Vulnerabilities

Microsoft Windows Mobile Device Management privilege escalation | CVE-2023-38186

August 9, 2023

NAME__________Microsoft Windows Mobile Device Management privilege escalationPlatforms Affected:Microsoft Windows Server 2022 Microsoft Windows Server (Server Core installation) 2022 Microsoft Windows...

Microsoft Windows Kernel privilege escalation | CVE-2023-35386

August 9, 2023

NAME__________Microsoft Windows Kernel privilege escalationPlatforms Affected:Microsoft Windows 10 x32 Microsoft Windows Server 2016 Microsoft Windows Server 2019 Microsoft Windows 10...

Multiple Intel Processors information disclosure | CVE-2022-40982

August 9, 2023

NAME__________Multiple Intel Processors information disclosurePlatforms Affected:Intel Processor familiesRisk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Multiple Intel Processors could allow a local authenticated attacker to...

Microsoft Dynamics Business Central privilege escalation | CVE-2023-38167

August 9, 2023

NAME__________Microsoft Dynamics Business Central privilege escalationPlatforms Affected:Microsoft Dynamics 365 Business Central 2023 Release Wave 1Risk Level:7.2Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Microsoft Dynamics Business...

Microsoft Windows Message Queuing denial of service | CVE-2023-36912

August 9, 2023

NAME__________Microsoft Windows Message Queuing denial of servicePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x32...

Microsoft Outlook spoofing | CVE-2023-36893

August 9, 2023

NAME__________Microsoft Outlook spoofingPlatforms Affected:Microsoft Outlook 2016 x32 Microsoft Outlook 2016 x64 Microsoft Outlook 2013 SP1 x32 Microsoft Outlook 2013 SP1...

Fortinet FortiOS buffer overflow | CVE-2023-29182

August 9, 2023

NAME__________Fortinet FortiOS buffer overflowPlatforms Affected:Fortinet FortiOS 6.2.0 Fortinet FortiOS 6.4.0 Fortinet FortiOS 7.0.0 Fortinet FortiOS 7.0.3Risk Level:6.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Fortinet FortiOS...

Siemens Solid Edge code execution | CVE-2023-39181

August 9, 2023

NAME__________Siemens Solid Edge code executionPlatforms Affected:Siemens Solid Edge SE2023 VX.223.0 Update 6Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siemens Solid Edge could allow a...

Microsoft Windows Hyper-V information disclosure | CVE-2023-36908

August 9, 2023

NAME__________Microsoft Windows Hyper-V information disclosurePlatforms Affected:Microsoft Windows Server 2012 Microsoft Windows Server 2012 R2 Microsoft Windows 10 x64 Microsoft Windows...

Intel NUC BIOS firmware privilege escalation | CVE-2023-34438

August 9, 2023

NAME__________Intel NUC BIOS firmware privilege escalationPlatforms Affected:Intel NUC Kit NUC7i3BNH Intel NUC Kit NUC7i3BNK Intel NUC Kit NUC7i3BNHX1 Intel NUC...

Adobe Acrobat and Adobe Reader code execution | CVE-2023-38225

August 9, 2023

NAME__________Adobe Acrobat and Adobe Reader code executionPlatforms Affected:Adobe Acrobat DC 23.003.20244 Adobe Acrobat Reader DC 23.003.20244 Adobe Acrobat 2020 20.005.30467...

Daily Vulnerability Trends: Wed Aug 09 2023

August 9, 2023

Daily Vulnerability Trends (sourced from VulnMon) CVE NAMECVE DescriptionCVE-2023-39526PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10,...

VMware Horizon Server request smuggling | CVE-2023-34037

August 8, 2023

NAME__________VMware Horizon Server request smugglingPlatforms Affected:VMware Horizon Server 2303 VMware Horizon Server 2212 VMware Horizon Server 2209 VMware Horizon Server...

VMware Horizon Server information disclosure | CVE-2023-34038

August 8, 2023

NAME__________VMware Horizon Server information disclosurePlatforms Affected:VMware Horizon Server 2303 VMware Horizon Server 2212 VMware Horizon Server 2209 VMware Horizon Server...

Cloudflare odoh-rs denial of service | CVE-2023-3766

August 8, 2023

NAME__________Cloudflare odoh-rs denial of servicePlatforms Affected:Cloudflare odoh-rs 1.0.1Risk Level:5.9Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Cloudflare odoh-rs is vulnerable to a denial of service,...

