๐จ CVE-2023-27253
A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.
๐@cveNotify
A command injection vulnerability in the function restore_rrddata() of Netgate pfSense v2.7.0 allows authenticated attackers to execute arbitrary commands via manipulating the contents of an XML file supplied to the component config.xml.
๐@cveNotify
๐จ CVE-2023-25345
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
๐@cveNotify
Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or extends tags.
๐@cveNotify
GitHub
Security Issue: arbitrary local file read vulnerability during template rendering ยท Issue #88 ยท node-swig/swig-templates
official doc: https://node-swig.github.io/swig-templates/docs/tags/#include https://node-swig.github.io/swig-templates/docs/tags/#extends poc: 1.html {% extends '../../../../../etc/passwd' ...
๐จ CVE-2023-25344
An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.
๐@cveNotify
An issue was discovered in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to execute arbitrary code via crafted Object.prototype anonymous function.
๐@cveNotify
GitHub
Security Issue: code execution vulnerability during template rendering ยท Issue #89 ยท node-swig/swig-templates
official doc https://node-swig.github.io/swig-templates/docs/tags/#include poc tpl.html You need to ensure that the 1.html file exists {% include "./1.html"+Object.constructor("globa...
๐จ CVE-2023-26912
Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button.
๐@cveNotify
Cross site scripting (XSS) vulnerability in xenv S-mall-ssm thru commit 3d9e77f7d80289a30f67aaba1ae73e375d33ef71 on Feb 17, 2020, allows local attackers to execute arbitrary code via the evaluate button.
๐@cveNotify
GitHub
Stored xss vulnerability exists in order evaluation(่ฎขๅ่ฏไปทๅญๅจXSSๆผๆด) ยท Issue #37 ยท xenv/S-mall-ssm
How to reproduce steps(ๅฆไฝๅค็ฐ) Build the project and use admin/123456 to log in and create several test data(ๆญๅปบ้กน็ฎไฝฟ็จadmin/123456็ป้ๅๅปบๅ ๆกๆต่ฏๆฐๆฎ) Create an ordinary user and click on a product we created to...
๐จ CVE-2022-39214
Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.
๐@cveNotify
Combodo iTop is an open source, web-based IT service management platform. Prior to versions 2.7.8 and 3.0.2-1, a user who can log in on iTop is able to take over any account just by knowing the account's username. This issue is fixed in versions 2.7.8 and 3.0.2-1.
๐@cveNotify
GitHub
Nยฐ5394 - use session for the FSM (use Session object) ยท Combodo/iTop@bdebea6
A simple, web based IT Service Management tool . Contribute to Combodo/iTop development by creating an account on GitHub.
๐จ CVE-2023-27501
SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available service to delete system files. In this attack, no data can be read but potentially critical OS files can be deleted making the system unavailable, causing significant impact on both availability and integrity
๐@cveNotify
SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to exploit insufficient validation of path information provided by users, thus exploiting a directory traversal flaw in an available service to delete system files. In this attack, no data can be read but potentially critical OS files can be deleted making the system unavailable, causing significant impact on both availability and integrity
๐@cveNotify
๐จ CVE-2023-25282
A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.
๐@cveNotify
A heap overflow vulnerability in D-Link DIR820LA1_FW106B02 allows attackers to cause a denial of service via the config.log_to_syslog and log_opt_dropPackets parameters to mydlink_api.ccp.
๐@cveNotify
D-Link
Security Bulletin
๐จ CVE-2023-24278
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
๐@cveNotify
Squidex before 7.4.0 was discovered to contain a squid.svg cross-site scripting (XSS) vulnerability.
๐@cveNotify
Census-Labs
CENSUS | Cybersecurity Engineering
CENSUS ID:CENSUS-2023-0001 CVE ID:CVE-2023-24278 Affected Products:Squidex versions prior to 7.4.0 Class:Improper Neutralization of Input During Web Page Generation (CWE-79) Discovered by:Ioannis Christodoulakos CENSUS has discovered two reflected cross siteโฆ
๐จ CVE-2023-26113
Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js.
๐@cveNotify
Versions of the package collection.js before 6.8.1 are vulnerable to Prototype Pollution via the extend function in Collection.js/dist/node/iterators/extend.js.
๐@cveNotify
๐จ CVE-2023-0361
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
๐@cveNotify
A timing side-channel in the handling of RSA ClientKeyExchange messages was discovered in GnuTLS. This side-channel can be sufficient to recover the key encrypted in the RSA ciphertext across a network in a Bleichenbacher style attack. To achieve a successful decryption the attacker would need to send a large amount of specially crafted messages to the vulnerable server. By recovering the secret from the ClientKeyExchange message, the attacker would be able to decrypt the application data exchanged over that connection.
