MG Strategy+ - KasperskyCybermap Kaspersky

MG Strategy+

Cybersecurity Data Services

Join Now-Sign Up
Log In

Tag : Kaspersky

Cybermap Kaspersky

Kaspersky Cybermap

Editor Paper Extracts
Editor Picks Articles
Editor Picks Maps
Editor Picks Reports
MGS+ EPCM Workgroup
MGS+ ICS Workgroup
MGS+ Operational Efficiencies Workgroup
MGS+ Partners
Uncategorized

001 MGS Alerts Advisories

Russia points finger at US for iPhone exploit campaign that also hit Kaspersky Lab
The Russian federal security agency, the FSB, has put out a security alert claiming that US intelligence services are behind an attack campaign that exploits vulnerabilities in iOS and ... read more
MOVEit Transfer vulnerability appears to be exploited widely
Progress Software has discovered a vulnerability in its file transfer software MOVEit Transfer that could lead to escalated privileges and potential unauthorized access to the environment, the company said ... read more
CVE-2023-30149 | ebewe Autocomplete Module su PrestaShop type/input_name/q sql injection
In ebewe Autocomplete Module è stato trovato un punto critico di livello critico. É interessato una funzione sconosciuta. Attraverso la manipolazione del parametro type/input_name/q di un input sconosciuto per mezzo ... read more
High – CVE-2023-30602 – Hitron Technologies CODA-5310’s Telnet function…
Hitron Technologies CODA-5310’s Telnet function transfers sensitive data in plaintext. An unauthenticated remote attacker can exploit this vulnerability to access credentials of normal users and ... read more
Medium – CVE-2023-28705 – Openfind Mail2000 has insufficient filtering…
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that ... read more
NA – CVE-2023-3033 – Incorrect Authorization vulnerability in…
Incorrect Authorization vulnerability in Mobatime web application allows Privilege Escalation, Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mobatime web ... read more
High – CVE-2023-28704 – Furbo dog camera has insufficient filtering for…
Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can ... read more
NA – CVE-2023-3058 – A vulnerability was found in 07FLY CRM up to…
A vulnerability was found in 07FLY CRM up to 1.2.0. It has been declared as problematic. This vulnerability affects unknown code of the component User Profile Handler. The manipulation leads ... read more
Attackers use Python compiled bytecode to evade detection
Attackers who are targeting open-source package repositories like PyPI (Python Package Index) have devised a new technique for hiding their malicious code from security scanners, manual reviews, and other ... read more
CVE-2022-41690 | Intel Edge Mobile App prior 3.4.7 on iOS access control (intel-sa-00847)
A vulnerability was found in Intel Edge Mobile App on iOS. It has been classified as critical. This affects an unknown part. The manipulation leads to improper access controls. This ... read more
CVE-2023-3056 | YFCMF up to 3.0.4 index.php path traversal
A vulnerability was found in YFCMF up to 3.0.4. It has been declared as problematic. This vulnerability affects unknown code of the file index.php. The manipulation leads to path traversal: ... read more
CVE-2023-29736 | Keyboard Themes 1.275.1.164 on Android path traversal
A vulnerability was found in Keyboard Themes 1.275.1.164 on Android. It has been classified as critical. This affects an unknown part. The manipulation leads to path traversal. This vulnerability is ... read more
VDB-230463 | Progress MOVEit Transfer HTTP access control
A vulnerability classified as critical has been found in Progress MOVEit Transfer. This affects an unknown part of the component HTTP Handler. The manipulation leads to improper access controls. The ... read more
CVE-2023-32714 | Splunk App for Lookup File Editing fino 4.0.0 Web Request directory traversal (SVD-2023-0608)
In Splunk App for Lookup File Editing fino 4.0.0 è stato trovato un punto critico di livello critico. É interessato una funzione sconosciuta del componente Web Request Handler. Per causa ... read more
CVE-2023-32711 | Splunk Enterprise fino 8.1.13/8.2.10/9.0.4 Bootstrap Web Framework cross site scripting (SVD-2023-0605)
