What Is Meant By Credential Stuffing?
In today’s digital age, cybersecurity threats are a constant concern for individuals and businesses alike. One such threat is credential
What Is Cashing Out? How Can Such Illicit Activities Be Prevented?
Cashing out is a serious security threat that can cause significant financial harm to individuals and business organizations alike. It
What Is Carding? What Are The Methods Used By Attackers For Carding?
Carding is an automated attack that involves the process of using stolen credit card information to make fraudulent purchases or
CVE-2023-1834 : ROCKWELL AUTOMATION KINETIX 5500 7.13 TELNET/FTP ACCESS CONTROL
Description Rockwell Automation was made aware that Kinetix 5500 drives, manufactured between May 2022 and January 2023, and are running
CVE-2023-2645 : USR USR-G806 1.0.41 WEB MANAGEMENT PAGE USERNAME/PASSWORD HARD-CODED PASSWORD
Description A vulnerability, which was classified as critical, was found in USR USR-G806 1.0.41. Affected is an unknown function of
What Is Card Cracking?
Card cracking is a type of automated threat identified by the OWASP organization that has become increasingly prevalent in the
CVE-2023-24941 : MICROSOFT WINDOWS NETWORK FILE SYSTEM REMOTE CODE EXECUTION
Description Windows Network File System Remote Code Execution Vulnerability. References https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-24941 For More Information MITRE
CVE-2023-2583 : JSREPORT UP TO 3.11.2 CODE INJECTION
Description Code Injection in GitHub repository jsreport/jsreport prior to 3.11.3. References https://huntr.dev/bounties/397ea68d-1e28-44ff-b830-c8883d067d96 https://github.com/jsreport/jsreport/commit/afaff3804b34b38e959f5ae65f9e672088de13d7 For More Information MITRE
CVE-2023-2564 : SBS20 SCANSERVJS PRIOR 2.27.0 OS COMMAND INJECTION
Description OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0. References https://huntr.dev/bounties/d13113ad-a107-416b-acc1-01e4c16ec461 https://github.com/sbs20/scanservjs/commit/d51fd52c1569813990b8f74e64ae6979c665dca1 For More Information MITRE
What Is CAPTCHA Defeat? What Can Be Done To Prevent Automated CAPTCHA Defeat?
What is CAPTCHA? CAPTCHA (Completely Automated Public Turing test to tell Computers and Humans Apart) is a technology that was
CVE-2023-25826 : OPENTSDB TAG VALIDATION OS COMMAND INJECTION
Description Due to insufficient validation of parameters passed to the legacy HTTP query API, it is possible to inject crafted
CVE-2023-2479 : APPIUM DESKTOP PRIOR 1.22.3-4 OS COMMAND INJECTION
Description OS Command Injection in GitHub repository appium/appium-desktop prior to v1.22.3-4. References https://huntr.dev/bounties/fbdeec3c-d197-4a68-a547-7f93fb9594b4 https://github.com/appium/appium-desktop/commit/12a988aa08b9822e97056a09486c9bebb3aad8fe For More Information MITRE
CVE-2023-22919 : ZYXEL NBG-6604 1.01(ABIR.0)C0 HTTP REQUEST OS COMMAND INJECTION
Description The post-authentication command injection vulnerability in the Zyxel NBG6604 firmware version V1.01(ABIR.0)C0 could allow an authenticated attacker to execute
What Is Ad Fraud?
What Is Ad Fraud? Ad fraud is a type of automated threat identified by the OWASP organization that has become
What Do You Mean By Inadequate Logging And Monitoring?
What is Logging and Monitoring? In the world of cybersecurity, logging and monitoring play a critical role in protecting organizations
CVE-2022-41736 : IBM SPECTRUM SCALE CONTAINER NATIVE STORAGE ACCESS UP TO 5.1.6.0 LOCAL PRIVILEGE ESCALATION
Description IBM Spectrum Scale Container Native Storage Access 5.1.2.1 through 5.1.6.0 contains an unspecified vulnerability that could allow a local
CVE-2023-1968 : ILLUMINA UNIVERSAL COPY SERVICE 2.X BINDING TO AN UNRESTRICTED IP ADDRESS
Description Instruments with Illumina Universal Copy Service v2.x are vulnerable due to binding to an unrestricted IP address. An unauthenticated
CVE-2023-30846 : MICROSOFT TYPED-REST-CLIENT UP TO 1.7.3 INSUFFICIENTLY PROTECTED CREDENTIALS
Description typed-rest-client is a library for Node Rest and Http Clients with typings for use with TypeScript. Users of the
CVE-2023-2269 : LINUX KERNEL 6.2.0 IOCTL.C DM_GET_INACTIVE_TABLE DEADLOCK
Description A denial of service problem was found, due to a possible recursive locking scenario, resulting in a deadlock in
What Is Insecure Deserialization? How To Protect The Application From Insecure Deserialization Attacks?
What is Serialization? Serialization is the process of turning an item into a format that can be transmitted over a
CVE-2023-28771 : ZYXEL USG/USG FLEX/VPN/ATP ERROR MESSAGE OS COMMAND INJECTION
Description Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through
What Is A Security Misconfiguration?
What Is Security Misconfiguration? What Is Security Misconfiguration? Security misconfiguration refers to the failure to properly configure and maintain the
CVE-2023-30621 : GIPSY UP TO 1.2 ON DISCORD PING OS COMMAND INJECTION
Description Gipsy is a multi-purpose discord bot which aim to be as modular and user-friendly as possible. In versions prior
CVE-2023-20864 : VMWARE ARIA OPERATIONS FOR LOGS UP TO 8.8.X/8.10.2 DESERIALIZATION
Description VMware Aria Operations for Logs contains a deserialization vulnerability. An unauthenticated, malicious actor with network access to VMware Aria