InfoSecBulletin Cybersecurity for mankind
CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation.
CVE-2023-29357 Microsoft SharePoint Server Privilege Escalation Vulnerability. These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Hackers Exploits RCE flaw in Cisco Small Business Router
By infosecbulletin
/ Wednesday , February 26 2025
Cybersecurity researchers have discovered a campaign exploiting a remote command execution vulnerability, CVE-2023-20118, in Cisco Small Business Routers. This vulnerability...
Read More
CISA Alerts For Active Exploited Zimbra and Microsoft flaw
By infosecbulletin
/ Wednesday , February 26 2025
CISA has added two critical vulnerabilities to its Known Exploited Vulnerabilities catalog, urging organizations to quickly patch their systems to...
Read More
200 Fake GitHub Repos Attacking Developers to Deliver Malware
By infosecbulletin
/ Tuesday , February 25 2025
A new cyber campaign called GitVenom poses a serious risk to developers. Security researchers found over 200 fake GitHub repositories...
Read More
Renew Dubai visa within minutes with AI-powered Salama
By infosecbulletin
/ Tuesday , February 25 2025
Residents of Dubai can now easily renew their visas with the new AI-powered digital platform launched by the General Directorate...
Read More
CVE-2024-20953
CISA Flags Oracle Agile PLM Actively Exploited Security Flaw
By infosecbulletin
/ Tuesday , February 25 2025
CVE-2024-20953 is a vulnerability in Oracle Agile PLM, a product lifecycle management tool. With a CVSS score of 8.8, it...
Read More
Stablecoin Bank Hacked – Hackers Stolen $49.5M
By infosecbulletin
/ Monday , February 24 2025
Days after the biggest crypto hack ever, another platform has experienced a major exploit. Infini Earn, a decentralized stablecoin bank,...
Read More
CVE-2025-20029
PoC Exploit Released for F5 BIG-IP Command Injection Vuln
By infosecbulletin
/ Monday , February 24 2025
Security researchers have released a proof-of-concept exploit for CVE-2025-20029, a serious command injection vulnerability in F5’s BIG-IP application delivery controllers....
Read More
By 1 April 2025
Australia Bans Kaspersky on its govt systems and devices
By infosecbulletin
/ Monday , February 24 2025
On February 21, the Australian Department of Home Affairs issued a directive prohibiting the installation of Kaspersky Lab products and...
Read More
CISA Flags Craft CMS Code Injection Flaw Amid Active Attacks
By infosecbulletin
/ Sunday , February 23 2025
CISA has added a serious security flaw in the Craft content management system (CMS) to its Known Exploited Vulnerabilities catalog...
Read More
B1ack’s Stash Releases 1 Million Credit Cards on a Deep Web Forum
By infosecbulletin
/ Saturday , February 22 2025
On February 19, 2025, the illegal marketplace B1ack's Stash released over 1 million unique stolen credit and debit card details...
Read More
CVE-2023-29357 Detail:
Description:
Microsoft SharePoint Server Elevation of Privilege Vulnerability
