‼ CVE-2023-30410 ‼
📖 Read
via "National Vulnerability Database".
Jerryscript commit 1a2c047 was discovered to contain a stack overflow via the component ecma_op_function_construct at /operations/ecma-function-object.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28771 ‼
📖 Read
via "National Vulnerability Database".
Improper error message handling in Zyxel ZyWALL/USG series firmware versions 4.60 through 4.73, VPN series firmware versions 4.60 through 5.35, USG FLEX series firmware versions 4.60 through 5.35, and ATP series firmware versions 4.60 through 5.35, which could allow an unauthenticated attacker to execute some OS commands remotely by sending crafted packets to an affected device.📖 Read
via "National Vulnerability Database".
📢 96% of CISOs without necessary support to maintain cyber security 📢
📖 Read
via "ITPro".
Security professionals are leaving due to stress, and called out lack of understanding from co-workers 📖 Read
via "ITPro".
ITPro
96% of CISOs without necessary support to maintain cyber security
Security professionals are leaving due to stress, and called out lack of understanding from co-workers
‼ CVE-2023-30417 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in Pear-Admin-Boot up to v2.0.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26840 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to set a person to a user and set that user to be an Administrator.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25348 ‼
📖 Read
via "National Vulnerability Database".
ChurchCRM 4.5.3 was discovered to contain a CSV injection vulnerability via the Last Name and First Name input fields when creating a new person. These vulnerabilities allow attackers to execute arbitrary code via a crafted excel file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25346 ‼
📖 Read
via "National Vulnerability Database".
A reflected cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the id parameter of /churchcrm/v2/family/not-found.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-42335 ‼
📖 Read
via "National Vulnerability Database".
x86 shadow paging arbitrary pointer dereference In environments where host assisted address translation is necessary but Hardware Assisted Paging (HAP) is unavailable, Xen will run guests in so called shadow mode. Due to too lax a check in one of the hypervisor routines used for shadow page handling it is possible for a guest with a PCI device passed through to cause the hypervisor to access an arbitrary pointer partially under guest control.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26839 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to edit information for existing people on the site.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25490 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Eric Teubert Archivist – Custom Archive Templates plugin <= 1.7.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25710 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in DIGITALBLUE Click to Call or Chat Buttons plugin <=Â 1.4.0 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26843 ‼
📖 Read
via "National Vulnerability Database".
A stored Cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3 allows remote attackers to inject arbitrary web script or HTML via the NoteEditor.php.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-26058 ‼
📖 Read
via "National Vulnerability Database".
An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26098 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Open Document feature in Telindus Apsal 3.14.2022.235 b. An attacker may upload a crafted file to execute arbitrary code.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25347 ‼
📖 Read
via "National Vulnerability Database".
A stored cross-site scripting (XSS) vulnerability in ChurchCRM 4.5.3, allows remote attackers to inject arbitrary web script or HTML via input fields. These input fields are located in the "Title" Input Field in EventEditor.php.📖 Read
via "National Vulnerability Database".
‼ CVE-2022-45837 ‼
📖 Read
via "National Vulnerability Database".
Reflected Cross-Site Scripting (XSS) vulnerability in Denis ???????? plugin <=Â 6.0.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-27619 ‼
📖 Read
via "National Vulnerability Database".
Auth (subscriber+) Reflected Cross-Site Scripting (XSS) vulnerability in Macho Themes Regina Lite theme <=Â 2.0.7 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26057 ‼
📖 Read
via "National Vulnerability Database".
An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to the Configuration Dashboard page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as Jsession-id, a CSRF token, and an Nxsrf token would be needed. The attack can realistically only be performed by an internal user.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25479 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Podlove Podlove Subscribe button plugin <=Â 1.3.7 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26841 ‼
📖 Read
via "National Vulnerability Database".
A cross-site request forgery (CSRF) vulnerability in ChurchCRM v4.5.3 allows attackers to change any user's password except for the user that is currently logged in.📖 Read
via "National Vulnerability Database".
🕴 Building a Better SBOM 🕴
📖 Read
via "Dark Reading".
Generating an SBOM is easy. It's generating one that's comprehensive and accurate that's hard.📖 Read
via "Dark Reading".
Dark Reading
Building a Better SBOM
Generating an SBOM is easy. It's generating one that's comprehensive and accurate that's hard.