Do Son The identified vulnerability, officially cataloged as CVE-2023-3079, raises alarm due to its potential misuse by threat actors
Do Son
Do Son is the Founder and Editor of Daily CyberSecurity. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.
Zyxel has identified the issues and provided patches addressing these vulnerabilities, labeled CVE-2023-33009 and CVE-2023-33010
Security is a major concern for any facility, whether it’s a bank, hotel, or office building. To...
one such newly identified vulnerability - CVE-2023-34362 - a SQL injection vulnerability lurking in the MOVEit Transfer web application.
Bearing the name CVE-2023-33975 and a high CVSS score of 9.8, a critical code execution vulnerability lies at the heart of RIOT.
Firmware security firm Eclypsium has unearthed a backdoor in Gigabyte motherboards. This security issue involves 271 models of Gigabyte motherboards
an administrator of Exposed has disclosed a substantial portion of member information from RaidForums, totaling 478,870 members
CVE-2023-33733 has wide-reaching implications, as numerous applications and libraries utilize ReportLab, such as the 'xhtml2pdf' utility function
CVE-2023-34152 is an ominous manifestation of remote code execution (RCE) vulnerability in OpenBlob when configured with --enable-pipes
Microsoft's security division today unveiled the intricate details of the CVE-2023-32369 vulnerability, dubbed Migraine
the discovery of an Unauthenticated PHP Object Injection vulnerability, with a CVE score of 8.3 and marked as CVE-2023-28782
The implications of CVE-2023-2650 are more pronounced in specific OpenSSL subsystems such as OCSP, PKCS7/SMIME, CMS, CMP/CRMF, and TS
The vulnerability, CVE-2023-30601, raises an alarming concern: privilege escalation when enabling Full Query Logging (FQL) or Audit logs
all project maintainers publishing software on the official PyPI third-party software repository must bind 2FA verification by the end of 2023
The vulnerability tracked as CVE-2023-2868 and boasting a worrisome CVSS score of 9.4, allows attackers to remotely execute system commands
PlutoCrypt Ransomware decryptor has been developed for PlutoCrypt, it can also work for other CryptoJoker variants
CVE-2023-0950: Array Index Underflow in Calc Formula Parsing. The risk of arbitrary code execution - a major security concern - escalates
Vitellozzo, a security expert from the cybersecurity firm Occamsec, has released a PoC detailing how the CVE-2023-2825 flaw can be exploited
Utilizing several vulnerabilities, IZ1H9 poses a serious threat, taking full control of compromised devices to form part of its botnet.
Proofpoint researchers reveal that advanced persistent threat (APT) actors are increasingly targeting small and medium businesses (SMBs)
Identified as CVE-2023-2732 and assigned a troubling Common Vulnerability Scoring System (CVSS) score of 9.8
The vulnerabilities, assigned the labels CVE-2023-33009 and CVE-2023-33010, both carry an alarming CVSS score of 9.8