🛡 Cybersecurity & Privacy 🛡 - News
@cibsecurity
25.9K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
🛡 Cybersecurity & Privacy 🛡 - News
25.9K subscribers
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1694 ‼

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.

📖 Read

via "National Vulnerability Database".
489 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1692 ‼

The window management module lacks permission verification.Successful exploitation of this vulnerability may affect confidentiality.

📖 Read

via "National Vulnerability Database".
516 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-1693 ‼

The Settings module has the file privilege escalation vulnerability.Successful exploitation of this vulnerability may affect confidentiality.

📖 Read

via "National Vulnerability Database".
510 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33244 ‼

Obsidian before 1.2.2 allows calls to unintended APIs (for microphone access, camera access, and desktop notification) via an embedded web page.

📖 Read

via "National Vulnerability Database".
499 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-32700 ‼

LuaTeX before 1.17.0 allows execution of arbitrary shell commands when compiling a TeX file obtained from an untrusted source. This occurs because luatex-core.lua lets the original io.popen be accessed. This also affects TeX Live before 2023 r66984 and MiKTeX before 23.5.

📖 Read

via "National Vulnerability Database".
528 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-47134 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Bill Erickson Gallery Metabox plugin <= 1.5 versions.

📖 Read

via "National Vulnerability Database".
👍1
488 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-22689 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Lucian Apostol Auto Affiliate Links plugin <= 6.3 versions.

📖 Read

via "National Vulnerability Database".
525 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-23890 ‼

Cross-Site Request Forgery (CSRF) vulnerability in LJ Apps WP Airbnb Review Slider plugin <= 3.2 versions.

📖 Read

via "National Vulnerability Database".
597 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-32589 ‼

Cross-Site Request Forgery (CSRF) vulnerability in PingOnline Dyslexiefont Free plugin <= 1.0.0 versions.

📖 Read

via "National Vulnerability Database".
641 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-24414 ‼

Cross-Site Request Forgery (CSRF) vulnerability in RoboSoft Photo Gallery, Images, Slider in Rbs Image Gallery plugin <= 3.2.11 versions.

📖 Read

via "National Vulnerability Database".
732 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-2826 ‼

A vulnerability has been found in SourceCodester Class Scheduling System 1.0 and classified as problematic. This vulnerability affects unknown code of the file search_teacher_result.php of the component POST Parameter Handler. The manipulation of the argument teacher leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-229612.

📖 Read

via "National Vulnerability Database".
788 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33252 ‼

iden3 snarkjs through 0.6.11 allows double spending because there is no validation that the publicSignals length is less than the field modulus.

📖 Read

via "National Vulnerability Database".
690 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2020-36694 ‼

An issue was discovered in netfilter in the Linux kernel before 5.10. There can be a use-after-free in the packet processing context, because the per-CPU sequence count is mishandled during concurrent iptables rules replacement. This could be exploited with the CAP_NET_ADMIN capability in an unprivileged namespace. NOTE: cc00bca was reverted in 5.12.

📖 Read

via "National Vulnerability Database".
695 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33254 ‼

There is an LDAP bind credentials exposure on KACE Systems Deployment and Remote Site appliances 9.0.146. The captured credentials may provide a higher privilege level on the Active Directory domain. To exploit this, an authenticated attacker edits the user-authentication settings to specify an attacker-controlled LDAP server, clicks the Test Settings button, and captures the cleartext credentials.

📖 Read

via "National Vulnerability Database".
667 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2022-0010 ‼

Insertion of Sensitive Information into Log File vulnerability in ABB QCS 800xA, ABB QCS AC450, ABB Platform Engineering Tools.An attacker, who already has local access to the QCS nodes, could successfully obtain the password for a system user account. Using this information, the attacker could have the potential to exploit this vulnerability to gain control of system nodes. This issue affects QCS 800xA: from 1.0;0 through 6.1SP2; QCS AC450: from 1.0;0 through 5.1SP2; Platform Engineering Tools: from 1.0:0 through 2.3.0.

📖 Read

via "National Vulnerability Database".
525 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-22714 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Supsystic Coming Soon by Supsystic plugin <= 1.7.10 versions.

📖 Read

via "National Vulnerability Database".
478 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33297 ‼

Bitcoin Core before 24.1, when debug mode is not used, allows attackers to cause a denial of service (CPU consumption) because draining the inventory-to-send queue is inefficient, as exploited in the wild in May 2023.

📖 Read

via "National Vulnerability Database".
391 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-33235 ‼

MXsecurity version 1.0 is vulnearble to command injection vulnerability. This vulnerability has been reported in the SSH CLI program, which can be exploited by attackers who have gained authorization privileges. The attackers can break out of the restricted shell and subsequently execute arbitrary code.

📖 Read

via "National Vulnerability Database".
320 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-22709 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Atif N SRS Simple Hits Counter plugin <= 1.1.0 versions.

📖 Read

via "National Vulnerability Database".
278 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-23813 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Joseph C Dolson My Calendar plugin <= 3.4.3 versions.

📖 Read

via "National Vulnerability Database".
273 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-23712 ‼

Cross-Site Request Forgery (CSRF) vulnerability in User Meta Manager plugin <= 3.4.9 versions.

📖 Read

via "National Vulnerability Database".
272 views