NVD disclosure day

Published threat advisories for March 28, 2024

CVE-2024-28713

Mblog Theme Management Arbitrary Code Execution Vulnerability.

Halo Surface Signal: 4 out of 5 — likely to be public-facing.

An arbitrary code execution vulnerability exists in Mblog's theme management feature that could allow an unauthenticated attacker to compromise affected systems by uploading a crafted file. This critical issue poses a risk to server security and requires assessment of any Mblog instances within the environment.

NVD modified: NVD date unavailable

CVE advisoryCRITICAL

CVE-2023-6437

TP-Link routers could allow internal attacker to take full control of the devices.

Halo Surface Signal: 1 out of 5 — much less likely to be public-facing.

An internal attacker with logged-in access can take advantage of a flaw in TP-Link routers to gain complete administrative control. This allows them to control local network traffic, establish persistent backdoor access, and launch further attacks on other connected systems.

NVD modified: NVD date unavailable