CVEFeed Newsroom – Latest Cybersecurity Updates
The "Cyber Newsroom Feed" module is a live feed of the latest cyber news enriched with CVE and vulnerability data. The feed is updated every 5 minutes and includes the latest news from the cyber security industry. The feed is designed to provide users with a comprehensive overview of the latest cyber security news and trends.

-
Help Net Security
Week in review: MS Office flaw may leak NTLM hashes, malicious Chrome, Edge browser extensions
Here’s an overview of some of last week’s most interesting news, articles, interviews and videos: Unpatched MS Office flaw may leak NTLM hashes to attackers (CVE-2024-38200) A new MS Office zero-day v ... Read more

-
TheCyberThrone
TheCyberThrone Security Week In Review – August 17, 2024
Welcome to TheCyberThrone cybersecurity week in review will be posted covering the important security happenings. This review is for the week ending Saturday, August 17, 2024.Microsoft Patch Tuesday-A ... Read more

-
seclists.org
Improper Authentication (CWE-287) CVE-2024-33897
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:49:16 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Execution with Unnecessary Privileges (CWE-250) CVE-2024-33894
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:48:32 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Use of Hard-coded Cryptographic Key (CWE-321) CVE-2024-33895
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:48:04 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') (CWE-78) CVE-2024-33896
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:47:30 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Cleartext Storage of Sensitive Information in a Cookie (CWE-315) CVE-2024-33892
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:46:57 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Improper Neutralization of Input During Web Page Generation (CWE-79) CVE-2024-33893
Full Disclosure mailing list archives From: Moritz Abrell via Fulldisclosure <fulldisclosure () seclists org> Date: Sun, 11 Aug 2024 19:46:22 +0200 -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Advi ... Read more

-
seclists.org
Dovecot CVE-2024-23185: Very large headers can cause resource exhaustion when parsing message
Full Disclosure mailing list archives From: Aki Tuomi via Fulldisclosure <fulldisclosure () seclists org> Date: Wed, 14 Aug 2024 14:13:42 +0300 (EEST) Affected product: Dovecot IMAP Server Internal re ... Read more

-
seclists.org
CVE-2024-23184: Having a large number of address headers (From, To, Cc, Bcc, etc.) becomes excessively CPU intensive
Full Disclosure mailing list archives From: Aki Tuomi via Fulldisclosure <fulldisclosure () seclists org> Date: Wed, 14 Aug 2024 14:13:42 +0300 (EEST) Affected product: Dovecot IMAP Server Internal re ... Read more