Un punto di debole di livello problematico è stato rilevato in Splunk Enterprise fino 8.1.13/8.2.10/9.0.4. É interessato una funzione sconosciuta del componente Bootstrap Web Framework. La manipolazione di un input ... read more
CVE-2023-2068 | File Manager Advanced Shortcode Plugin fino 2.3.2 su WordPress escalazione di privilegi
Una vulnerabilità di livello critico è stata rilevata in File Manager Advanced Shortcode Plugin fino 2.3.2. Riguarda una funzione sconosciuta del componente Shortcode Handler. Attraverso la manipolazione di un input ... read more
CVE-2023-32715 | Splunk App for Lookup File Editing fino 4.0.0 cross site scripting (SVD-2023-0610)
Un punto di criticita di livello problematico è stato rilevato in Splunk App for Lookup File Editing fino 4.0.0. Da questa vulnerabilità è interessato una funzione sconosciuta. Attraverso l'influenza di ... read more
ISACA pledges to help grow cybersecurity workforce in Europe
Global professional association ISACA has announced a pledge to the European Commission to grow and empower the cybersecurity workforce in Europe. The pledge will see ISACA provide 20,000 free ... read more
CISA Releases Five Industrial Control Systems Advisories
CISA released five Industrial Control Systems (ICS) advisories on June 1, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-23-152-01 Advantech WebAccess-SCADA ICSA-23-152-02 ... read more
[Control systems] ABB security advisory (AV23-302)
... read more
BigID wants to let you tweak your data classifications manually
BigID is adding a feature that lets end users of its data intelligence platform manually adjust classification models, in an effort to make those more precise without the need ... read more
What is the Cybercrime Atlas? How it can help disrupt cybercrime
Announced in June 2022, the Cybercrime Atlas is an initiative from the World Economic Forum (WEF) to map activities of cybercriminals and create a database that can be used ... read more
NA – CVE-2023-33461 – iniparser v4.1 is vulnerable to NULL Pointer…
iniparser v4.1 is vulnerable to NULL Pointer Dereference in function iniparser_getlongint which misses check NULL for function iniparser_getstring's return. ... read more
CVE-2022-35754
Unified Write Filter Elevation of Privilege Vulnerability ... read more
CVE-2022-35743
Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution Vulnerability ... read more
CVE-2022-35745
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability ... read more
CVE-2022-35753
Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability ... read more
Gigabyte firmware component can be abused as a backdoor
Researchers warn that the UEFI firmware in many motherboards made by PC hardware manufacturer Gigabyte injects executable code inside the Windows kernel in an unsafe way that can be ... read more
Apple Zeed ALL YOUR STYLE CMS 2.0 SQL Injection
Apple Zeed ALL YOUR STYLE CMS version 2.0 suffers from a remote SQL injection vulnerability. ... read more
WordPress ReviewX 1.6.13 Privilege Escalation
WordPress ReviewX plugin versions 1.6.13 and below suffer from a privilege escalation vulnerability. ... read more
Vaskar Courier 3.2.0 Insecure Settings
Vaskar Courier version 3.2.0 appears to leave default credentials installed after installation. ... read more
Lost And Found Information System 1.0 Broken Access Control / Privilege Escalation
Lost and Found Information System version 1.0 allows a staff level user to adjust administrative controls. ... read more
Ubuntu Security Notice USN-6124-1
Ubuntu Security Notice 6124-1 - Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to ... read more
Ubuntu Security Notice USN-6122-1
Ubuntu Security Notice 6122-1 - Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to ... read more
Ubuntu Security Notice USN-6123-1
Ubuntu Security Notice 6123-1 - Patryk Sondej and Piotr Krysiuk discovered that a race condition existed in the netfilter subsystem of the Linux kernel when processing batch requests, leading to ... read more
Debian Security Advisory 5416-1
Debian Linux Security Advisory 5416-1 - It was discovered that there was a potential buffer overflow and denial of service vulnerability in the gdhcp client implementation of connman, a command-line ... read more
