‼ CVE-2023-3308 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as problematic has been found in whaleal IceFrog 1.1.8. Affected is an unknown function of the component Aviator Template Engine. The manipulation leads to deserialization. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-231804.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3305 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability was found in C-DATA Web Management System up to 20230607. It has been classified as critical. This affects an unknown part of the file /cgi-bin/jumpto.php?class=user&page=config_save&isphp=1 of the component User Creation Handler. The manipulation of the argument user/newpassword leads to improper access controls. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-231801 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3309 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability classified as problematic was found in SourceCodester Resort Reservation System 1.0. Affected by this vulnerability is an unknown functionality of the file ?page=rooms of the component Manage Room Page. The manipulation of the argument Cottage Number leads to cross site scripting. The attack can be launched remotely. The identifier VDB-231805 was assigned to this vulnerability.📖 Read
via "National Vulnerability Database".
❤1
‼ CVE-2023-3311 ‼
📖 Read
via "National Vulnerability Database".
A vulnerability, which was classified as problematic, was found in SourceCodester Advance Charity Management System 1.0. This affects an unknown part of the file addsuppliers.php. The manipulation of the argument First name leads to cross site scripting. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-231807.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35825 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel before 6.3.4. A use-after-free was found in r592_remove in drivers/memstick/host/r592.c.📖 Read
via "National Vulnerability Database".
❤2
‼ CVE-2023-35827 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in the Linux kernel through 6.3.8. A use-after-free was found in ravb_remove in drivers/net/ethernet/renesas/ravb_main.c.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-35852 ‼
📖 Read
via "National Vulnerability Database".
In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, that comes from a rule, may trigger absolute or relative directory traversal, and lead to write access to a local filesystem. This is addressed in 6.0.13 by requiring allow-absolute-filenames and allow-write (in the datasets rules configuration section) if an installation requires traversal/writing in this situation.📖 Read
via "National Vulnerability Database".
👍1
‼ CVE-2023-35844 ‼
📖 Read
via "National Vulnerability Database".
packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory traversal and do not ensure that an intended file extension (.csv or .png) is used.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34642 ‼
📖 Read
via "National Vulnerability Database".
KioWare for Windows through v8.33 was discovered to contain an incomplete blacklist filter for blocked dialog boxes on Windows 10. This issue can allow attackers to open a file dialog box via the function showDirectoryPicker() which can then be used to open an unprivileged command prompt.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32201 ‼
📖 Read
via "National Vulnerability Database".
Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-34603 ‼
📖 Read
via "National Vulnerability Database".
JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryFilterTableDictInfo at org.jeecg.modules.api.controller.SystemApiController.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32542 ‼
📖 Read
via "National Vulnerability Database".
Out-of-bounds read vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted V8 file may lead to information disclosure and/or arbitrary code execution.📖 Read
via "National Vulnerability Database".
📢 Anonymous Sudan: Who are the hackers behind Microsoft’s cloud outages? 📢
📖 Read
via "ITPro".
The highly aggressive ‘hacktivist’ group is thought to have links to the pro-Russian Killnet hacker collective 📖 Read
via "ITPro".
Cloud Pro
Anonymous Sudan: Who are the hackers behind Microsoft’s cloud outages?
The highly aggressive ‘hacktivist’ group is thought to have links to the pro-Russian Killnet hacker collective
‼ CVE-2023-2805 ‼
📖 Read
via "National Vulnerability Database".
The SupportCandy WordPress plugin before 3.1.7 does not properly sanitise and escape the agents[] parameter in the set_add_agent_leaves AJAX function before using it in a SQL statement, leading to a SQL injection exploitable by high privilege users such as admin.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25733 ‼
📖 Read
via "National Vulnerability Database".
The return value from `gfx::SourceSurfaceSkia::Map()` wasn't being verified which could have potentially lead to a null pointer dereference. This vulnerability affects Firefox < 110.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-25747 ‼
📖 Read
via "National Vulnerability Database".
A potential use-after-free in libaudio was fixed by disabling the AAudio backend when running on Android API below version 30.*This bug only affects Firefox for Android. Other versions of Firefox are unaffected.* This vulnerability affects Firefox for Android < 110.1.0.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-2899 ‼
📖 Read
via "National Vulnerability Database".
The Google Map Shortcode WordPress plugin through 3.1.2 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege users such as admin📖 Read
via "National Vulnerability Database".
🕴 Decoding Identity and Access Management For Organizations and Consumers 🕴
📖 Read
via "Dark Reading".
Workforce IAM and consumer IAM are not interchangeable — they serve different purposes and constituencies.📖 Read
via "Dark Reading".
Dark Reading
Decoding Identity and Access Management for Organizations and Consumers
Workforce IAM and consumer IAM are not interchangeable — they serve different purposes and constituencies.
🕴 US Investors Sniffing Around Blacklisted NSO Group Assets 🕴
📖 Read
via "Dark Reading".
Pressure mounts on the NSO Group's business viability as Khashoggi widow joins group of plaintiffs suing the Israeli firm for Pegasus spyware abuse.📖 Read
via "Dark Reading".
Dark Reading
US Investors Sniffing Around Blacklisted NSO Group Assets
Pressure mounts on the NSO Group's business viability as Khashoggi widow joins group of plaintiffs suing the Israeli firm for Pegasus spyware abuse.
❤1
🕴 Generative AI Has Its Risks, But the Sky Isn't Falling 🕴
📖 Read
via "Dark Reading".
The threat organizations face with GenAI is not new, but it could speed how quickly private data reaches a wider audience.📖 Read
via "Dark Reading".
Dark Reading
Generative AI Has Its Risks, but the Sky Isn't Falling
The threat organizations face with GenAI is not new, but it could speed how quickly private data reaches a wider audience.
🕴 Name That Toon: Time to Spare? 🕴
📖 Read
via "Dark Reading".
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.📖 Read
via "Dark Reading".
Dark Reading
Name That Toon: Time to Spare?
Feeling creative? Submit your caption and our panel of experts will reward the winner with a $25 Amazon gift card.