‼ CVE-2023-2551 ‼
📖 Read
via "National Vulnerability Database".
PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2554 ‼
📖 Read
via "National Vulnerability Database".
External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2552 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2550 ‼
📖 Read
via "National Vulnerability Database".
Cross-site Scripting (XSS) - Stored in GitHub repository thorsten/phpmyfaq prior to 3.1.13.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-26519 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Alex Benfica Publish to Schedule plugin <=Â 4.5.4 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-26517 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Jeff Starr Dashboard Widgets Suite plugin <=Â 3.2.1 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25491 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Samuel Marshall JCH Optimize plugin <= 3.2.2 versions.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-24400 ‼
📖 Read
via "National Vulnerability Database".
Auth. (contributor+) Cross-Site Scripting (XSS) vulnerability in Hu-manity.Co Cookie Notice & Compliance for GDPR / CCPA plugin <=Â 2.4.6 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-31047 ‼
📖 Read
via "National Vulnerability Database".
In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32290 ‼
📖 Read
via "National Vulnerability Database".
The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2564 ‼
📖 Read
via "National Vulnerability Database".
OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2565 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability has been found in SourceCodester Multi Language Hotel Management Software 1.0 and classified as problematic. This vulnerability affects unknown code of the file ajax.php of the component POST Parameter Handler. The manipulation of the argument complaint_type with the input <script>alert(document.cookie)</script> leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-228172.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30185 ‼
📖 Read
via "National Vulnerability Database".
CRMEB v4.4 to v4.6 was discovered to contain an arbitrary file upload vulnerability via the component \attachment\SystemAttachmentServices.php.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-30018 ‼
📖 Read
via "National Vulnerability Database".
Judging Management System v1.0 is vulnerable to SQL Injection. via /php-jms/review_se_result.php?mainevent_id=.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30257 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow in the component /proc/ftxxxx-debug of FiiO M6 Build Number v1.0.4 allows attackers to escalate privileges to root.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29944 ‼
📖 Read
via "National Vulnerability Database".
Metersphere v1.20.20-lts-79d354a6 is vulnerable to Remote Command Execution. The system command reverse-shell can be executed at the custom code snippet function of the metersphere system workbench📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-29247 ‼
📖 Read
via "National Vulnerability Database".
Task instance details page in the UI is vulnerable to a stored XSS.This issue affects Apache Airflow: before 2.6.0.📖 Read
via "National Vulnerability Database".
🕴 North Korean APT Uses Malicious Microsoft OneDrive Links to Spread New Malware 🕴
📖 Read
via "Dark Reading".
ReconShark, aimed at gaining initial access to targeted systems, is a component of previous malware used by the Kimsuky group.📖 Read
via "Dark Reading".
Dark Reading
North Korean APT Uses Malicious Microsoft OneDrive Links to Spread New Malware
ReconShark, aimed at gaining initial access to targeted systems, is a component of previous malware used by the Kimsuky group.
👍1
🕴 Why the FTX Collapse Was an Identity Problem 🕴
📖 Read
via "Dark Reading".
Cryptocurrency has a valuable role to play in a Web3 world — but only if the public can fully trust it.📖 Read
via "Dark Reading".
Dark Reading
Why the FTX Collapse Was an Identity Problem
Cryptocurrency has a valuable role to play in a Web3 world — but only if the public can fully trust it.
‼ CVE-2023-25052 ‼
📖 Read
via "National Vulnerability Database".
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Teplitsa Yandex.News Feed by Teplitsa plugin <=Â 1.12.5 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2575 ‼
📖 Read
via "National Vulnerability Database".
Advantech EKI-1524, EKI-1522, EKI-1521 devices through 1.21 are affected by a Stack-based Buffer Overflow vulnerability, which can be triggered by authenticated users via a crafted POST request.📖 Read
via "National Vulnerability Database".