Aug 24, 2023
1 new incident, 1 with updates.
Started
- ClosedHighPatched
Ignite Realtime Openfire: Path Traversal (CVE-2023-32315)
Ignite Realtime Openfire contains a path traversal vulnerability that allows an unauthenticated attacker to access restricted pages in the Openfire Admin Console reserved for administrative users. Added to CISA KEV on 2023-08-24.
Ignite Realtime OpenfireClosed Aug 24, 2023
Updated
- ClosedHighPatched
WinRAR zero-day used against traders, then state hackers (CVE-2023-38831)
WinRAR before 6.23 would run hidden code when a user opened what looked like a harmless file inside a ZIP. Group-IB found it exploited since April 2023 to target traders. After the fix, Google TAG saw Russian and Chinese government-backed groups pile on.
RARLAB WinRARClosed Oct 18, 2023
