CVE-2023-42917 : APPLE IOS/IPADOS WEB CONTENTS MEMORY CORRUPTION
Description A memory corruption vulnerability was addressed with improved locking. This issue is fixed in iOS 17.1.2 and iPadOS 17.1.2,
CVE-2023-4474 : ZYXEL NAS326/NAS542 WSGI SERVER OS COMMAND INJECTION
Description The improper neutralization of special elements in the WSGI server of the Zyxel NAS326 firmware version V5.21(AAZF.14)C0 and NAS542
What Is SSDP Amplification Attack?
The Simple Service Discovery Protocol (SSDP) is a network protocol used by devices to discover and communicate with each other
CVE-2023-46589 : APACHE TOMCAT UP TO 8.5.95/9.0.82/10.1.15/11.0.0-M10 HTTP TRAILER HEADER REQUEST SMUGGLING
Description Improper Input Validation vulnerability in Apache Tomcat.Tomcat from 11.0.0-M1 through 11.0.0-M10, from 10.1.0-M1 through 10.1.15, from 9.0.0-M1 through 9.0.82
CVE-2023-48188 : OPARTDEVIS MODULE UP TO 4.5.18/4.6.12 ON PRESTASHOP GETMODULETRANSLATION SQL INJECTION
Description SQL injection vulnerability in PrestaShop opartdevis v.4.5.18 thru v.4.6.12 allows a remote attacker to execute arbitrary code via a
CVE-2023-5972 : LINUX KERNEL UP TO 6.6-RC6 NETLINK ATTRIBUTE NFT_INNER.C NULL POINTER DEREFERENCE
Description A null pointer dereference flaw was found in the nft_inner.c functionality of netfilter in the Linux kernel. This issue
What Is Memcache Amplification Attack? What Are The Mitigation Strategies To Prevent Such Attacks?
Memcache is a high-performance, distributed memory caching system used to improve website and application performance. It stores frequently accessed data
CVE-2023-6263 : NETWORK OPTIX NXCLOUD PRIOR 23.1.0.40440 VMS SERVER AUTHENTICATION SPOOFING
Description An issue was discovered in Network Optix NxCloud before 23.1.0.40440. It was possible to add a fake VMS server
CVE-2023-48239 : NEXTCLOUD SERVER/ENTERPRISE SERVER UP TO 27.1.3 EXTERNAL STORAGE ACCESS CONTROL
Description Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 25.0.0 and prior to
CVE-2023-4149 : WAGO INDUSTRIAL MANAGED SWITCH WEB-BASED MANAGEMENT OS COMMAND INJECTION
Description A vulnerability in the web-based management allows an unauthenticated remote attacker to inject arbitrary system commands and gain full
CVE-2023-6019 : RAY URL PARAMETER CPU_PROFILE OS COMMAND INJECTION
Description A command injection exists in Ray’s cpu_profile URL parameter allowing attackers to execute os commands on the system running
CVE-2023-45616 : HPE ARUBAOS AIRWAVE CLIENT SERVICE BUFFER OVERFLOW
Description There is a buffer overflow vulnerability in the underlying AirWave client service that could lead to unauthenticated remote code
CVE-2023-31403 : SAP SAP BUSINESS ONE 10.0 SMB SHARED FOLDER ACCESS CONTROL
Description SAP Business One installation – version 10.0, does not perform proper authentication and authorization checks for SMB shared folder.
What Is A SYN Flood Attacks?
In a TCP (Transmission Control Protocol) connection, a three-way handshake is performed between the client and the server to establish
CVE-2023-39295 : QNAP QUMAGIE UP TO 2.1.2 OS COMMAND INJECTION
Description An OS command injection vulnerability has been reported to affect QuMagie. If exploited, the vulnerability could allow authenticated users
Surge In DDoS Attacks Amidst Israel-Hamas Conflict | Prophaze
Prophaze Highlights the Digital Frontline in Israel-Hamas Conflict In recent times, the world has witnessed an alarming surge in Distributed
CVE-2023-36409 : Microsoft Edge Information Disclosure
Description Microsoft Edge (Chromium-based) Information Disclosure Vulnerability. References https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-36409 For More Information CVERecord
CVE-2023-4295 : ARM VALHALL GPU KERNEL DRIVER PRIOR R42P0 INTEGER OVERFLOW
Description A local non-privileged user can make improper GPU memory processing operations to gain access to already freed memory. References
What Is Tsunami Google?
Tsunami is an open-source cybersecurity framework developed by Google. It enables security professionals to conduct large-scale, high-fidelity network security assessments,
CVE-2023-33045 : QUALCOMM 8 GEN 1 MOBILE PLATFORM NAN MANAGEMENT FRAME MEMORY CORRUPTION
Description Memory corruption in WLAN Firmware while parsing a NAN management frame carrying a S3 attribute. References https://www.qualcomm.com/company/product-security/bulletins/november-2023-bulletin For More
Best Alternative To Stackpath On WAF And CDN For Web Security
When it comes to maintaining your online presence and increasing website performance, you need a robust WAF (Web Application Firewall)
CVE-2023-47233 : LINUX KERNEL UP TO 6.5.10 USB DEVICE CFG80211.C BRCMF_CFG80211_DETACH USE AFTER FREE
Description The brcm80211 component in the Linux kernel through 6.5.10 has a brcmf_cfg80211_detach use-after-free in the device unplugging (disconnect the
CVE-2023-23368 : QNAP QTS/QUTS HERO/QUTSCLOUD OS COMMAND INJECTION
Description An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability
CVE-2023-42802 : GLPI UP TO 10.0.9 /AJAX INPUT VALIDATION
Description GLPI is a free asset and IT management software package. Starting in version 10.0.7 and prior to version 10.0.10,