Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Reddit ExploitDev

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ThreatIntel

Reddit BlueTeam

Reddit Reverse Engineering

Reddit Malware

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

ever-gauzy

Ever Gauzy v0.281.9 contains a JWT authentication vulnerability that allows attackers to exploit weak HMAC secret key implementation. Attackers can leverage the exposed JWT token to authenticate and gain unauthorized access with administrative permissions.

CVE-2023-53951 identifies a critical security vulnerability in Ever Gauzy version 0.281.9 related to the improper verification of JSON Web Token (JWT) cryptographic signatures. The core issue stems from a weak implementation of the HMAC secret key used to sign JWT tokens, which are employed for authentication and authorization within the application. Due to this weakness, attackers can craft or manipulate JWT tokens without possessing the legitimate secret key, effectively bypassing authentication mechanisms. This allows them to gain unauthorized access with administrative privileges, potentially leading to full control over the affected system. The vulnerability is remotely exploitable over the network without requiring any privileges or user interaction, as indicated by the CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N). The impact on confidentiality, integrity, and availability is high, as attackers can access sensitive data, modify system configurations, and disrupt services. Although no public exploits have been reported yet, the critical severity and ease of exploitation make this a significant threat. The vulnerability affects only version 0.281.9 of Ever Gauzy, a platform used for workforce management and productivity tracking. The lack of available patches at the time of publication increases the urgency for organizations to implement interim mitigations and monitor for suspicious activities related to JWT authentication.

Detailed information about CVE-2023-53951: Improper Verification of Cryptographic Signature in Gauzy ever gauzy affecting Gauzy ever gauzy. Get real-time update

CVE-2023-53951: Improper Verification of Cryptographic Signature in Gauzy ever gauzy - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-53951: Improper Verification of Cryptographic Signature in Gauzy ever gauzy

Threats Tagged 'cve-2023-53951'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-53951'

Lead Pen Test Professional