{"uuid": "0cc54131-2fcc-459d-a1fc-d7984f942588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2023-47246", "type": "seen", "source": "https://t.me/KomunitiSiber/1052", "content": "Zero-Day Alert: Lace Tempest Exploits SysAid IT Support Software Vulnerability\nhttps://thehackernews.com/2023/11/zero-day-alert-lace-tempest-exploits.html\n\nThe threat actor known as Lace Tempest has been linked to the exploitation of a zero-day flaw in SysAid IT support software in limited attacks, according to new findings from Microsoft.\nLace Tempest, which is known for distributing the Cl0p ransomware, has in the past leveraged zero-day flaws in\u00a0MOVEit Transfer\u00a0and\u00a0PaperCut servers.\nThe issue, tracked as\u00a0CVE-2023-47246, concerns a path traversal", "creation_timestamp": "2023-11-09T18:40:03.000000Z"}