🛡 Cybersecurity & Privacy 🛡 - News
@cibsecurity
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
About
Blog
Apps
Platform
Join
🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40654 ‼

In FW-PackageManager, there is a possible missing permission check. This could lead to local escalation of privilege with System execution privileges needed

📖 Read

via "National Vulnerability Database".
328 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40635 ‼

In linkturbo, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

📖 Read

via "National Vulnerability Database".
405 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40636 ‼

In telecom service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with System execution privileges needed

📖 Read

via "National Vulnerability Database".
385 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40651 ‼

In urild service, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed

📖 Read

via "National Vulnerability Database".
324 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40642 ‼

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

📖 Read

via "National Vulnerability Database".
366 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40644 ‼

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

📖 Read

via "National Vulnerability Database".
448 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40634 ‼

In phasechecksercer, there is a possible missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed

📖 Read

via "National Vulnerability Database".
554 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40632 ‼

In jpg driver, there is a possible use after free due to a logic error. This could lead to remote information disclosure no additional execution privileges needed

📖 Read

via "National Vulnerability Database".
676 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40645 ‼

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

📖 Read

via "National Vulnerability Database".
667 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-40648 ‼

In Messaging, there is a possible missing permission check. This could lead to local information disclosure with no additional execution privileges needed

📖 Read

via "National Vulnerability Database".
👍1
718 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45352 ‼

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system via a Common Management Portal web interface Path traversal vulnerability allowing write access outside the intended folders. This is also known as OCMP-6592.

📖 Read

via "National Vulnerability Database".
618 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45354 ‼

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated remote attacker to execute arbitrary code on the operating system by using the Common Management Portal web interface. This is also known as OCMP-6589.

📖 Read

via "National Vulnerability Database".
👍1
615 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45353 ‼

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting the underlying operating system. This is also known as OCMP-6591.

📖 Read

via "National Vulnerability Database".
461 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45356 ‼

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access, via dtb pages of the platform portal. This is also known as OSFOURK-23719.

📖 Read

via "National Vulnerability Database".
399 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45355 ‼

Atos Unify OpenScape 4000 Platform V10 R1 before Hotfix V10 R1.42.2 and 4000 and Manager Platform V10 R1 before Hotfix V10 R1.42.2 allow command injection by an authenticated attacker into the platform operating system, leading to administrative access via the webservice. This is also known as OSFOURK-24120.

📖 Read

via "National Vulnerability Database".
382 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45349 ‼

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.34.7, 4000 Assistant V10 R1.42.0, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.34.7, 4000 Manager V10 R1.42.0, and 4000 Manager V10 R0 expose sensitive information that may allow lateral movement to the backup system via AShbr. This is also known as OSFOURK-23722.

📖 Read

via "National Vulnerability Database".
434 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45350 ‼

Atos Unify OpenScape 4000 Manager V10 R1 before V10 R1.42.1 and 4000 Manager V10 R0 allow Privilege escalation that may lead to the ability of an authenticated attacker to run arbitrary code via AScm. This is also known as OSFOURK-24034.

📖 Read

via "National Vulnerability Database".
450 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45351 ‼

Atos Unify OpenScape 4000 Assistant V10 R1 before V10 R1.42.1, 4000 Assistant V10 R0, 4000 Manager V10 R1 before V10 R1.42.1, and 4000 Manager V10 R0 allow Authenticated Command Injection via AShbr. This is also known as OSFOURK-24039.

📖 Read

via "National Vulnerability Database".
458 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45367 ‼

An issue was discovered in the CheckUser extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. A user can use a rest.php/checkuser/v0/useragent-clienthints/revision/ URL to store an arbitrary number of rows in cu_useragent_clienthints, leading to a denial of service.

📖 Read

via "National Vulnerability Database".
403 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-44232 ‼

Cross-Site Request Forgery (CSRF) vulnerability in Huseyin Berberoglu WP Hide Pages plugin <= 1.0 versions.

📖 Read

via "National Vulnerability Database".
398 views
🛡 Cybersecurity & Privacy 🛡 - News
‼ CVE-2023-45373 ‼

An issue was discovered in the ProofreadPage extension for MediaWiki before 1.35.12, 1.36.x through 1.39.x before 1.39.5, and 1.40.x before 1.40.1. XSS can occur via formatNumNoSeparators.

📖 Read

via "National Vulnerability Database".
353 views