๐จ CVE-2023-29241
Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network
๐@cveNotify
Improper Information in Cybersecurity Guidebook in Bosch Building Integration System (BIS) 5.0 may lead to wrong configuration which allows local users to access data via network
๐@cveNotify
Bosch PSIRT
Update in Cybersecurity Guidebook of BIS on Permission Settings for Network Share
BOSCH-SA-988400-BT: In a recent survey of BIS installations worldwide Bosch identified that for some installations the security settings may not meet our recommended security standards. For this reason, we have updated our \"Cybersecurity Guidebook\".
Sectionโฆ
Sectionโฆ
๐จ CVE-2023-37454
An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c.
๐@cveNotify
An issue was discovered in the Linux kernel through 6.4.2. A crafted UDF filesystem image causes a use-after-free write operation in the udf_put_super and udf_close_lvid functions in fs/udf/super.c.
๐@cveNotify
๐จ CVE-2023-34150
** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.
๐@cveNotify
** UNSUPPORTED WHEN ASSIGNED ** Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage.
๐@cveNotify
๐จ CVE-2023-24256
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal.
๐@cveNotify
An issue in the com.nextev.datastatistic component of NIO EC6 Aspen before v3.3.0 allows attackers to escalate privileges via path traversal.
๐@cveNotify
GitHub
JailBreakEC6/BugReport.md at main ยท hhj4ck/JailBreakEC6
Contribute to hhj4ck/JailBreakEC6 development by creating an account on GitHub.
๐จ CVE-2020-20021
An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon.
๐@cveNotify
An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon.
๐@cveNotify
Mikrotik
MikroTik makes networking hardware and software, which is used in nearly all countries of the world. Our mission is to make existing Internet technologies faster, more powerful and affordable to wider range of users.
๐จ CVE-2023-3596
Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.
๐@cveNotify
Where this vulnerability exists in the Rockwell Automation 1756-EN4* Ethernet/IP communication products, it could allow a malicious user to cause a denial of service by asserting the target system through maliciously crafted CIP messages.
๐@cveNotify
๐จ CVE-2023-3595
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* Ethernet/IP communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
๐@cveNotify
Where this vulnerability exists in the Rockwell Automation 1756 EN2* and 1756 EN3* Ethernet/IP communication products, it could allow a malicious user to perform remote code execution with persistence on the target system through maliciously crafted CIP messages. This includes the ability to modify, deny, and exfiltrate data passing through the device.
๐@cveNotify
๐จ CVE-2023-30646
Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
๐@cveNotify
Heap out of bound write vulnerability in BroadcastSmsConfig of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
๐@cveNotify
๐จ CVE-2021-46896
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
๐@cveNotify
Buffer Overflow vulnerability in PX4-Autopilot allows attackers to cause a denial of service via handler function handling msgid 332.
๐@cveNotify
GitHub
Bug Found in msgID #332 mavlink protocol BOF ยท Issue #18369 ยท PX4/PX4-Autopilot
Steps to reproduce the behavior: Turn the drone on Set the lower one byte to be greater than 0x75 except for the CRC of the MAVLINK PROTOCOL packet which is msgID 332 Send a packet set as a serial ...
๐จ CVE-2023-30648
Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the system.
๐@cveNotify
Stack out-of-bounds write vulnerability in IpcRxImeiUpdateImeiNoti of RILD priro to SMR Jul-2023 Release 1 cause a denial of service on the system.
๐@cveNotify
๐จ CVE-2023-35937
Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere lack permission checks. This allows ordinary users to execute APIs that can only be executed by space administrators or project administrators. For example, ordinary users can be updated as space administrators. Version 2.10.2 LTS has a patch for this issue.
๐@cveNotify
Metersphere is an open source continuous testing platform. In versions prior to 2.10.2 LTS, some key APIs in Metersphere lack permission checks. This allows ordinary users to execute APIs that can only be executed by space administrators or project administrators. For example, ordinary users can be updated as space administrators. Version 2.10.2 LTS has a patch for this issue.
