Do Son PoC exploit code for CVE-2023-22515 was released, which facilitates unauthorized access to Confluence Server and Data Center instances
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Basic vulnerability scanning to see if web servers may be vulnerable to CVE-2023-44487. The tool checks if a web server accepts HTTP/2 requests
Dragoviฤ released a PoC exploit code for the CVE-2023-36723 vulnerability. The exploit code abuses a bug in the Container Manager Service
In one audacious instance, an attacker dispatched an astonishing 398 million requests within a singular second
These patches have now been extended to iOS/iPadOS 16, with the latest iteration being iOS/iPadOS 16.7.1 (20H30).
CVE-2023-45648 vulnerability turns particularly sinister behind a reverse proxy, paving the way for request smuggling.
FortiWLM counterpart, the CVE-2023-34992 vulnerability allows for remote unauthenticated OS command injections
The CVE-2023-21709 vulnerability (CVSS score of 9.8) exposes Exchange servers to privilege escalation attacks.
One of the Message Queuing vulnerabilities that was patched in October Patch Tuesday (CVE-2023-35349) has a CVSS severity score of 9.8/10
The vulnerability, designated as CVE-2023-4966, has been assigned a CVSS score of 9.4, indicating its high severity.
Home security has evolved significantly over the years. Once limited to locks, alarms, and maybe a guard...
Leading internet giants, Cloudflare, Google, and Amazon AWS, have announced the discovery of a zero-day flaw, the "HTTP/2 Rapid Reset" attack
VLC media player contains two security vulnerabilities that could be exploited by attackers to take control of users' computers.
Human Security revealed a staggering 74,000 globally distributed Android devices exhibiting traces of the Badbox malware
Spyware typically records user activity and transmits it to servers, consuming significant smartphone resources.
Contrasting with traditional bug bounty platforms, entities akin to Operation Zero abstain from alerting susceptible product suppliers
FTC that since 2021, Americans have suffered losses amounting to a staggering $2.7 billion due to social media scams
A critical vulnerability has been discovered in the Exim mailer software, which is widely used in Sophos Firewall and SG UTM products
The Artificial Intelligence Security Center is set to amalgamate various NSA endeavors pertinent to AI security, fostering collaborations
CISA unveiled a comprehensive report elucidating the most common cybersecurity misconfigurations within vast organizational frameworks
By adding an indirect layer to the attack, Meltdown shifts from being a transient execution attack to a stealthier side-channel attack
two critical vulnerabilities have been discovered in Microsoft PC Manager, which could allow a remote attacker to execute arbitrary code