Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

NCSC UK

JVN Japan

GCP Compute Engine Security

AWS Security Bulletins

GCP Kubernetes Security

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

Bleeping Computer

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

The Voting Record WordPress plugin through 2.0 does not have CSRF check in some places, and is missing sanitisation as well as escaping, which could allow attackers to make logged in admin add Stored XSS payloads via a CSRF attack

CVE-2023-7083 is a medium-severity vulnerability affecting the Voting Record WordPress plugin up to version 2.0. The vulnerability arises due to the absence of Cross-Site Request Forgery (CSRF) protections in certain functionalities of the plugin, combined with inadequate sanitization and escaping of user inputs. Specifically, this flaw allows an attacker to craft a malicious web request that, when executed by a logged-in administrator, can inject stored Cross-Site Scripting (XSS) payloads into the plugin's data. The vulnerability is classified under CWE-352 (CSRF) and CWE-79 (Stored XSS). The CVSS v3.1 base score is 5.4, indicating a medium severity level. The attack vector is network-based (remote), requires low attack complexity, and privileges equivalent to a logged-in administrator (PR:L). User interaction is required (UI:R), as the admin must visit a malicious page or link for the CSRF attack to succeed. The scope is changed (S:C), meaning the vulnerability affects resources beyond the initially vulnerable component. Exploitation could lead to partial confidentiality and integrity impacts, such as unauthorized script execution within the admin context, potentially enabling session hijacking, privilege escalation, or manipulation of plugin data. No known exploits are currently reported in the wild, and no patches have been linked yet. The vulnerability was published on January 16, 2024, and was assigned by WPScan. The affected versions are listed as '0', which likely indicates all versions up to 2.0 or an unspecified versioning scheme. Overall, this vulnerability represents a significant risk for WordPress sites using the Voting Record plugin, especially those with administrative users who might be tricked into visiting malicious sites or links, enabling attackers to persistently inject malicious scripts into the site environment.

Detailed information about CVE-2023-7083: CWE-352 Cross-Site Request Forgery (CSRF) in Unknown Voting Record affecting Unknown Voting Record. Get real-time upda

CVE-2023-7083: CWE-352 Cross-Site Request Forgery (CSRF) in Unknown Voting Record - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-7083: CWE-352 Cross-Site Request Forgery (CSRF) in Unknown Voting Record

Threats Tagged 'cve-2023-7083'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-7083'

Lead Pen Test Professional