๐@cveNotify
GitHub
metersphere ๅญๅจๆ้ๆฃๆฅ็ผบๅคฑๆผๆด
### Summary
็ฎๅmetersphere ไธไบๅ ณ้ฎ็API็ผบๅฐไบๆ้ๆฃๆฅ๏ผๆฏๅฆworkspaceไธญ็/setting/workspace/member/update๏ผ/setting/user/special/ws/member/add, /special/ws/member/delete/{workspaceId}/{userId} ไปฅๅproject็ธๅ ณ็APIใ
...
็ฎๅmetersphere ไธไบๅ ณ้ฎ็API็ผบๅฐไบๆ้ๆฃๆฅ๏ผๆฏๅฆworkspaceไธญ็/setting/workspace/member/update๏ผ/setting/user/special/ws/member/add, /special/ws/member/delete/{workspaceId}/{userId} ไปฅๅproject็ธๅ ณ็APIใ
...
๐จ CVE-2023-36995
TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie.
๐@cveNotify
TravianZ through 8.3.4 allows XSS via the Alliance tag/name, the statistics page, the link preferences, the Admin Logs, or the COOKUSR cookie.
๐@cveNotify
Bram Does Security
TravianZ Hacked
We will explore how we can get Remote Code Execution (RCE) through cryptographic failures, XSS, etc. in an open source PHP project.
๐จ CVE-2023-36189
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
๐@cveNotify
SQL injection vulnerability in langchain v.0.0.64 allows a remote attacker to obtain sensitive information via the SQLDatabaseChain component.
๐@cveNotify
GitHub
Mitigate issue #5923 (Prompt injection -> SQL injection in SQLChain) by boazwasserman ยท Pull Request #6051 ยท langchain-ai/langchain
Add validation controls to the SQL chain to mitigate SQL injection issues.
Using sqlfluff to perform static analysis:
Disallow non select statement (INSERT, DROP)
Disallow wildcard select statemen...
Using sqlfluff to perform static analysis:
Disallow non select statement (INSERT, DROP)
Disallow wildcard select statemen...
๐จ CVE-2023-36188
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
๐@cveNotify
An issue in langchain v.0.0.64 allows a remote attacker to execute arbitrary code via the PALChain parameter in the Python exec method.
๐@cveNotify
GitHub
Prompt injection which leads to arbitrary code execution in `langchain.chains.PALChain` ยท Issue #5872 ยท langchain-ai/langchain
System Info langchain version: 0.0.194 os: ubuntu 20.04 python: 3.9.13 Who can help? No response Information The official example notebooks/scripts My own modified scripts Related Components LLMs/C...
๐จ CVE-2020-22336
An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function.
๐@cveNotify
An issue was discovered in pdfcrack 0.17 thru 0.18, allows attackers to execute arbitrary code via a stack overflow in the MD5 function.
๐@cveNotify
๐จ CVE-2023-30656
Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certain activities.
๐@cveNotify
Improper input validation vulnerability in LSOItemData prior to SMR Jul-2023 Release 1 allows attackers to launch certain activities.
๐@cveNotify
๐จ CVE-2023-30652
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
๐@cveNotify
Out of bounds read and write in callrunTspCmdNoRead of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
๐@cveNotify
๐จ CVE-2023-30650
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
๐@cveNotify
Out of bounds read and write in callrunTspCmd of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
๐@cveNotify
๐จ CVE-2023-30655
Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
๐@cveNotify
Improper input validation vulnerability in SCEPProfile prior to SMR Jul-2023 Release 1 allows local attackers to launch privileged activities.
๐@cveNotify
๐จ CVE-2023-30653
Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
๐@cveNotify
Out of bounds read and write in enableTspDevice of sysinput HAL service prior to SMR Jul-2023 Release 1 allows local attackers to execute arbitrary code.
๐@cveNotify
๐จ CVE-2023-30649
Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
๐@cveNotify
Heap out of bound write vulnerability in RmtUimNeedApdu of RILD prior to SMR Jul-2023 Release 1 allows attackers to execute arbitrary code.
๐@cveNotify