βΌ CVE-2023-39645 βΌ
π Read
via "National Vulnerability Database".
Theme volty tvcmspaymenticon up to v4.0.1 was discovered to contain a SQL injection vulnerability via the component /tvcmspaymenticon/ajax.php?action=update_position&recordsArray.π Read
via "National Vulnerability Database".
βΌ CVE-2023-43176 βΌ
π Read
via "National Vulnerability Database".
A deserialization vulnerability in Afterlogic Aurora Files v9.7.3 allows attackers to execute arbitrary code via supplying a crafted .sabredav file.π Read
via "National Vulnerability Database".
βΌ CVE-2023-43953 βΌ
π Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Content Management component.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33270 βΌ
π Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection (blind).π Read
via "National Vulnerability Database".
βΌ CVE-2023-43898 βΌ
π Read
via "National Vulnerability Database".
Nothings stb 2.28 was discovered to contain a Null Pointer Dereference via the function stbi__convert_format. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted pic file.π Read
via "National Vulnerability Database".
βΌ CVE-2023-40519 βΌ
π Read
via "National Vulnerability Database".
A cross-site scripting (XSS) vulnerability in the bpk-common/auth/login/index.html login portal in Broadpeak Centralized Accounts Management Auth Agent 01.01.00.19219575_ee9195b0, 01.01.01.30097902_fd999e76, and 00.12.01.9565588_1254b459 allows remote attackers to inject arbitrary web script or HTML via the disconnectMessage parameter.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33268 βΌ
π Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter port within the SSL Certificate check function is vulnerable to OS command injection (blind).π Read
via "National Vulnerability Database".
βΌ CVE-2023-44973 βΌ
π Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in the component /content/templates/ of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33271 βΌ
π Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter common_name within the SSL Certificate check function is vulnerable to OS command injection (blind).π Read
via "National Vulnerability Database".
βΌ CVE-2023-33273 βΌ
π Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection (blind).π Read
via "National Vulnerability Database".
βΌ CVE-2023-43951 βΌ
π Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Column Management component.π Read
via "National Vulnerability Database".
βΌ CVE-2023-43952 βΌ
π Read
via "National Vulnerability Database".
SSCMS 7.2.2 was discovered to contain a stored cross-site scripting (XSS) vulnerability via the Material Management component.π Read
via "National Vulnerability Database".
βΌ CVE-2023-33269 βΌ
π Read
via "National Vulnerability Database".
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection (blind).π Read
via "National Vulnerability Database".
βΌ CVE-2023-40830 βΌ
π Read
via "National Vulnerability Database".
Tenda AC6 v15.03.05.19 is vulnerable to Buffer Overflow as the Index parameter does not verify the length.π Read
via "National Vulnerability Database".
βΌ CVE-2023-44974 βΌ
π Read
via "National Vulnerability Database".
An arbitrary file upload vulnerability in the component /admin/plugin.php of Emlog Pro v2.2.0 allows attackers to execute arbitrary code via uploading a crafted PHP file.π Read
via "National Vulnerability Database".
π΄ Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024 π΄
π Read
via "Dark Reading".
π Read
via "Dark Reading".
Dark Reading
Gartner Forecasts Global Security and Risk Management Spending to Grow 14% in 2024
LONDON, U.K., September 28, 2023 β Worldwide end-user spending on security and risk management is projected to total $215 billion in 2024, an increase of 14.3% from 2023, according to new forecast from Gartner, Inc. In 2023, global security and risk managementβ¦
π΄ Russian Hacktivism Takes a Toll on Organizations in Ukraine, EU, US π΄
π Read
via "Dark Reading".
Russian hacktivist attacks are mostly for show, but sometimes they cause serious damage and are poised to begin getting worse.π Read
via "Dark Reading".
Dark Reading
Russian Hacktivism: Flashy Non-Events or Serious Threat?
While it's tempting to dismiss Russian hacktivist DDoSing as all sizzle and no steak, experts warn the cyberattacks can cause serious damage -- and are poised to become more and more dangerous
βΌ CVE-2023-39648 βΌ
π Read
via "National Vulnerability Database".
Improper neutralization of SQL parameter in Theme Volty CMS Testimonial module for PrestaShop. In the module Γ’β¬ΕTheme Volty CMS TestimonialΓ’β¬οΏ½ (tvcmstestimonial) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.π Read
via "National Vulnerability Database".
βΌ CVE-2023-39647 βΌ
π Read
via "National Vulnerability Database".
Improper neutralization of SQL parameter in Theme Volty CMS Category Product module for PrestaShop. In the module Γ’β¬ΕTheme Volty CMS Category ProductΓ’β¬οΏ½ (tvcmscategoryproduct) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.π Read
via "National Vulnerability Database".
βΌ CVE-2023-39651 βΌ
π Read
via "National Vulnerability Database".
Improper neutralization of SQL parameter in Theme Volty CMS BrandList module for PrestaShop In the module Γ’β¬ΕTheme Volty CMS BrandListΓ’β¬οΏ½ (tvcmsbrandlist) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.π Read
via "National Vulnerability Database".
βΌ CVE-2023-39646 βΌ
π Read
via "National Vulnerability Database".
Improper neutralization of SQL parameter in Theme Volty CMS Category Chain Slider module for PrestaShop. In the module Γ’β¬ΕTheme Volty CMS Category Chain Slide"(tvcmscategorychainslider) up to version 4.0.1 from Theme Volty for PrestaShop, a guest can perform SQL injection in affected versions.π Read
via "National Vulnerability Database".