Aggregator

CVE-2023-21547 | Microsoft Windows up to Server 2022 Internet Key Exchange denial of service (EUVD-2023-25714)

Vuldb Updates
4 months 3 weeks ago
A vulnerability labeled as critical has been found in Microsoft Windows up to Server 2022. This affects an unknown function of the component Internet Key Exchange. Such manipulation leads to denial of service. This vulnerability is listed as CVE-2023-21547. The attack may be performed from remote. There is no available exploit. Applying a patch is advised to resolve this issue.
vuldb.com

AI-Driven Phishing Attacks: Deceptive Tactics to Bypass Security Systems

GBHackers on Security | #1 Globally Trusted Cyber Security News Platform
4 months 3 weeks ago

Since January, Trend Micro has tracked a surge in phishing campaigns using AI-powered platforms (Lovable, Netlify, Vercel) to host fake captcha pages that lead to phishing websites. This ploy misleads users and evades security tools. Victims are first shown a captcha, lowering suspicion, while automated scanners only detect the challenge page, missing the hidden credential-harvesting […]

The post AI-Driven Phishing Attacks: Deceptive Tactics to Bypass Security Systems appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.

Mayura Kathir

ImmuniWeb offers free tool to test quantum resilience of TLS stacks

Help Net Security
4 months 3 weeks ago

ImmuniWeb has released a free online tool that checks whether websites are protected by post-quantum cryptography (PQC). The tool analyzes SSL/TLS configurations and verifies their compliance with the latest quantum-resilient encryption standards from NIST. It also checks for adherence to PCI DSS, HIPAA, and other NIST cryptographic requirements. Available via both web interface and API, the tool is aimed at organizations looking to assess their preparedness for quantum-era threats. The tool is designed to simplify … More →

The post ImmuniWeb offers free tool to test quantum resilience of TLS stacks appeared first on Help Net Security.

Industry News

CVE-2023-21543 | Microsoft Windows up to Server 2022 Layer 2 Tunneling Protocol Remote Code Execution (EUVD-2023-25710)

Vuldb Updates
4 months 3 weeks ago
A vulnerability categorized as critical has been discovered in Microsoft Windows. The affected element is an unknown function of the component Layer 2 Tunneling Protocol. The manipulation results in Remote Code Execution. This vulnerability is identified as CVE-2023-21543. The attack can be executed remotely. There is not any exploit available. It is best practice to apply a patch to resolve this issue.
vuldb.com

CVE-2023-21546 | Microsoft Windows up to Server 2022 Layer 2 Tunneling Protocol race condition (EUVD-2023-25713)

Vuldb Updates
4 months 3 weeks ago
A vulnerability identified as critical has been detected in Microsoft Windows. The impacted element is an unknown function of the component Layer 2 Tunneling Protocol. This manipulation causes race condition. This vulnerability is tracked as CVE-2023-21546. The attack is possible to be carried out remotely. No exploit exists. It is recommended to apply a patch to fix this issue.
vuldb.com

CVE-2023-21541 | Microsoft Windows up to Server 2022 Task Scheduler privilege escalation (EUVD-2023-25708)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in Microsoft Windows. It has been declared as critical. This issue affects some unknown processing of the component Task Scheduler. Executing manipulation can lead to privilege escalation. The identification of this vulnerability is CVE-2023-21541. The attack may be launched remotely. There is no exploit available. It is advisable to implement a patch to correct this issue.
vuldb.com

CVE-2023-21542 | Microsoft Windows up to Server 2016 Installer race condition (EUVD-2023-25709)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in Microsoft Windows. It has been rated as critical. Impacted is an unknown function of the component Installer. The manipulation leads to race condition. This vulnerability is referenced as CVE-2023-21542. Remote exploitation of the attack is possible. No exploit is available. Applying a patch is the recommended action to fix this issue.
vuldb.com

Akira

Dark Feed IO
4 months 3 weeks ago

You must login to view this content

cohenido

CVE-2025-10536 | Mozilla Firefox up to 142 information disclosure (Nessus ID 265350 / WID-SEC-2025-2074)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in Mozilla Firefox up to 142 and classified as problematic. Affected by this issue is some unknown functionality. The manipulation results in information disclosure. This vulnerability was named CVE-2025-10536. The attack needs to be approached within the local network. There is no available exploit. It is suggested to upgrade the affected component.
vuldb.com

CVE-2025-10534 | Mozilla Firefox up to 142 cross site scripting (WID-SEC-2025-2074)

Vuldb Updates
4 months 3 weeks ago
A vulnerability has been found in Mozilla Firefox up to 142 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation leads to cross site scripting. This vulnerability is uniquely identified as CVE-2025-10534. The attack can only be initiated within the local network. No exploit exists. The affected component should be upgraded.
vuldb.com

CVE-2023-21539 | Microsoft Windows up to Server 2022 Authentication privilege escalation (EUVD-2023-25706)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in Microsoft Windows up to Server 2022 and classified as critical. This affects an unknown part of the component Authentication. Such manipulation leads to privilege escalation. This vulnerability is uniquely identified as CVE-2023-21539. The attack can be launched remotely. No exploit exists. A patch should be applied to remediate this issue.
vuldb.com

CVE-2023-21540 | Microsoft Windows up to Server 2022 Cryptographic information disclosure (EUVD-2023-25707)

Vuldb Updates
4 months 3 weeks ago
A vulnerability was found in Microsoft Windows up to Server 2022. It has been classified as problematic. This vulnerability affects unknown code of the component Cryptographic. Performing manipulation results in information disclosure. This vulnerability was named CVE-2023-21540. The attack may be initiated remotely. There is no available exploit. To fix this issue, it is recommended to deploy a patch.
vuldb.com

CVE-2023-21536 | Microsoft Windows up to Server 2022 Event Tracing information disclosure (EUVD-2023-25704)

Vuldb Updates
4 months 3 weeks ago
A vulnerability, which was classified as problematic, has been found in Microsoft Windows up to Server 2022. Affected is an unknown function of the component Event Tracing. The manipulation leads to information disclosure. This vulnerability is traded as CVE-2023-21536. It is possible to initiate the attack remotely. There is no exploit available. It is recommended to apply a patch to fix this issue.
vuldb.com

Managed ad