🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
‼ CVE-2023-27787 ‼

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the parse_list function at the list.c:81 endpoint.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27783 ‼

An issue found in TCPreplay tcprewrite v.4.4.3 allows a remote attacker to cause a denial of service via the tcpedit_dlt_cleanup function at plugins/dlt_plugins.c.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27786 ‼

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the macinstring function.

📖 Read

via "National Vulnerability Database".
‼ CVE-2020-22647 ‼

An issue found in DepositGame v.1.0 allows an attacker to gain sensitive information via the GetBonusWithdraw and withdraw functions.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27130 ‼

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via an arbitrarily supplied URL parameter.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27784 ‼

An issue found in TCPReplay v.4.4.3 allows a remote attacker to cause a denial of service via the read_hexstring function at the utils.c:309 endpoint.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27709 ‼

SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dedestory_catalog.php endpoint.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27711 ‼

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code via the Comment Manager /admin/manage-comments.php component.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27707 ‼

SQL injection vulnerability found in DedeCMS v.5.7.106 allows a remote attacker to execute arbitrary code via the rank_* parameter in the /dede/group_store.php endpoint.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-26767 ‼

Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the lou_logFile function at logginc.c endpoint.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-28155 ‼

** UNSUPPORTED WHEN ASSIGNED ** The Request package through 2.88.1 for Node.js allows a bypass of SSRF mitigations via an attacker-controller server that does a cross-protocol redirect (HTTP to HTTPS, or HTTPS to HTTP). NOTE: This vulnerability only affects products that are no longer supported by the maintainer.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-26769 ‼

Buffer Overflow vulnerability found in Liblouis Lou_Trace v.3.24.0 allows a remote attacker to cause a denial of service via the resolveSubtable function at compileTranslationTabel.c.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-26768 ‼

Buffer Overflow vulnerability found in Liblouis v.3.24.0 allows a remote attacker to cause a denial of service via the compileTranslationTable.c and lou_setDataPath functions.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27789 ‼

An issue found in TCPprep v.4.4.3 allows a remote attacker to cause a denial of service via the cidr2cidr function at the cidr.c:178 endpoint.

📖 Read

via "National Vulnerability Database".
‼ CVE-2021-31637 ‼

An issue found in UwAmp v.1.1, 1.2, 1.3, 2.0, 2.1, 2.2, 2.2.1, 3.0.0, 3.0.1, 3.0.2 allows a remote attacker to execute arbitrary code via a crafted DLL.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27131 ‼

Cross Site Scripting vulnerability found in Typecho v.1.2.0 allows a remote attacker to execute arbitrary code viathe Post Editorparameter.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-27788 ‼

An issue found in TCPrewrite v.4.4.3 allows a remote attacker to cause a denial of service via the ports2PORT function at the portmap.c:69 endpoint.

📖 Read

via "National Vulnerability Database".
🕴 Change Is Coming to the Network Detection and Response (NDR) Market 🕴

After years of relative stability and steady growth, Omdia research indicates the NDR segment is poised for rapid change.

📖 Read

via "Dark Reading".
⚠ Microsoft fixes two 0-days on Patch Tuesday – update now! ⚠

An email you haven't even looked at yet could be used to trick Outlook into helping crooks to logon as you.

📖 Read

via "Naked Security".
‼ CVE-2023-27041 ‼

School Registration and Fee System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at/bilal final/edit_user.php.

📖 Read

via "National Vulnerability Database".
‼ CVE-2023-28106 ‼

Pimcore is an open source data and experience management platform. Prior to version 10.5.19, an attacker can use cross-site scripting to send a malicious script to an unsuspecting user. Users may upgrade to version 10.5.19 to receive a patch or, as a workaround, apply the patch manually.

📖 Read

via "National Vulnerability Database".