βΌ CVE-2023-34478 βΌ
π Read
via "National Vulnerability Database".
Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentication bypass when used together with APIs or other web frameworks that route requests based on non-normalized requests.Mitigation:Γ Update to Apache Shiro 1.12.0+ or 2.0.0-alpha-3+π Read
via "National Vulnerability Database".
βΌ CVE-2023-37613 βΌ
π Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in Assembly Software Trialworks v11.4 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the asset src parameter.π Read
via "National Vulnerability Database".
π¦Ώ How to Easily Block IP Addresses From Accessing a Desktop or Server π¦Ώ
π Read
via "Tech Republic".
In this How to Make Tech Work tutorial, Jack Wallen shows how to add another layer of security to your Linux machines with just two files.π Read
via "Tech Republic".
TechRepublic
How to Easily Block IP Addresses From Accessing a Desktop or Server
In this How to Make Tech Work tutorial, Jack Wallen shows how to add another layer of security to your Linux machines with just two files.
π¦Ώ Independent Ada Lovelace Institute Asks UK Government to Firm up AI Regulation Proposals π¦Ώ
π Read
via "Tech Republic".
While the United Nations hashes out regulations, the UKβs βcontext-basedβ approach is intended to spur innovation but may cause uncertainty in the industry.π Read
via "Tech Republic".
TechRepublic
Independent Ada Lovelace Institute Asks UK Government to Firm up AI Regulation Proposals
While the United Nations hashes out regulations, the UKβs βcontext-basedβ approach is intended to spur innovation but may cause uncertainty in the industry.
π¦Ώ How to Easily Block IP Addresses From Accessing a Desktop or Server π¦Ώ
π Read
via "Tech Republic".
In this How to Make Tech Work tutorial, Jack Wallen shows how to add another layer of security to your Linux machines with just two files.π Read
via "Tech Republic".
TechRepublic
How to Block IP Addresses From Accessing a Desktop or Server in Linux
In this How to Make Tech Work tutorial, Jack Wallen shows how to add another layer of security to your Linux machines with just two files.
βΌ CVE-2021-39421 βΌ
π Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in SeedDMS v6.0.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.π Read
via "National Vulnerability Database".
βΌ CVE-2023-20593 βΌ
π Read
via "National Vulnerability Database".
An issue in Γ’β¬ΕZen 2Γ’β¬οΏ½ CPUs, under specific microarchitectural circumstances, may allow an attacker to potentially access sensitive information.π Read
via "National Vulnerability Database".
π¦Ώ OpenAI, Google and More Agree to White House List of Eight AI Safety Assurances π¦Ώ
π Read
via "Tech Republic".
Assurances include watermarking, reporting about capabilities and risks, investing in safeguards to prevent bias and more. π Read
via "Tech Republic".
TechRepublic
IBM, Salesforce Pledge to White House List of Eight AI Safety Assurances
Assurances include watermarking, reporting about capabilities and risks and investing in safeguards to prevent bias.
β Apple ships that recent βRapid Responseβ spyware patch to everyone, fixes a second zero-day β
π Read
via "Naked Security".
Another month, another patch for in-the-wild iPhone malware (and a whole lot more).π Read
via "Naked Security".
Sophos News
Naked Security β Sophos News
βΌ CVE-2023-22428 βΌ
π Read
via "National Vulnerability Database".
Improper privilege validation in Command Centre Server allows authenticated operators to modify Division lineage.This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831(MR8), vEL8.40 and prior.π Read
via "National Vulnerability Database".
βΌ CVE-2023-3871 βΌ
π Read
via "National Vulnerability Database".
A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. This affects an unknown part of the file /admin/edit_category.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235233 was assigned to this vulnerability.π Read
via "National Vulnerability Database".
βΌ CVE-2023-26045 βΌ
π Read
via "National Vulnerability Database".
NodeBB is Node.js based forum software. Starting in version 2.5.0 and prior to version 2.8.7, due to the use of the object destructuring assignment syntax in the user export code path, combined with a path traversal vulnerability, a specially crafted payload could invoke the user export logic to arbitrarily execute javascript files on the local disk. This issue is patched in version 2.8.7. As a workaround, site maintainers can cherry pick the fix into their codebase to patch the exploit.π Read
via "National Vulnerability Database".
βΌ CVE-2023-3879 βΌ
π Read
via "National Vulnerability Database".
A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /admin/del_category.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-235241 was assigned to this vulnerability.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33777 βΌ
π Read
via "National Vulnerability Database".
An issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to execute a directory traversal attack.π Read
via "National Vulnerability Database".
βΌ CVE-2023-23568 βΌ
π Read
via "National Vulnerability Database".
Improper privilege validation in Command Centre Server allows authenticated unprivileged operators to modify and view Personal Data Fields.This issue affects Command Centre: vEL8.90 prior to vEL8.90.1318 (MR1), vEL8.80 prior to vEL8.80.1192 (MR2), vEL8.70 prior to vEL8.70.2185 (MR4), vEL8.60 prior to vEL8.60.2347 (MR6), vEL8.50 prior to vEL8.50.2831 (MR8), all versions vEL8.40 and priorπ Read
via "National Vulnerability Database".
βΌ CVE-2023-38745 βΌ
π Read
via "National Vulnerability Database".
Pandoc before 3.1.6 allows arbitrary file write: this can be triggered by providing a crafted image element in the input when generating files via the --extract-media option or outputting to PDF format. This allows an attacker to create or overwrite arbitrary files, depending on the privileges of the process running Pandoc. It only affects systems that pass untrusted user input to Pandoc and allow Pandoc to be used to produce a PDF or with the --extract-media option. NOTE: this issue exists because of an incomplete fix for CVE-2023-35936 (failure to properly account for double encoded path names).π Read
via "National Vulnerability Database".
βΌ CVE-2023-3880 βΌ
π Read
via "National Vulnerability Database".
A vulnerability classified as critical has been found in Campcodes Beauty Salon Management System 1.0. Affected is an unknown function of the file /admin/del_service.php. The manipulation of the argument editid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-235242 is the identifier assigned to this vulnerability.π Read
via "National Vulnerability Database".
βΌ CVE-2023-22363 βΌ
π Read
via "National Vulnerability Database".
A stack-based buffer overflow in the Command Centre Server allows an attacker to cause a denial of service attack via assigning cardholders to an Access Group.This issue affects Command Centre: vEL8.80 prior to vEL8.80.1192 (MR2)π Read
via "National Vulnerability Database".
βΌ CVE-2023-37361 βΌ
π Read
via "National Vulnerability Database".
REDCap 12.0.26 LTS and 12.3.2 Standard allows SQL Injection via scheduling, repeatforms, purpose, app_title, or randomization.π Read
via "National Vulnerability Database".
βΌ CVE-2023-3877 βΌ
π Read
via "National Vulnerability Database".
A vulnerability was found in Campcodes Beauty Salon Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/add-services.php. The manipulation of the argument cost leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-235239.π Read
via "National Vulnerability Database".
βΌ CVE-2023-32232 βΌ
π Read
via "National Vulnerability Database".
An issue was discovered in Vasion PrinterLogic Client for Windows before 25.0.0.836. During client installation and repair, a PrinterLogic binary is called by the installer to configure the device. This window is not hidden, and is running with elevated privileges. A standard user can break out of this window, obtaining a full SYSTEM command prompt window. This results in complete compromise via arbitrary SYSTEM code execution (elevation of privileges).π Read
via "National Vulnerability Database".