Microsoft GamingServicesNet 12.77.3001.0 Unquoted Service Path
Microsoft GamingServicesNet version 12.77.3001.0 suffers from an unquoted service path vulnerability. ... read more
CVE-2023-2758 | Contec CONPROSYS HMI System fino 3.5.2 Configuration File denial of service
In Contec CONPROSYS HMI System fino 3.5.2 è stata rilevato un punto critico di livello problematico. Riguarda una funzione sconosciuta del componente Configuration File Handler. Mediante la manipolazione di un ... read more
CVE-2023-31548 | ChurchCRM 4.5.3 FundRaiserEditor.php cross site scripting
Un punto critico di livello problematico è stato rilevato in ChurchCRM 4.5.3. É interessato una funzione sconosciuta del file FundRaiserEditor.php. Attraverso la manipolazione di un input sconosciuto per mezzo di ... read more
CVE-2023-3008
A vulnerability classified as critical has been found in ningzichun Student Management System 1.0. This affects an unknown part of the file login.php. The manipulation of the argument user/pass leads ... read more
CVE-2023-3007
A vulnerability was found in ningzichun Student Management System 1.0. It has been rated as critical. Affected by this issue is some unknown functionality of the file resetPassword.php of the ... read more
CVE-2023-33508
KramerAV VIA GOÂ² < 4.0.1.1326 is vulnerable to unauthenticated file upload resulting in Remote Code Execution (RCE). ... read more
A Year In HackerOne’s Bug Bounty Program
... read more
Inactive, unmaintained Salesforce sites vulnerable to threat actors
Improperly deactivated and unmaintained Salesforce sites are vulnerable to threat actors who can gain access to sensitive business data and personally identifiable information (PII) by simply changing the host ... read more
Trellix, Netskope announce new Amazon Security Lake support to enhance threat detection, remediation
Cybersecurity vendors Trellix and Netskope have announced new support for Amazon Security Lake from AWS, which became generally available on May 30. Trellix customers can now integrate their security ... read more
Barracuda patches zero-day vulnerability exploited since October
Barracuda has patched a zero-day vulnerability that had been exploited since October to backdoor customers’ Email Security Gateway (ESG) appliances with custom malware and steal data, the company said ... read more
What is federated Identity? How it works and its importance to enterprise security
At the very heart of enterprise security is the tension between convenience and safety. The business longs for the ease of users, in competition with the demands of security. ... read more
Phishing remained the top identity abuser in 2022: IDSA report
Phishing was the most common type of identity-related incident in 2022, according to a study by Identity Defined Security Alliance (IDSA), a non-profit, identity and security intelligence firm.The study, ... read more
CVE-2023-29733 | Lock Master App 2.2.4 su Android SharedPreference File Local Privilege Escalation
In Lock Master App 2.2.4 stata rilevata una vulnerabilità di livello problematico. Da questa vulnerabilità è interessato una funzione sconosciuta del componente SharedPreference File Handler. La manipolazione di un input ... read more
CVE-2021-31233 | Fighting Cock Information System 1.0 edit_breed.php rivelazione di un 'informazione
In Fighting Cock Information System 1.0 è stato trovato un punto critico di livello problematico. É interessato una funzione sconosciuta del file edit_breed.php. La manipolazione di un input sconosciuto se ... read more

MG Strategy+ Industrial Control Systems Group @2019

KAVI MGS iSTRACIN Platform v 02.25 Saturday, June 3, 2023

Disclaimer |
Terms |
Privacy
About-Services |
Blog-Reports
YouTube
Pinterest
LinkedIn
Twitter
LinkedIn
Twitter
Connect-Contact

Login

Login to integratus systems Exchange Platform Services

Forgot password?

Register Now

Hello

Your Account Type is
Your Mail Id is
Your Username is

PDF Library Search

Security Briefing Search

Kaspersky Search

Reset Password

Reset Password

You have no permission to access this content