‼ CVE-2023-39358 ‼
📖 Read
via "National Vulnerability Database".
Cacti is an open source operational monitoring and fault management framework. An authenticated SQL injection vulnerability was discovered which allows authenticated users to perform privilege escalation and remote code execution. The vulnerability resides in the `reports_user.php` file. In `ajax_get_branches`, the `tree_id` parameter is passed to the `reports_get_branch_select` function without any validation. This issue has been addressed in version 1.2.25. Users are advised to upgrade. There are no known workarounds for this vulnerability.📖 Read
via "National Vulnerability Database".
♟️ Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach ♟️
📖 Read
via "Krebs on Security".
In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists targeting security-conscious people throughout the tech industry has led some security experts to conclude that crooks likely have succeeded at cracking open some of the stolen LastPass vaults.📖 Read
via "Krebs on Security".
Krebs on Security
Experts Fear Crooks are Cracking Keys Stolen in LastPass Breach
In November 2022, the password manager service LastPass disclosed a breach in which hackers stole password vaults containing both encrypted and plaintext data for more than 25 million users. Since then, a steady trickle of six-figure cryptocurrency heists…
‼ CVE-2023-32425 ‼
📖 Read
via "National Vulnerability Database".
The issue was addressed with improved memory handling. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to gain elevated privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28210 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30715 ‼
📖 Read
via "National Vulnerability Database".
Improper access control vulnerability in Weather prior to SMR Sep-2023 Release 1 allows attackers to access location information set in Weather without permission.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32426 ‼
📖 Read
via "National Vulnerability Database".
A logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.3. An app may be able to gain root privileges.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30724 ‼
📖 Read
via "National Vulnerability Database".
Improper authentication in GallerySearchProvider of Gallery prior to version 14.5.01.2 allows attacker to access search history.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30730 ‼
📖 Read
via "National Vulnerability Database".
Implicit intent hijacking vulnerability in Camera prior to versions 11.0.16.43 in Android 11, 12.1.00.30, 12.0.07.53, 12.1.03.10 in Android 12, and 13.0.01.43, 13.1.00.83 in Android 13 allows local attacker to access specific file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28213 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32370 ‼
📖 Read
via "National Vulnerability Database".
A logic issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3. Content Security Policy to block domains with wildcards may fail.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30712 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation in Settings Suggestions prior to SMR Sep-2023 Release 1 allows attackers to launch arbitrary activity.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28211 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28195 ‼
📖 Read
via "National Vulnerability Database".
A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3. An app may be able to read sensitive location information.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28209 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Ventura 13.3. An app may be able to cause unexpected system termination or write kernel memory.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30709 ‼
📖 Read
via "National Vulnerability Database".
Improper access control in Dual Messenger prior to SMR Sep-2023 Release 1 allows local attackers launch activity with system privilege.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30710 ‼
📖 Read
via "National Vulnerability Database".
Improper input validation vulnerability in Knox AI prior to SMR Sep-2023 Release 1 allows local attackers to launch privileged activities.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-28208 ‼
📖 Read
via "National Vulnerability Database".
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.2, iOS 16.3 and iPadOS 16.3. A user may send a text from a secondary eSIM despite configuring a contact to use a primary eSIM.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-32432 ‼
📖 Read
via "National Vulnerability Database".
A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.4, tvOS 16.5, iOS 16.5 and iPadOS 16.5, watchOS 9.5. An app may be able to access user-sensitive data.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30718 ‼
📖 Read
via "National Vulnerability Database".
Improper export of android application components vulnerability in WifiApAutoHotspotEnablingActivity prior to SMR Sep-2023 Release 1 allows local attacker to change a Auto Hotspot setting.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4485 ‼
📖 Read
via "National Vulnerability Database".
ARDEREGÂ ?Sistema SCADA Central versions 2.203 and priorlogin page are vulnerable to an unauthenticated blind SQL injection attack. An attacker could manipulate the application's SQL query logic to extract sensitive information or perform unauthorized actions within the database. In this case, the vulnerability could allow an attacker to execute arbitrary SQL queries through the login page, potentially leading to unauthorized access, data leakage, or even disruption of critical industrial processes.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-30720 ‼
📖 Read
via "National Vulnerability Database".
PendingIntent hijacking in LmsAssemblyTrackerCTC prior to SMR Sep-2023 Release 1 allows local attacker to gain arbitrary file access.📖 Read
via "National Vulnerability Database".