ownCloud Flaw Exploited to Steal Nuclear Records From Philippine Research Body

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday added a critical security flaw impacting ownCloud to its Known Exploited Vulnerabilities (KEV) catalog following reports that a Chinese-speaking threat actor weaponized the vulnerability to target a nuclear research body in the Philippines.

The vulnerability, tracked as CVE-2023-49105 (CVSS score: 9.8), is a case of

Source: The Hacker News

Leave a Reply

Your email address will not be published. Required fields are marked *

Explore More

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git

Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git Security researchers at depthfirst published working exploit code on July 24 for a GitLab flaw that GitLab patched six

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access Attackers broke into an organization’s Oracle database through a SQL injection flaw in a public-facing web application,

VulnHunter: Capital One’s agentic AI code security tool

VulnHunter: Capital One’s agentic AI code security tool Source: Hacker News