13 matches found
MAL-2025-16993 Malicious code in choad (npm)
The package choad was found to contain malicious code...
CVE-2020-16993
Azure Sphere Elevation of Privilege Vulnerability...
CVE-2020-16993
CVE-2020-16993 concerns Microsoft Azure Sphere and describes a privilege-escalation vulnerability in the uid_map functionality of Azure Sphere 20.06 and earlier. The root cause is that the application-manager clears uniqueness checks among listed UIDs, allowing multiple component_ids to share the...
CVE-2017-16993
This CVE entry is rejected/not used and does not represent an active vulnerability entry.
[SECURITY] [DLA 1942-2] phpbb3 regression update
This is a follow-up to DLA-1942-1. There was some confusion about the correct fix for CVE-2019-13776. The correct announcement for this DLA should have been: Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-13776 CVE-2019-16993 CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had...
Debian: Security Advisory (DLA-1942-2)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 1942-1] phpbb3 security update
Package : phpbb3 Version : 3.0.12-5+deb8u4 CVE ID : CVE-2019-16993 In phpBB, includes/acp/acpbbcodes.php had improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack was possible if an attacker also managed to retrieve the session id of a...
UBUNTU-CVE-2019-16993
In phpBB before 3.1.7-PL1, includes/acp/acpbbcodes.php has improper verification of a CSRF token on the BBCode page in the Administration Control Panel. An actual CSRF attack is possible if an attacker also manages to retrieve the session id of a reauthenticated administrator prior to targeting...
CVE-2019-16993
CVE-2019-16993 affects phpBB
Researchers Disclose Intel AMT Flaw Research
On Friday, just as Intel released additional information regarding a critical flaw found earlier this week in a subset of its business-class PCs, the researchers behind the initial vulnerability discovery, Embedi, also published their research on the flaw. Intel warned Monday of a firmware...
Intel AMT Digest Authentication Bypass Scanner
This module scans for Intel Active Management Technology endpoints and attempts to bypass authentication using a blank HTTP digest CVE-2017-5689. This service can be found on ports 16992, 16993 tls, 623, and 624 tls. Module Options msf use auxiliary/scanner/http/intel/amtdigestbypass msf...
Intel AMT Remote Authentication Bypass Vulnerability
Intel AMT is known as INTEL Active Management Technology, a preset feature that uses Web-based control pages to allow administrators to manage the system remotely via remote ports 16992 and 16993. A remote authentication bypass vulnerability exists in Intel AMT. An unauthorized user can bypass th...