‼ CVE-2023-32750 ‼
📖 Read
via "National Vulnerability Database".
Pydio Cells through 4.1.2 allows SSRF. For longer running processes, Pydio Cells allows for the creation of jobs, which are run in the background. The job "remote-download" can be used to cause the backend to send a HTTP GET request to a specified URL and save the response to a new file. The response file is then available in a user-specified folder in Pydio Cells.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-29403 ‼
📖 Read
via "National Vulnerability Database".
On Unix platforms, the Go runtime does not behave differently when a binary is run with the setuid/setgid bits. This can be dangerous in certain cases, such as when dumping memory state, or assuming the status of standard i/o file descriptors. If a setuid/setgid binary is executed with standard I/O file descriptors closed, opening any files can result in unexpected content being read or written with elevated privileges. Similarly, if a setuid/setgid program is terminated, either via panic or signal, it may leak the contents of its registers.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32751 ‼
📖 Read
via "National Vulnerability Database".
Pydio Cells through 4.1.2 allows XSS. Pydio Cells implements the download of files using presigned URLs which are generated using the Amazon AWS SDK for JavaScript [1]. The secrets used to sign these URLs are hardcoded and exposed through the JavaScript files of the web application. Therefore, it is possible to generate valid signatures for arbitrary download URLs. By uploading an HTML file and modifying the download URL to serve the file inline instead of as an attachment, any included JavaScript code is executed when the URL is opened in a browser, leading to a cross-site scripting vulnerability.📖 Read
via "National Vulnerability Database".
🤔1
‼ CVE-2023-34243 ‼
📖 Read
via "National Vulnerability Database".
TGstation is a toolset to manage production BYOND servers. In affected versions if a Windows user was registered in tgstation-server (TGS), an attacker could discover their username by brute-forcing the login endpoint with an invalid password. When a valid Windows logon was found, a distinct response would be generated. This issue has been addressed in version 5.12.5. Users are advised to upgrade. Users unable to upgrade may be mitigated by rate-limiting API calls with software that sits in front of TGS in the HTTP pipeline such as fail2ban.📖 Read
via "National Vulnerability Database".
👍1🔥1
‼ CVE-2023-3173 ‼
📖 Read
via "National Vulnerability Database".
Improper Restriction of Excessive Authentication Attempts in GitHub repository froxlor/froxlor prior to 2.0.20.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34112 ‼
📖 Read
via "National Vulnerability Database".
JavaCPP Presets is a project providing Java distributions of native C++ libraries. All the actions in the `bytedeco/javacpp-presets` use the `github.event.head_commit.message?` parameter in an insecure way. For example, the commit message is used in a run statement - resulting in a command injection vulnerability due to string interpolation. No exploitation has been reported. This issue has been addressed in version 1.5.9. Users of JavaCPP Presets are advised to upgrade as a precaution.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3172 ‼
📖 Read
via "National Vulnerability Database".
Path Traversal in GitHub repository froxlor/froxlor prior to 2.0.20.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1978 ‼
📖 Read
via "National Vulnerability Database".
The ShiftController Employee Shift Scheduling plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the query string in versions up to, and including, 4.9.25 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0992 ‼
📖 Read
via "National Vulnerability Database".
The Shield Security plugin for WordPress is vulnerable to stored Cross-Site Scripting in versions up to, and including, 17.0.17 via the 'User-Agent' header. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1910 ‼
📖 Read
via "National Vulnerability Database".
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to unauthorized modification of data due to an insufficient capability check on the get_remote_templates function in versions up to, and including, 1.8.3. This makes it possible for authenticated attackers with subscriber-level permissions or above to flush the remote template cache. Cached template information can also be accessed via this endpoint but these are not considered sensitive as they are publicly accessible from the developer's site.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-1895 ‼
📖 Read
via "National Vulnerability Database".
The Getwid – Gutenberg Blocks plugin for WordPress is vulnerable to Server Side Request Forgery via the get_remote_content REST API endpoint in versions up to, and including, 1.8.3. This can allow authenticated attackers with subscriber-level permissions or above to make web requests to arbitrary locations originating from the web application and can be used to query and modify information from internal services.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2189 ‼
📖 Read
via "National Vulnerability Database".
