‼ CVE-2023-39158 ‼
📖 Read
via "National Vulnerability Database".
Cross-Site Request Forgery (CSRF) vulnerability in theDotstore Banner Management For WooCommerce plugin <=Â 2.4.2 versions.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-3350 ‼
📖 Read
via "National Vulnerability Database".
A Cryptographic Issue vulnerability has been found on IBERMATICA RPS, affecting version 2019. By firstly downloading the log file, an attacker could retrieve the SQL query sent to the application in plaint text. This log file contains the password hashes coded with AES-CBC-128 bits algorithm, which can be decrypted with a .NET function, obtaining the username's password in plain text.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-0506 ‼
📖 Read
via "National Vulnerability Database".
The web service of ByDemes Group Airspace CCTV Web Service in its 2.616.BY00.11 version, contains a privilege escalation vulnerability, detected in the Camera Control Panel, whose exploitation could allow a low-privileged attacker to gain administrator access.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4882 ‼
📖 Read
via "National Vulnerability Database".
DOS vulnerability that could allow an attacker to register a new VNF (Virtual Network Function) value. This action could trigger the args_assets() function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43976 ‼
📖 Read
via "National Vulnerability Database".
An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition (TOCTOU) via the PrivilegedHelperTool component.📖 Read
via "National Vulnerability Database".
👏1
‼ CVE-2023-5255 ‼
📖 Read
via "National Vulnerability Database".
For certificates that utilize the auto-renew feature in Puppet Server, a flaw exists which prevents the certificates from being revoked.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-4911 ‼
📖 Read
via "National Vulnerability Database".
A buffer overflow was discovered in the GNU C Library's dynamic loader ld.so while processing the GLIBC_TUNABLES environment variable. This issue could allow a local attacker to use maliciously crafted GLIBC_TUNABLES environment variables when launching binaries with SUID permission to execute code with elevated privileges.📖 Read
via "National Vulnerability Database".
🕴 USPS Anchors Snowballing Smishing Campaigns 🕴
📖 Read
via "Dark Reading".
Researchers found 164 domains connected to a single threat actor located in Tehran.📖 Read
via "Dark Reading".
Dark Reading
USPS Anchors Snowballing Smishing Campaigns
Researchers found 164 domains connected to a single threat actor located in Tehran.
🕴 Attacks on Maximum Severity WS_FTP Bug Have Been Limited — So Far 🕴
📖 Read
via "Dark Reading".
While CVE-2023-40044 is critical, threat watchers hope it won't be another MOVEit for customers of Progress Software's file transfer technology.📖 Read
via "Dark Reading".
Dark Reading
Attacks on Maximum Severity WS_FTP Bug Have Been Limited — So Far
While CVE-2023-40044 is critical, threat watchers hope it won't be another MOVEit for customers of Progress Software's file transfer technology.
‼ CVE-2023-33272 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter ip within the Ping check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-39645 ‼
📖 Read
via "National Vulnerability Database".
Theme volty tvcmspaymenticon up to v4.0.1 was discovered to contain a SQL injection vulnerability via the component /tvcmspaymenticon/ajax.php?action=update_position&recordsArray.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43176 ‼
📖 Read
via "National Vulnerability Database".
A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43953 ‼
📖 Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33270 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43898 ‼
📖 Read
via "National Vulnerability Database".
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-40519 ‼
📖 Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575_ee9195b0, 01.01.01.30097902_fd999e76, and 00.12.01.9565588_1254b459 allows remote attackers to inject arbitrary web script or HTML via the disconnectMessage parameter.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33268 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-44973 ‼
📖 Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33271 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL Certificate check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-33273 ‼
📖 Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection (blind).📖 Read
via "National Vulnerability Database".
‼ CVE-2023-43951 ‼
📖 Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component.📖 Read
via "National Vulnerability Database".