Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

GCP Compute Engine Security

JVN Japan

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

InnovaStudio WYSIWYG Editor 5.4 contains an unrestricted file upload vulnerability that allows attackers to bypass file extension restrictions through filename manipulation. Attackers can upload malicious ASP shells by using null byte techniques and alternate file extensions to circumvent upload controls in the asset manager.

CVE-2023-53950 is a critical security vulnerability identified in InnovaStudio WYSIWYG Editor version 5.4. The flaw lies in the asset manager's file upload functionality, which fails to properly restrict file types due to insufficient validation of file names. Attackers can exploit this by manipulating filenames using null byte injection and alternate file extensions to bypass the editor's file extension filters. This allows them to upload malicious ASP web shells disguised as benign files. Once uploaded, these shells can be executed on the web server, granting attackers remote code execution capabilities without requiring any authentication or user interaction. The vulnerability has been assigned a CVSS 4.0 base score of 9.3, reflecting its critical nature and the high impact on confidentiality, integrity, and availability of affected systems. Although no public exploits have been reported yet, the technical ease of exploitation and the potential for severe damage make this vulnerability a significant risk. The vulnerability affects all versions of the product prior to the patched release, and the lack of available patches at the time of reporting increases exposure. The attack vector is network-based with no privileges or user interaction required, making it highly accessible to remote attackers. The vulnerability is particularly dangerous in environments where the WYSIWYG editor is integrated into web applications that handle sensitive data or critical business functions. The ability to upload and execute arbitrary ASP code can lead to full system compromise, data exfiltration, defacement, or use of the server as a pivot point for further attacks. Detection is complicated by the use of filename manipulation techniques that evade simple extension-based filters. Effective mitigation requires a combination of patching, enhanced server-side validation, and restrictive execution policies on upload directories.

Detailed information about CVE-2023-53950: Unrestricted Upload of File with Dangerous Type in innovastudio WYSIWYG Editor affecting innovastudio WYSIWYG Editor.

CVE-2023-53950: Unrestricted Upload of File with Dangerous Type in innovastudio WYSIWYG Editor - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-53950: Unrestricted Upload of File with Dangerous Type in innovastudio WYSIWYG Editor

Threats Tagged 'cve-2023-53950'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-53950'

Lead Pen Test Professional