New JavaScript Malware Targeted 50,000+ Users at Dozens of Banks Worldwide
A new piece of JavaScript malware has been observed attempting to steal users' online banking account credentials as part of...
Month: December 2023
3,500 Arrested in Global Operation HAECHI-IV Targeting Financial Criminals
A six-month-long international police operation codenamed HAECHI-IV has resulted in the arrests of nearly 3,500 individuals and seizures worth $300...
Remote Encryption Attacks Surge: How One Vulnerable Device Can Spell Disaster
Ransomware groups are increasingly switching to remote encryption in their attacks, marking a new escalation in tactics adopted by financially...
Product Explained: Memcyco’s Real-Time Defense Against Website Spoofing
Hands-On Review: Memcyco's Threat Intelligence Solution Website impersonation, also known as brandjacking or website spoofing, has emerged as a significant...
Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild – Update ASAP
Google has rolled out security updates for the Chrome web browser to address a high-severity zero-day flaw that it said...
Alert: Chinese-Speaking Hackers Pose as UAE Authority in Latest Smishing Wave
The Chinese-speaking threat actors behind Smishing Triad have been observed masquerading as the United Arab Emirates Federal Authority for Identity...
Integrate Google Drive Plugin for WordPress cross-site request forgery | CVE-2023-49769
NAME__________Integrate Google Drive Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Integrate Google Drive Plugin for WordPress 2.2.24Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Integrate...
Block for Font Awesome Plugin for WordPress cross-site request forgery | CVE-2023-49751
NAME__________Block for Font Awesome Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Block for Font Awesome Plugin for WordPress 1.4.0Risk Level:4.3Exploitability:UnprovenConsequences:Gain...
Biteship Plugin for WordPress cross-site scripting | CVE-2023-49767
NAME__________Biteship Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Biteship Plugin for WordPress 2.2.24Risk Level:5.9Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Biteship Plugin for WordPress is vulnerable...
Apache Dubbo code execution | CVE-2023-29234
NAME__________Apache Dubbo code executionPlatforms Affected:Apache Dubbo 3.1.0 Apache Dubbo 3.1.10 Apache Dubbo 3.2.0 Apache Dubbo 3.2.4Risk Level:5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Apache Dubbo...
Adobe Experience Manager cross-site scripting | CVE-2023-51457
NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...
Adobe Experience Manager cross-site scripting | CVE-2023-51460
NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...
HPE Integrated Lights-Out security bypass | CVE-2023-50272
NAME__________HPE Integrated Lights-Out security bypassPlatforms Affected:HPE Integrated Lights-Out 5 (iLO 5) HPE Integrated Lights-Out 6 (iLO 6)Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________HPE...
Hitachi Energy RTU500 series products denial of service | CVE-2023-6711
NAME__________Hitachi Energy RTU500 series products denial of servicePlatforms Affected:Hitachi Energy RTU500 series CMU Firmware 13.3.2 Hitachi Energy RTU500 series CMU...
Adobe Experience Manager cross-site scripting | CVE-2023-51458
NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...
Adobe Experience Manager cross-site scripting | CVE-2023-51459
NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...
Subnet Solutions PowerSYSTEM Center privilege escalation | CVE-2023-6631
NAME__________Subnet Solutions PowerSYSTEM Center privilege escalationPlatforms Affected:Subnet Solutions PowerSYSTEM Center 5.0 Subnet Solutions PowerSYSTEM Center 5.16Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Subnet Solutions...
Adobe Experience Manager cross-site scripting | CVE-2023-51462
NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...
EFACEC UC 500E information disclosure | CVE-2023-50706
NAME__________EFACEC UC 500E information disclosurePlatforms Affected:EFACEC UC 500E 10.1.0Risk Level:4.1Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________EFACEC UC 500E could allow a physical authenticated attacker...
IBM Informix JDBC code execution | CVE-2023-35895
NAME__________IBM Informix JDBC code executionPlatforms Affected:IBM Informix JDBC 4.10 IBM Informix JDBC 4.50Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________IBM Informix JDBC Driver 4.10...
Apache Pulsar WebSocket Proxy denial of service | CVE-2023-37544
NAME__________Apache Pulsar WebSocket Proxy denial of servicePlatforms Affected:Apache Pulsar WebSocket Proxy 2.8.0 Apache Pulsar WebSocket Proxy 2.9.0 Apache Pulsar WebSocket...
Foxit PDF Reader code execution | CVE-2023-51556
NAME__________ Foxit PDF Reader code execution Platforms Affected:Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Foxit PDF Reader could allow a remote attacker to execute...
Adobe Experience Manager cross-site scripting | CVE-2023-51461
NAME__________Adobe Experience Manager cross-site scriptingPlatforms Affected:Adobe Experience Manager Cloud Service (CS) Adobe Experience Manager 6.5.18.0Risk Level:5.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Adobe Experience Manager...
Foxit PDF Reader information disclosure | CVE-2023-51555
NAME__________Foxit PDF Reader information disclosurePlatforms Affected:Foxit PDF Reader 2023.2.0.21408Risk Level:3.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Foxit PDF Reader could allow a remote attacker to...
