🛡 Cybersecurity & Privacy 🛡 - News
25.8K subscribers
89.2K links
🗞 The finest daily news on cybersecurity and privacy.

🔔 Daily releases.

💻 Is your online life secure?

📩 lalilolalo.dev@gmail.com
Download Telegram
‼️CVE-2024-0185‼️

A vulnerability was found in RRJ Nueva Ecija Engineer Online Portal 1.0. It has been rated as critical. This issue affects some unknown processing of the file dasboardteacher.php of the component Avatar Handler. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB249443.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2024-0186‼️

A vulnerability classified as problematic has been found in HuiRan Host Reseller System up to 2.0.0. Affected is an unknown function of the file userindexfindpass?do4 of the component HTTP POST Request Handler. The manipulation leads to weak password recovery. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB249444.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32831‼️

In wlan driver, there is a possible PIN crack due to use of insufficiently random values. This could lead to local information disclosure with no execution privileges needed. User interaction is not needed for exploitation. Patch ID WCNCR00325055 Issue ID MSV868.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32872‼️

In keyInstall, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308607 Issue ID ALPS08308607.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32874‼️

In Modem IMS Stack, there is a possible out of bounds write due to a missing bounds check. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID MOLY01161803 Issue ID MOLY01161803 MSV893.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32875‼️

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308607 Issue ID ALPS08304217.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32876‼️

In keyInstall, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308612 Issue ID ALPS08308612.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32877‼️

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308070.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32878‼️

In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08307992.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32879‼️

In battery, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308064.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32880‼️

In battery, there is a possible information disclosure due to a missing bounds check. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308076.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32881‼️

In battery, there is a possible information disclosure due to an integer overflow. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308080.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32882‼️

In battery, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08308070 Issue ID ALPS08308616.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32883‼️

In Engineer Mode, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS08282249 Issue ID ALPS08282249.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32884‼️

In netdagent, there is a possible information disclosure due to an incorrect bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS07944011 Issue ID ALPS07944011.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32885‼️

In display drm, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID ALPS07780685 Issue ID ALPS07780685.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32886‼️

In Modem IMS SMS UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID MOLY00730807 Issue ID MOLY00730807.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32887‼️

In Modem IMS Stack, there is a possible system crash due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID MOLY01161837 Issue ID MOLY01161837 MSV892.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32888‼️

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID MOLY01161830 Issue ID MOLY01161830 MSV894.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32889‼️

In Modem IMS Call UA, there is a possible out of bounds write due to a missing bounds check. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID MOLY01161825 Issue ID MOLY01161825 MSV895.

📖 Read more

Via "National Vulnerability Database"
‼️CVE-2023-32890‼️

In modem EMM, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID MOLY01183647 Issue ID MOLY01183647 MSV963.

📖 Read more

Via "National Vulnerability Database"