Omron Engineering Software Zip-Slip

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 5.5 ATTENTION : Low attack complexity Vendor : Omron Equipment : Sysmac Studio, NX-IO Configurator Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to overwrite files on a system. 3...

CVE-2023-42359

creationtimestamp| type| source ---|---|--- 2023-09-18 16:28:22+00:00| seen| https://t.me/cibsecurity/70648...

CVE-2018-4804

creationtimestamp| type| source ---|---|--- 2023-09-14 22:34:57+00:00| seen| https://t.me/cibsecurity/70515...

CVE-2019-8869

creationtimestamp| type| source ---|---|--- 2023-09-14 22:34:55+00:00| seen| https://t.me/cibsecurity/70513...

CVE-2017-13915

creationtimestamp| type| source ---|---|--- 2023-09-14 22:30:48+00:00| seen| https://t.me/cibsecurity/70483...

CISA Adds One Known Vulnerability to Catalog

CISA has added one new vulnerability to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2023-26369 Adobe Acrobat and Reader Out-of-Bounds Write Vulnerability These types of vulnerabilities are frequent attack vectors for malicious cyber actors and pose...

CVE-2023-41609

creationtimestamp| type| source ---|---|--- 2023-09-11 22:27:50+00:00| seen| https://t.me/cibsecurity/70226...

Code injection

An issue was discovered in the MyCrops HiGrade "THC Testing & Cannabi" application 1.0.337 for Android. A remote attacker can start the camera feed via the com.cordovaplugincamerapreview.CameraActivity component in some situations. NOTE: this is only exploitable on Android versions that lack...

JVN#41113329: Pyramid vulnerable to directory traversal

Pyramid provided by Pylons Project, which is a web framework for Python, contains a directory traversal vulnerability CWE-22. Impact index.html located one directory above the location of the static view's file system path can be accessed via a crafted request. Solution Update the software Update...

CVE-2023-37798

creationtimestamp| type| source ---|---|--- 2023-09-07 22:18:56+00:00| seen| https://t.me/cibsecurity/70109...

CVE-2020-10132

creationtimestamp| type| source ---|---|--- 2023-09-06 22:18:03+00:00| seen| https://t.me/cibsecurity/70024...

CVE-2022-40524

creationtimestamp| type| source ---|---|--- 2023-09-05 12:22:53+00:00| seen| https://t.me/cibsecurity/69842...

Honeywell Experion PKS, LX and PlantCruise Insufficient Verification of Data Authenticity (CVE-2023-25178)

Controller may be loaded with malicious firmware which could enable remote code execution This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501611;...

Honeywell Experion PKS, LX and PlantCruise Improper Encoding or Escaping of Output (CVE-2023-24480)

Controller DoS due to stack overflow when decoding a message from the server This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid501610;...

CVE-2023-38458

creationtimestamp| type| source ---|---|--- 2023-09-04 07:22:05+00:00| seen| https://t.me/cibsecurity/69739...

CVE-2023-33915

creationtimestamp| type| source ---|---|--- 2023-09-04 07:22:01+00:00| seen| https://t.me/cibsecurity/69738...

CVE-2023-39714

creationtimestamp| type| source ---|---|--- 2023-09-01 22:14:03+00:00| seen| https://t.me/cibsecurity/69684 2026-07-29 12:00:05+00:00| seen| https://t.me/CVEhub/19398 2026-07-30 00:00:27+00:00| published-proof-of-concept| https://t.me/CVEhub/19398...

CVE-2023-39352

creationtimestamp| type| source ---|---|--- 2023-09-01 00:13:22+00:00| seen| https://t.me/cibsecurity/69603...

CVE-2023-3992

creationtimestamp| type| source ---|---|--- 2023-08-30 18:12:22+00:00| seen| https://t.me/cibsecurity/69438...

Security Bulletin: ITCAM for Transactions affect by the Security vulnerability CVE-2020-10683 found in dom4j-1.6.1.jar

Summary IBM Tivoli Composite Application Manager ITCAM for Transactions - Transaction Tracking has addressed the following dom4j-1.6.1.jar vulnerability and updated dom4j-1.6.1.jar to version 2.1.4 Vulnerability Details CVEID:CVE-2020-10683 DESCRIPTION: dom4j could allow a remote authenticated...