‼ CVE-2023-22347 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing file structure information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22346 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing template information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-25937 ‼
📖 Read
via "National Vulnerability Database".
Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outside the public root directory. This is related to but distinct from the vulnerability reported in [CVE-2018-3715](https://security.snyk.io/vuln/npm:glance:20180129).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22362 ‼
📖 Read
via "National Vulnerability Database".
SUSHIRO App for Android outputs sensitive information to the log file, which may result in an attacker obtaining a credential information from the log file. Affected products/versions are as follows: SUSHIRO Ver.4.0.31, Thailand SUSHIRO Ver.1.0.0, Hong Kong SUSHIRO Ver.3.0.2, Singapore SUSHIRO Ver.2.0.0, and Taiwan SUSHIRO Ver.2.0.1📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48323 ‼
📖 Read
via "National Vulnerability Database".
Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A remote and unauthenticated attacker can execute arbitrary programs on the victim host by sending a crafted HTTP request, as demonstrated by /check?cmd=ping../ followed by the pathname of the powershell.exe program.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22353 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing control management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22350 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bound read vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier because the end of data cannot be verified when processing parts management information. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22360 ‼
📖 Read
via "National Vulnerability Database".
Use-after free vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process even when an error was detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-22345 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bound write vulnerability exists in Screen Creator Advance 2 Ver.0.1.1.4 Build01 and earlier due to lack of error handling process when out of specification errors are detected. Having a user of Screen Creator Advance 2 to open a specially crafted project file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-43460 ‼
📖 Read
via "National Vulnerability Database".
Driver Distributor v2.2.3.1 and earlier contains a vulnerability where passwords are stored in a recoverable format. If an attacker obtains a configuration file of Driver Distributor, the encrypted administrator's credentials may be decrypted.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-48322 ‼
📖 Read
via "National Vulnerability Database".
NETGEAR Nighthawk WiFi Mesh systems and routers are affected by a stack-based buffer overflow vulnerability. This affects MR60 before 1.1.7.132, MS60 before 1.1.7.132, R6900P before 1.3.3.154, R7000P before 1.3.3.154, R7960P before 1.4.4.94, and R8000P before 1.4.4.94.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0808 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in Deye/Revolt/Bosswerk Inverter MW3_15U_5406_1.47/MW3_15U_5406_1.471. It has been rated as problematic. This issue affects some unknown processing of the component Access Point Setting Handler. The manipulation with the input 12345678 leads to use of hard-coded password. It is possible to launch the attack on the physical device. The exploit has been disclosed to the public and may be used. Upgrading to version MW3_16U_5406_1.53 is able to address this issue. It is recommended to upgrade the affected component. The identifier VDB-220769 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
🕴 What Happened to #OpRussia? 🕴
📖 Read
via "Dark Reading".
The cyberwar to attack Russia has never really stopped, despite a decreasing interest from the West.📖 Read
via "Dark Reading".
Dark Reading
What Happened to #OpRussia?
The cyberwar to attack Russia has never really stopped, despite a decreasing interest from the West.
‼ CVE-2022-45725 ‼
📖 Read
via "National Vulnerability Database".
Improper Input Validation in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to execute arbitrary code on the target via an HTTP POST request📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45724 ‼
📖 Read
via "National Vulnerability Database".
Incorrect Access Control in Comfast router CF-WR6110N V2.3.1 allows a remote attacker on the same network to perform any HTTP request to an unauthenticated page to force the server to generate a SESSION_ID, and using this SESSION_ID an attacker can then perform authenticated requests.📖 Read
via "National Vulnerability Database".
⚠ Reddit admits it was hacked and data stolen, says “Don’t panic” ⚠
📖 Read
via "Naked Security".
Reddit is suggesting three tips as a follow-up to this breach. We agree with two of them but not with the third...📖 Read
via "Naked Security".
Naked Security
Reddit admits it was hacked and data stolen, says “Don’t panic”
Reddit is suggesting three tips as a follow-up to this breach. We agree with two of them but not with the third…
‼ CVE-2022-4551 ‼
📖 Read
via "National Vulnerability Database".
The Rich Table of Contents WordPress plugin through 1.3.7 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admins.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0362 ‼
📖 Read
via "National Vulnerability Database".
Themify Portfolio Post WordPress plugin before 1.2.2 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0373 ‼
📖 Read
via "National Vulnerability Database".
The Lightweight Accordion WordPress plugin before 1.5.15 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0270 ‼
📖 Read
via "National Vulnerability Database".
The YaMaps for WordPress Plugin WordPress plugin before 0.6.26 does not validate and escape some of its shortcode attributes before outputting them back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0379 ‼
📖 Read
via "National Vulnerability Database".
The Spotlight Social Feeds WordPress plugin before 1.4.3 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks📖 Read
via "National Vulnerability Database".