Aggregator

CVE-2023-34362 | Progress MOVEit Transfer HTTP sql injection

Vuldb Updates
8 months 2 weeks ago
A vulnerability categorized as critical has been discovered in Progress MOVEit Transfer. Affected by this issue is some unknown functionality of the component HTTP Handler. Such manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2023-34362. The attack can be launched remotely. Moreover, an exploit is present. It is advisable to upgrade the affected component.
vuldb.com

CVE-2023-32435 | Apple iOS/iPadOS State Management memory corruption (Nessus ID 239906)

Vuldb Updates
8 months 2 weeks ago
A vulnerability, which was classified as critical, has been found in Apple iOS and iPadOS. Impacted is an unknown function of the component State Management Handler. This manipulation causes memory corruption. This vulnerability appears as CVE-2023-32435. The attack may be initiated remotely. In addition, an exploit is available. It is advisable to upgrade the affected component.
vuldb.com

CVE-2023-32435 | Apple macOS State Management memory corruption (Nessus ID 239906)

Vuldb Updates
8 months 2 weeks ago
A vulnerability, which was classified as critical, was found in Apple macOS. The affected element is an unknown function of the component State Management Handler. Such manipulation leads to memory corruption. This vulnerability is traded as CVE-2023-32435. The attack may be launched remotely. Furthermore, there is an exploit available. You should upgrade the affected component.
vuldb.com

CVE-2004-1464 | Cisco IOS up to 12.0(3) Telnet TCP Connection denial of service (VU#384230 / EUVD-2004-1458)

Vuldb Updates
8 months 2 weeks ago
A vulnerability classified as critical has been found in Cisco IOS up to 12.0(3). This affects an unknown function of the component Telnet TCP Connection Handler. This manipulation causes denial of service. This vulnerability is handled as CVE-2004-1464. The attack can be initiated remotely. Additionally, an exploit exists. It is advisable to implement restrictive firewalling.
vuldb.com

CVE-2022-24990 | TerraMaster NAS up to 4.2.29 webNasIPS PWD information disclosure

Vuldb Updates
8 months 2 weeks ago
A vulnerability described as problematic has been identified in TerraMaster NAS up to 4.2.29. The affected element is an unknown function of the file module/api.php?mobile/webNasIPS. Such manipulation of the argument PWD leads to information disclosure. This vulnerability is listed as CVE-2022-24990. The attack may be performed from remote. In addition, an exploit is available.
vuldb.com

Threat Actors Leverage npm Ecosystem to Deliver AdaptixC2 Post-Exploitation Framework

Cyber Security News
8 months 2 weeks ago

The emergence of the AdaptixC2 post-exploitation framework in 2025 marked a significant milestone in the evolution of attacker toolsets targeting open-source supply chains. Positioning itself as a formidable alternative to established tools like Cobalt Strike, AdaptixC2 quickly attracted threat actors seeking agility and stealth in post-exploitation scenarios. This October, researchers uncovered its delivery through the […]

The post Threat Actors Leverage npm Ecosystem to Deliver AdaptixC2 Post-Exploitation Framework appeared first on Cyber Security News.

Tushar Subhra Dutta

CVE-2025-62577 | Fsas ETERNUS SF AdvancedCopy Manager Standard Edition up to 16.9.1 default permission (EUVD-2025-35035 / CNNVD-202510-2637)

Vuldb Updates
8 months 2 weeks ago
A vulnerability was found in Fsas ETERNUS SF AdvancedCopy Manager Standard Edition, ETERNUS SF Storage Cruiser, ETERNUS SF Expressn, ETERNUS SF Storage Cruisern and ETERNUS SF Express up to 16.9.1 and classified as critical. Affected by this vulnerability is an unknown functionality. Executing manipulation can lead to incorrect default permissions. This vulnerability is tracked as CVE-2025-62577. The attack is restricted to local execution. No exploit exists.
vuldb.com

Inside the Synthient Threat Data

Troy Hunt
8 months 2 weeks ago

Where is your data on the internet? I mean, outside the places you've consciously provided it, where has it now flowed to and is being used and abused in ways you've never expected? The truth is that once the bad guys have your data, it often

Troy Hunt

Managed ad