๐@cveNotify
GitLab
Timing sidechannel in RSA decryption (#1050) ยท Issues ยท gnutls / GnuTLS ยท GitLab
Description of problem: The time for GnuTLS to respond to malformed RSA ciphertexts in ClientKeyExchange depends on kind of error in...
๐จ CVE-2023-27320
Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
๐@cveNotify
Sudo before 1.9.13p2 has a double free in the per-command chroot feature.
๐@cveNotify
Sudo
Stable Release
The current stable release of the sudo 1.9 branch is version 1.9.17p2. For the sudo 1.8 branch, see legacy releases.
For full details see the ChangeLog file or view the commit history via git or GitHub.
Sudo 1.9.17p2 Fixed a bug introduced in sudo 1.9.16โฆ
For full details see the ChangeLog file or view the commit history via git or GitHub.
Sudo 1.9.17p2 Fixed a bug introduced in sudo 1.9.16โฆ
๐จ CVE-2023-1484
A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367.
๐@cveNotify
A vulnerability was found in xzjie cms up to 1.0.3 and classified as critical. This issue affects some unknown processing of the file /api/upload. The manipulation of the argument uploadFile leads to unrestricted upload. The attack may be initiated remotely. The associated identifier of this vulnerability is VDB-223367.
๐@cveNotify
๐จ CVE-2023-1483
A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability.
๐@cveNotify
A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical. This vulnerability affects unknown code of the file /admin/getallarticleinfo. The manipulation of the argument searchInfo leads to sql injection. The attack can be initiated remotely. VDB-223366 is the identifier assigned to this vulnerability.
๐@cveNotify
๐จ CVE-2023-1482
A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.
๐@cveNotify
A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.
๐@cveNotify
๐จ CVE-2023-28607
js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.
๐@cveNotify
js/event-graph.js in MISP before 2.4.169 allows XSS via the event-graph relationship tooltip.
๐@cveNotify
GitHub
fix: [security] XSS in event-graph relationship tooltip ยท MISP/MISP@78f4234
MISP (core software) - Open Source Threat Intelligence and Sharing Platform - fix: [security] XSS in event-graph relationship tooltip ยท MISP/MISP@78f4234
๐จ CVE-2023-28606
js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
๐@cveNotify
js/event-graph.js in MISP before 2.4.169 allows XSS via event-graph node tooltips.
๐@cveNotify
GitHub
Comparing v2.4.168...v2.4.169 ยท MISP/MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform - Comparing v2.4.168...v2.4.169 ยท MISP/MISP
๐จ CVE-2023-28609
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
๐@cveNotify
api/auth.go in Ansible Semaphore before 2.8.89 mishandles authentication.
๐@cveNotify
GitHub
fix: authentization bug ยท semaphoreui/semaphore@3e4a62b
Modern UI for Ansible, Terraform, OpenTofu, Bash, Pulumi. - fix: authentization bug ยท semaphoreui/semaphore@3e4a62b
๐จ CVE-2023-1488
A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is an unknown function in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-223374 is the identifier assigned to this vulnerability.
๐@cveNotify
A vulnerability, which was classified as problematic, was found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. Affected is an unknown function in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. VDB-223374 is the identifier assigned to this vulnerability.
๐@cveNotify
๐จ CVE-2023-1487
A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects some unknown processing in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability.
๐@cveNotify
A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. This issue affects some unknown processing in the library WiseHDInfo64.dll of the component IoControlCode Handler. The manipulation leads to denial of service. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The identifier VDB-223373 was assigned to this vulnerability.
๐@cveNotify
Vuldb
CVE-2023-1487 Lespeed WiseCleaner Wise System Monitor IoControlCode WiseHDInfo64.dll 0x9C40A0E0 denial of service
A vulnerability, which was classified as problematic, has been found in Lespeed WiseCleaner Wise System Monitor 1.5.3.54. The identification of this vulnerability is CVE-2023-1487.
๐จ CVE-2023-1486
A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects unknown code in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223372.
๐@cveNotify
A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability affects unknown code in the library WiseUnlock64.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-223372.
๐@cveNotify
Vuldb
CVE-2023-1486 Lespeed WiseCleaner Wise Force Deleter IoControlCode WiseUnlock64.sys 0x220004 access control
A vulnerability classified as problematic was found in Lespeed WiseCleaner Wise Force Deleter 1.5.3.54. This vulnerability was named CVE-2023-1486.
๐จ CVE-2023-1491
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects an unknown part in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability.
๐@cveNotify
A vulnerability was found in Max Secure Anti Virus Plus 19.0.2.1. It has been classified as critical. This affects an unknown part in the library MaxCryptMon.sys of the component IoControlCode Handler. The manipulation leads to improper access controls. Local access is required to approach this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-223377 was assigned to this vulnerability.
๐@cveNotify