Vulnerabilities
CISA Adds Strapi Admin Data Leak to Known Exploited Vulnerabilities Catalog
Strapi CVE-2023-22894 allows attackers with admin access to infer sensitive user details via query filters.
KEV
Everything Threat Times has reported about KEV: 3 stories, newest first. Part of our Vulnerabilities coverage.
Vulnerabilities
CISA Adds Apache Struts Command Injection Vulnerability to Known Exploited Vulnerabilities Catalog
Federal agency lists CVE-2016-3081 in its KEV catalog, setting a strict October 11 deadline for federal agencies to apply mitigations.
Vulnerabilities
CISA adds ISC BIND TKEY vulnerability to Known Exploited Vulnerabilities catalog
A denial-of-service flaw in ISC BIND affecting versions prior to 9.9.7-P2 and 9.10.2-P3 has been added to the federal KEV catalog.