app-is-not-limited-to-affected-users-cx-fa

[RANSOMHUB] – Ransomware Victim: allconstructiongroupwv[.]com

[FOG] – Ransomware Victim: Waters Truck and Tractor (waterstruck[.]com)

[HUNTERS] – Ransomware Victim: Dorner Law & Title Services

[AKIRA] – Ransomware Victim: H2OBX Waterpark

You may have missed