CVE

Splunk Enterprise Splunk Enterprise and Splunk Cloud Platform security bypass | CVE-2023-32717

June 3, 2023

NAME__________Splunk Enterprise Splunk Enterprise and Splunk Cloud Platform security bypassPlatforms Affected:Splunk Splunk Enterprise 9.0.4 Splunk Splunk Enterprise 8.2.10 Splunk Splunk...

Splunk App for Stream privilege escalation | CVE-2023-32713

June 3, 2023

NAME__________Splunk App for Stream privilege escalationPlatforms Affected:Splunk App for Stream 8.1.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Splunk App for Stream could allow a...

Splunk App for Lookup File Editing cross-site scripting | CVE-2023-32715

June 3, 2023

NAME__________Splunk App for Lookup File Editing cross-site scriptingPlatforms Affected:Splunk App for Lookup File Editing 4.0.0Risk Level:4.7Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Splunk App for...

ToolJet cross-site scripting | CVE-2022-27979

June 3, 2023

NAME__________ToolJet cross-site scriptingPlatforms Affected:ToolJet ToolJet 1.11.0Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________ToolJet is vulnerable to cross-site scripting, caused by improper validation of user-supplied...

Splunk Enterprise and Splunk Cloud Platform information disclosure | CVE-2023-32710

June 3, 2023

NAME__________Splunk Enterprise and Splunk Cloud Platform information disclosurePlatforms Affected:Splunk Splunk Enterprise 9.0.4 Splunk Splunk Enterprise 8.2.10 Splunk Splunk Enterprise 8.1.13...

Splunk Enterprise and Splunk Cloud Platform information disclosure | CVE-2023-32709

June 3, 2023

NAME__________Splunk Enterprise and Splunk Cloud Platform information disclosurePlatforms Affected:Splunk Splunk Enterprise 9.0.4 Splunk Splunk Enterprise 8.2.10 Splunk Splunk Enterprise 8.1.13...

Faculty Evaluation System SQL injection | CVE-2023-2962

June 2, 2023

NAME__________Faculty Evaluation System SQL injectionPlatforms Affected:Sourcecodester Faculty Evaluation System 1.0Risk Level:4.7Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Faculty Evaluation System is vulnerable to SQL injection....

Pimcore directory traversal | CVE-2023-2984

June 2, 2023

NAME__________Pimcore directory traversalPlatforms Affected:Pimcore Pimcore 10.5.21Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Pimcore could allow a remote authenticated attacker to traverse directories on the...

Krayin CRM cross-site scripting | CVE-2023-2925

June 2, 2023

NAME__________Krayin CRM cross-site scriptingPlatforms Affected:Webkul Software Krayin CRM 1.2.4Risk Level:2.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Krayin CRM is vulnerable to cross-site scripting, caused by...

Advantech WebAccess/SCADA code execution | CVE-2023-2866

June 2, 2023

NAME__________Advantech WebAccess/SCADA code executionPlatforms Affected:Advantech WebAccess/SCADA 8.4.5Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Advantech WebAccess/SCADA could allow a remote authenticated attacker to execute arbitrary...

Students Online Internship Timesheet System SQL injection | CVE-2023-2955

June 2, 2023

NAME__________Students Online Internship Timesheet System SQL injectionPlatforms Affected:Sourcecodester Students Online Internship Timesheet System 1.0Risk Level:6.3Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Students Online Internship Timesheet...

Bus Dispatch and Information System SQL injection | CVE-2023-2951

June 2, 2023

NAME__________Bus Dispatch and Information System SQL injectionPlatforms Affected:code-projects Bus Dispatch and Information System 1.0Risk Level:6.3Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Bus Dispatch and Information...

Comment System cross-site scripting | CVE-2023-2922

June 2, 2023

NAME__________Comment System cross-site scriptingPlatforms Affected:Sourcecodester Comment System 1.0Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Comment System is vulnerable to cross-site scripting, caused by improper...

Integration for Contact Form 7 and Zoho CRM, Bigin Plugin for WordPress cross-site request forgery | CVE-2023-25976

June 2, 2023

NAME__________Integration for Contact Form 7 and Zoho CRM, Bigin Plugin for WordPress cross-site request forgeryPlatforms Affected:WordPress Integration for Contact Form...

DedeCMS code execution | CVE-2023-2928

June 2, 2023

NAME__________DedeCMS code executionPlatforms Affected:DedeCMS DedeCMS 5.7.87 DedeCMS DedeCMS 5.7.93 DedeCMS DedeCMS 5.7.95 DedeCMS DedeCMS 5.7.97Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________DedeCMS could allow...

Xibo CMS SQL injection | CVE-2023-33179

June 2, 2023

NAME__________Xibo CMS SQL injectionPlatforms Affected:Xibo CMS 3.3.4 Xibo CMS 2.3.16Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Xibo CMS is vulnerable to SQL injection. A...

Favorites Plugin for WordPress cross-site scripting | CVE-2023-2304

June 2, 2023

NAME__________Favorites Plugin for WordPress cross-site scriptingPlatforms Affected:Fatek Automation FvDesignerRisk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Favorites Plugin for WordPress is vulnerable to cross-site scripting,...

CVE

Splunk Enterprise Splunk Enterprise and Splunk Cloud Platform security bypass | CVE-2023-32717

Splunk App for Stream privilege escalation | CVE-2023-32713

Splunk App for Lookup File Editing cross-site scripting | CVE-2023-32715

ToolJet cross-site scripting | CVE-2022-27979

Splunk Enterprise and Splunk Cloud Platform information disclosure | CVE-2023-32710

Splunk Enterprise and Splunk Cloud Platform information disclosure | CVE-2023-32709

Faculty Evaluation System SQL injection | CVE-2023-2962

Pimcore directory traversal | CVE-2023-2984

Krayin CRM cross-site scripting | CVE-2023-2925

Advantech WebAccess/SCADA code execution | CVE-2023-2866

Students Online Internship Timesheet System SQL injection | CVE-2023-2955

Bus Dispatch and Information System SQL injection | CVE-2023-2951

Comment System cross-site scripting | CVE-2023-2922

Integration for Contact Form 7 and Zoho CRM, Bigin Plugin for WordPress cross-site request forgery | CVE-2023-25976

DedeCMS code execution | CVE-2023-2928

Xibo CMS SQL injection | CVE-2023-33179

Favorites Plugin for WordPress cross-site scripting | CVE-2023-2304

Shop Beat Solutions LTD Shop Beat Media Player security bypass | CVE-2022-36249

Broadcom Advanced Secure Gateway and Broadcom Content Analysis cross-site scripting | CVE-2023-23954

Shop Beat Solutions LTD Shop Beat Media Player directory traversal | CVE-2022-36243

Xibo CMS information disclosure | CVE-2023-33180

Xibo CMS SQL injection | CVE-2023-33180

Feather Login Page Plugin for WordPress security bypass | CVE-2023-2547

Feather Login Page Plugin for WordPress security bypass | CVE-2023-2545

[QILIN] – Ransomware Victim: bagnoles[.]nl

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

[QILIN] – Ransomware Victim: Disseny Dental

Cobalt Strike Beacon Detected – 196[.]251[.]69[.]253:4433

Cobalt Strike Beacon Detected – 124[.]223[.]114[.]203:4433

You may have missed