MAR-10454006-r3.v1 Exploit Payload Backdoor

   Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained…

Comments Off on MAR-10454006-r3.v1 Exploit Payload Backdoor

MAR-10454006-r2.v1 SEASPY Backdoor

   Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained…

Comments Off on MAR-10454006-r2.v1 SEASPY Backdoor

MAR-10454006-r1.v2 SUBMARINE Backdoor

   Notification This report is provided "as is" for informational purposes only. The Department of Homeland Security (DHS) does not provide any warranties of any kind regarding any information contained…

Comments Off on MAR-10454006-r1.v2 SUBMARINE Backdoor

Preventing Web Application Access Control Abuse

SUMMARY The Australian Signals Directorate’s Australian Cyber Security Centre (ACSC), U.S. Cybersecurity and Infrastructure Security Agency (CISA), and U.S. National Security Agency (NSA) are releasing this joint Cybersecurity Advisory to…

Comments Off on Preventing Web Application Access Control Abuse

Vulnerability Summary for the Week of July 17, 2023

  High Vulnerabilities Primary Vendor -- Product Description Published CVSS Score Source & Patch Info oliva_expertise -- oliva_expertise_eks   Improper Neutralization of Special Elements used in an SQL Command ('SQL…

Comments Off on Vulnerability Summary for the Week of July 17, 2023

Atlassian Releases Security Updates

Atlassian has released its Security Bulletin for July 2023 to address vulnerabilities in Confluence Data Center & Server (CVE-2023-22505 and CVE-2023-22508) and Bamboo Data Center (CVE-2023-22506). An attacker can exploit these vulnerabilities…

Comments Off on Atlassian Releases Security Updates

Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells

SUMMARY The Cybersecurity and Infrastructure Security Agency (CISA) is releasing this Cybersecurity Advisory to warn network defenders about exploitation of CVE-2023-3519, an unauthenticated remote code execution (RCE) vulnerability affecting NetScaler…

Comments Off on Threat Actors Exploiting Citrix CVE-2023-3519 to Implant Webshells

Citrix Releases Security Updates for NetScaler ADC and Gateway

Citrix has released security updates to address vulnerabilities (CVE-2023-3519, CVE-2023-3466, and CVE-2023-3467) affecting NetScaler ADC and NetScaler Gateway. An attacker can exploit one of these vulnerabilities to take control of…

Comments Off on Citrix Releases Security Updates for NetScaler ADC and Gateway