Year: 2023

CISA: VMware Releases Security Advisory for vCenter Server

October 29, 2023

VMware Releases Security Advisory for vCenter Server VMware released a security advisory for vulnerabilities (CVE-2023-34048, CVE-2023-34056) affecting the VMware vCenter...

CISA: CISA Updates Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities

October 29, 2023

CISA Updates Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities Today, CISA updated its guidance addressing two vulnerabilities, CVE-2023-20198...

CISA: Mozilla Releases Security Advisories for Multiple Products

October 29, 2023

Mozilla Releases Security Advisories for Multiple Products Mozilla has released security updates to address vulnerabilities in Firefox and Thunderbird. A...

CISA: CISA Releases One Industrial Control Systems Advisory

October 29, 2023

CISA Releases One Industrial Control Systems Advisory CISA released one Industrial Control Systems (ICS) advisory on October 24, 2023. This...

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

October 29, 2023

CISA Adds One Known Exploited Vulnerability to Catalog CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based...

CISA: Apple Releases Security Advisories for Multiple Products

October 29, 2023

Apple Releases Security Advisories for Multiple Products Apple has released security updates to address vulnerabilities in multiple products. A cyber...

CISA: CISA Updates Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities With Additional Releases

October 29, 2023

CISA Updates Guidance for Addressing Cisco IOS XE Web UI Vulnerabilities With Additional Releases Today, CISA updated its guidance addressing...

CISA: CISA Releases Nine Industrial Control Systems Advisories

October 29, 2023

CISA Releases Nine Industrial Control Systems Advisories CISA released nine Industrial Control Systems (ICS) advisories on October 26, 2023. These...

CISA: CISA Announces Launch of Logging Made Easy

October 29, 2023

CISA Announces Launch of Logging Made Easy Today, CISA announces the launch of a new version of Logging Made Easy (LME)(link...

US-CERT Vulnerability Summary for the Week of October 16, 2023

October 28, 2023

High VulnerabilitiesPrimary Vendor -- ProductDescriptionPublishedCVSS ScoreSource & Patch Info1e -- platformAffected 1E Platform versions have a Blind SQL Injection vulnerability...

570b3538e1b510cdd462ecc42abf43f326213317654d2a46fbfcb13b6300d5bb

CloudPulse – AWS Cloud Landscape Search Engine

October 28, 2023

During the reconnaissance phase, an attacker searches for any information about his target to create a profile that will later...

HackerOne Bug Bounty Disclosure: b-security-bug-https-bugzilla-mozilla-org-oauth-authorize-crlf-header-injection-via-redirect-uri-parameter-b-oja

October 28, 2023

Company Name: b'Mozilla Critical Services' Company HackerOne URL: https://hackerone.com/mozilla_critical_services Submitted By:b'oja'Link to Submitters Profile:https://hackerone.com/b'oja' Report Title:b'Security bug https://bugzilla.mozilla.org/oauth/authorize - CRLF...