The Elementor Addons, Widgets and Enhancements – Stax plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the toggle_widget function in versions up to, and including, 1.4.3. This makes it possible for authenticated attackers, with subscriber-level permissions and above, to enable or disable Elementor widgets.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2086 ‼
📖 Read
via "National Vulnerability Database".
The Essential Blocks plugin for WordPress is vulnerable to unauthorized use of functionality due to a missing capability check on the template_count function in versions up to, and including, 4.0.6. This makes it possible for subscriber-level attackers to obtain plugin template information. While a nonce check is present, it is only executed when a nonce is provided. Not providing a nonce results in the nonce verification to be skipped. There is no capability check.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2895 ‼
📖 Read
via "National Vulnerability Database".
The WP EasyCart plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 5.4.8. This is due to missing or incorrect nonce validation on the process_bulk_activate_product function. This makes it possible for unauthenticated attackers to bulk activate products via a forged request granted they can trick a site administrator into performing an action such as clicking on a link.📖 Read
via "National Vulnerability Database".
📢 Arctic Wolf expands $1 million security operations warranty to Europe and ANZ 📢
📖 Read
via "ITPro".
Qualifying customers now have access to fully underwritten financial assistance of up to $1 million in the event of a cyber attack 📖 Read
via "ITPro".
channelpro
Arctic Wolf expands $1 million security operations warranty to Europe and ANZ
Qualifying customers now have access to fully underwritten financial assistance of up to $1 million in the event of a cyber attack
📢 University of Manchester admits cyber incident "likely" led to data theft 📢
📖 Read
via "ITPro".
The university said it is working with relevant authorities as part of its investigation 📖 Read
via "ITPro".
ITPro
University of Manchester admits cyber incident "likely" led to data theft
The university said it is working with relevant authorities as part of its investigation
‼ CVE-2023-1428 ‼
📖 Read
via "National Vulnerability Database".
There exists an vulnerability causing an abort() to be called in gRPC. The following headers cause gRPC's C++ implementation to abort() when called via http2:te: x (x != trailers):scheme: x (x != http, https)grpclb_client_stats: x (x == anything)On top of sending one of those headers, a later header must be sent that gets the total header size past 8KB. We recommend upgrading past git commit 2485fa94bd8a723e5c977d55a3ce10b301b437f8 or v1.53 and above.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32731 ‼
📖 Read
via "National Vulnerability Database".
When gRPC HTTP2 stack raised a header size exceeded error, it skipped parsing the rest of the HPACK frame. This caused any HPACK table mutations to also be skipped, resulting in a desynchronization of HPACK tables between sender and receiver. If leveraged, say, between a proxy and a backend, this could lead to requests from the proxy being interpreted as containing headers from different proxy clients - leading to an information leak that can be used for privilege escalation or data exfiltration. We recommend upgrading beyond the commit contained in https://github.com/grpc/grpc/pull/32309 https://github.com/grpc/grpc/pull/32309📖 Read
via "National Vulnerability Database".
🕴 How Continuous Monitoring and Threat Intel Can Help Prevent Ransomware 🕴
📖 Read
via "Dark Reading".
Security teams should be empowered with the right amount of intelligence to track new and emerging threats and connect that intel to historical data.📖 Read
via "Dark Reading".
Dark Reading
How Continuous Monitoring and Threat Intel Can Help Prevent Ransomware
Security teams should be empowered with the right amount of intelligence to track new and emerging threats and connect that intel to historical data.
‼ CVE-2023-3183 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in SourceCodester Performance Indicator System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addproduct.php. The manipulation of the argument prodname leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-231163.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3184 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in SourceCodester Sales Tracker Management System 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /classes/Users.php?f=save. The manipulation of the argument firstname/middlename/lastname/username leads to cross site scripting. The attack may be launched remotely. The identifier of this vulnerability is VDB-231164.📖 Read
via "National Vulnerability Database".