The CVE-2023-40477 flaw opens the door for remote attackers to execute arbitrary code on systems where WinRAR is installed
Do Son
Once this file undergoes scanning by ClamAV on a compromised device, CVE-2023-20212 can disrupt the ClamAV scanning process
CVE-2023-20564 could allow an attacker to send a specially crafted IOCTL request to AMD Ryzen Master that would cause the software to crash
An attacker could exploit CVE-2023-3160 by creating a specially crafted symbolic link that would allow them to gain elevated privileges
Interestingly, AMD's Zen 1 architecture was not impervious, being plagued by a vulnerability christened "Division by zero."
CVE-2023-39417 allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser
The results indicated that English and Mandarin speakers had a comparable accuracy rate, with only a 73% probability of correctly identifying deepfakes
Prominent companies affected by the Lapsus$ hacking group include Microsoft, Cisco, Okta, Nvidia, T-Mobile, Samsung, Uber
A security researcher unveiled the disturbing details of a critical vulnerability that can lead to Remote Code Execution (RCE) in WPS Office
A proof-of-concept (PoC) exploit code has been made available for the recently disclosed critical security flaw, tracked as CVE-2023-36664
CVE-2022-41984 vulnerability may allow a privileged user to potentially enable denial of service via local access.
This flaw, which has been assigned the identifier CVE-2023-24329, has a CVSS score of 7.5 and could be exploited to cause a variety of security problems
The attacker, assuming privileged access, can exploit the CVE-2023-33242 bug to exfiltrate the key after approximately 200 signature requests
due to prior cyberattacks, for security considerations, LetMeSpy will cease offering its services to anyone starting August 31, 2023.
Horizon3 has gone a step further by publishing a Proof-of-Concept (PoC) code that demonstrates how to abuse the CVE-2023-26067 vulnerability
CVE-2023-33241 has recently been discovered in the popular multi-party computation (MPC) protocols GG18 and GG20
Cybersecurity researchers have released guides and scripts to help users assess whether their VPN service is affected by the TunnelCrack flaw
CVE-2023-32002 vulnerability allows a remote attacker to bypass security restrictions by using the Module._load() function