-
Vulnerability in MegaBIP and SmodBIP software
Stored XSS vulnerability has been found in SmodBIP and MegaBIP software (CVE-2023-5378).
Read more -
Russian Foreign Intelligence Service (SVR) Cyber Actors Use JetBrains TeamCity CVE in Global Targeting
CERT Polska, Polish Military Counterintelligence Service (SKW), and external partners assess Russian Foreign Intelligence Service (SVR) cyber actors, also known as APT 29, the Dukes, CozyBear, and NOBELIUM/Midnight Blizzard, are exploiting CVE-2023-42793 at a large scale.
Read more -
Vulnerability in SAS 9.4 software
Reflected XSS vulnerability (CVE-2023-4932) has been found in SAS 9.4 software.
Read more -
Vulnerability in Apereo CAS software
CERT Poland has received a report about vulnerability in the Apereo CAS software and assigned it the number CVE-2023-4612.
Read more -
Vulnerability in SmodBIP software
Cross-Site Request Forgery vulnerability has been found in SmodBIP software (CVE-2023-4837).
Read more -
Vulnerability in UptimeDC software
CERT Poland has received a report about vulnerability in the UptimeDC software and assigned it the number CVE-2023-4997.
Read more -
Vulnerability in lua-http library
CERT Poland has received a report about vulnerability in the lua-http Library and assigned it the number CVE-2023-4540.
Read more -
CERT Polska will contribute to the CVE vulnerability database
From the beginning of August, CERT Polska, as the only institution in Poland and one of 7 CERTs in Europe, can assign CVE numbers, which are used to identify, define, and catalog publicly disclosed cybersecurity vulnerabilities.
Read more -
Artemis vulnerability scanner is now open source
The Artemis vulnerability scanner is now open source! Artemis is a tool developed by the CERT Polska team and initiated by the KN Cyber science club of Warsaw University of Technology. The tool is built to find website misconfigurations and vulnerabilities on a large scale. Thanks to its modular architecture, it can combine the results of various other tools in a single place.
Read more -
Artemis – CERT Polska verifies the cybersecurity of Polish organizations
The New Year has brought more solutions to improve the security of the Polish Internet. One of them is Artemis, a tool developed by the CERT Polska team and initiated by the KN Cyber science club of Warsaw University of Technology. Artemis was designed to look for websites misconfigurations and vulnerabilities on a mass scale. We use it to verify infrastructure of entities for which, according to the National Cyber Security System Act, incident handling is coordinated by CSIRT NASK.
Read more