PHP information disclosure | CVE-2023-3823

August 8, 2023

NAME__________PHP information disclosurePlatforms Affected:PHP PHP 8.1.21 PHP PHP 8.0.29Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________PHP could allow a remote attacker to obtain sensitive...

Codesys products denial of service | CVE-2023-37555

August 8, 2023

NAME__________Codesys products denial of servicePlatforms Affected:CODESYS Control for BeagleBone SL CODESYS Control for emPC-A/iMX6 SL CODESYS Control for IOT2000 SL...

Codesys products denial of service | CVE-2023-37552

August 8, 2023

NAME__________Codesys products denial of servicePlatforms Affected:CODESYS Control for BeagleBone SL CODESYS Control for emPC-A/iMX6 SL CODESYS Control for IOT2000 SL...

Fabasoft Cloud Enterprise Client privilege escalation | CVE-2023-32764

August 8, 2023

NAME__________Fabasoft Cloud Enterprise Client privilege escalationPlatforms Affected:Fabasoft Cloud Enterprise Client 23.3.0.130Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Fabasoft Cloud Enterprise Client could allow a...

PHPJabbers Night Club Booking cross-site scripting | CVE-2023-4114

August 8, 2023

NAME__________PHPJabbers Night Club Booking cross-site scriptingPlatforms Affected:PHPJabbers Night Club Booking 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________PHPJabbers Night Club Booking is vulnerable to...

Codesys products security bypass | CVE-2023-37551

August 8, 2023

NAME__________Codesys products security bypassPlatforms Affected:CODESYS Control for BeagleBone SL CODESYS Control for emPC-A/iMX6 SL CODESYS Control for IOT2000 SL CODESYS...

Codesys products denial of service | CVE-2023-37558

August 8, 2023

NAME__________Codesys products denial of servicePlatforms Affected:CODESYS Control for BeagleBone SL CODESYS Control for emPC-A/iMX6 SL CODESYS Control for IOT2000 SL...

Codesys products denial of service | CVE-2023-37548

August 8, 2023

NAME__________Codesys products denial of servicePlatforms Affected:CODESYS Control for BeagleBone SL CODESYS Control for emPC-A/iMX6 SL CODESYS Control for IOT2000 SL...

PHPJabbers Service Booking Script cross-site scripting | CVE-2023-4113

August 8, 2023

NAME__________PHPJabbers Service Booking Script cross-site scriptingPlatforms Affected:PHPJabbers Service Booking Script 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________PHPJabbers Service Booking Script is vulnerable to...

Vulnerabilities

Microsoft Windows Mobile Device Management privilege escalation | CVE-2023-38186

Microsoft Windows Kernel privilege escalation | CVE-2023-35386

Multiple Intel Processors information disclosure | CVE-2022-40982

Microsoft Dynamics Business Central privilege escalation | CVE-2023-38167

Microsoft Windows Message Queuing denial of service | CVE-2023-36912

Microsoft Outlook spoofing | CVE-2023-36893

Fortinet FortiOS buffer overflow | CVE-2023-29182

Siemens Solid Edge code execution | CVE-2023-39181

Microsoft Windows Hyper-V information disclosure | CVE-2023-36908

Intel NUC BIOS firmware privilege escalation | CVE-2023-34438

Adobe Acrobat and Adobe Reader code execution | CVE-2023-38225

Daily Vulnerability Trends: Wed Aug 09 2023

VMware Horizon Server request smuggling | CVE-2023-34037

VMware Horizon Server information disclosure | CVE-2023-34038

Cloudflare odoh-rs denial of service | CVE-2023-3766

PHP information disclosure | CVE-2023-3823

Codesys products denial of service | CVE-2023-37555

Codesys products denial of service | CVE-2023-37552

Fabasoft Cloud Enterprise Client privilege escalation | CVE-2023-32764

PHPJabbers Night Club Booking cross-site scripting | CVE-2023-4114

Codesys products security bypass | CVE-2023-37551

Codesys products denial of service | CVE-2023-37558

Codesys products denial of service | CVE-2023-37548

PHPJabbers Service Booking Script cross-site scripting | CVE-2023-4113

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

[QILIN] – Ransomware Victim: Disseny Dental

Cobalt Strike Beacon Detected – 196[.]251[.]69[.]253:4433

Cobalt Strike Beacon Detected – 124[.]223[.]114[.]203:4433

Cobalt Strike Beacon Detected – 8[.]137[.]114[.]210:4433

You may have missed