@eyeTSystems@InfoSec.Exchange : InfoSec manager for big transport company. Former AppSec for enterprises, and cyber/sys eng consultant for small business in SA.
South Australia, Australia
Joined September 2011
- Tweets89.7K
- Following533
- Followers334
- Likes16
Serious question: When creating a gold OS image, does anybody really consider current exploitation TTPs (a la metasploit), or do you rely primarily on OS patching and GRC?
#informationsecurity #CyberSecurity #metasploit #Windows10
CVE-2023-33617 An OS Command Injection vulnerability in Parks Fiberlink 210 firmware version V2.1.14_X000 was found via the /boaform/admin/formPing target_addr parameter. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-33599 EasyImages2.0 β€ 2.8.1 is vulnerable to Cross Site Scripting (XSS) via viewlog.php. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-26014 Cross-Site Request Forgery (CSRF) vulnerability in Tim Eckel Minify HTML plugin <= 2.1.7 vulnerability. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-26011 Cross-Site Request Forgery (CSRF) vulnerability in Tim Eckel Read More Excerpt Link plugin <= 1.6 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-25474 Cross-Site Request Forgery (CSRF) vulnerability in Csaba Kissi About Me 3000 widget plugin <= 2.2.6 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2022-46813 Cross-Site Request Forgery (CSRF) vulnerability in Younes JFR. Advanced Database Cleaner plugin <= 3.1.1 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-33362 Piwigo 13.6.0 is vulnerable to SQL Injection via in the "profile" function. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-33361 Piwigo 13.6.0 is vulnerable to SQL Injection via /admin/permalinks.php. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-33359 Piwigo 13.6.0 is vulnerable to Cross Site Request Forgery (CSRF) in the "add tags" function. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-30440 IBM PowerVM Hypervisor FW860.00 through FW860.B3, FW950.00 through FW950.70, FW1010.00 through FW1010.50, FW1020.00 through FW1020.30, and FW1030.00 through FW1030.10 could allow a local attacker with control a partition that has be... cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-25056 Cross-Site Request Forgery (CSRF) vulnerability in SlickRemix Feed Them Social plugin <= 3.0.2 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-23713 Cross-Site Request Forgery (CSRF) vulnerability in Manoj Thulasidas Theme Tweaker plugin <= 5.20 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2022-46851 Cross-Site Request Forgery (CSRF) vulnerability in Brainstorm Force Starter Templates plugin <= 3.1.20 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2022-46853 Cross-Site Request Forgery (CSRF) vulnerability in RadiusTheme The Post Grid plugin <= 5.0.4 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-33338 Old Age Home Management 1.0 is vulnerable to SQL Injection via the username parameter. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-25707 Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.12 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-25481 Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Subscribe button plugin <= 1.3.7 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-25472 Cross-Site Request Forgery (CSRF) vulnerability in Podlove Podlove Podcast Publisher plugin <= 3.8.3 versions. cve.mitre.org/cgi-bin/cvenamβ¦
CVE-2023-23724 Cross-Site Request Forgery (CSRF) vulnerability in Winwar Media WP Email Capture plugin <= 3.9.3 versions. cve.mitre.org/cgi-bin/cvenamβ¦