9936 matches found
The vulnerability of the Setup Files Cleanup component of the Windows operating system allows a hacker to execute remote code.
The vulnerability of the Setup Files Cleanup component of the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute malicious code...
CVE-2023-4805
The Tutor LMS WordPress plugin before 2.3.0 does not sanitise and escape some of its settings, which could allow users such as subscriber to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-4388
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Cross site scripting
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-4388 EventON < 2.2 - Admin+ Stored XSS
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
CVE-2023-4388 EventON < 2.2 - Admin+ Stored XSS
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Exploit for CVE-2023-38646
Metabase Pre-Auth RCE CVE-2023-38646 POC This is a python sc...
PT-2023-9353
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the fc lport ptp setup function. This function did not check the return value of fc rport create, which can return NULL an...
Endpoint Management - How to load balance Exchange Servers
Steps to set up load balancing for Exchange Servers in Endpoint Management to ensure high availability and seamless user experiences...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
RedTeamTool-CVE-2023-22515 – Vulnerability Exploitation Tool...
delegateMulti(...) Griefing Attack
Lines of code Vulnerability details Impact A call to delegateMulti... with the right parameters will consume much gas and waste memory for Proxy Delegators DoS costing the attacker very little. Proof of Concept Calling delegateMulti with many unique targets and amounts of 0 consumes Proxy...
PT-2023-9708
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the cxl region attach function in the Linux kernel, which can lead to a denial of service when cxl region setup targets fails. This failure prevents endpoint and...
Moderate: Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.4 Setup Bundle Release Update
An update is now available for Red Hat Ansible Automation Platform 2.4 Setup Bundle Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
CVE-2023-22515 CVE-2023-22515, a critical vulnerability affec...
CVE-2023-36704
Windows Setup Files Cleanup Remote Code Execution Vulnerability...
CVE-2023-36704
Windows Setup Files Cleanup Remote Code Execution Vulnerability...
Remote code execution
Windows Setup Files Cleanup Remote Code Execution Vulnerability...
CVE-2023-36704
Converging details from connected documents indicate CVE-2023-36704, named Windows Setup Files Cleanup, is a remote code execution vulnerability in the Windows Setup Files Cleanup component. The KLA61358 entry explicitly notes a remote code execution vulnerability for Windows Setup Files Cleanup ...