Path traversal

An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-23 in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the...

CVE-2023-25606

An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-23 in FortiAnalyzer and FortiManager management interface 7.2.0 through 7.2.1, 7.0.0 through 7.0.5, 6.4 all versions may allow a remote and authenticated attacker to retrieve arbitrary files from the...

CVE-2023-25606

FortiAnalyzer and FortiManager management interfaces are affected by a Path Traversal vulnerability (CWE-23). The issue allows a remote, authenticated attacker to retrieve arbitrary files from the underlying filesystem via specially crafted web requests. Affected versions include 7.2.0–7.2.1, 7.0...

CVE-2023-3045

creationtimestamp| type| source ---|---|--- 2023-07-10 20:23:54+00:00| seen| https://t.me/cibsecurity/66251...

CVE-2023-34442

creationtimestamp| type| source ---|---|--- 2023-07-10 20:23:52+00:00| seen| https://t.me/cibsecurity/66249...

ROS-2-320

2.320 Notification on the update of MIS OPERATION SYSTEM "RED OS" No RU.29926343.02.01-01-23 Due to quality improvement and bug fixing, an updated version of MIS Operating System "RED OS" 7.3 has been released. You can contact the technical support service within the framework of your existing...

Tenable Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)

Tenable Nessus Network Monitor is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updat...

SUSE SLES15: kernel-livepatch-5_3_18-150200_24_139-default / etc (SUSE-SU-2023:2727-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2727-1 advisory. This update for the Linux Kernel 5.3.18-15020024139 fixes several issues. The following security issues were fixed: - CVE-2022-4744: Fixed...

CVE-2023-36464

creationtimestamp| type| source ---|---|--- 2023-06-28 02:12:23+00:00| seen| https://t.me/cibsecurity/65593...

CVE-2023-35843

creationtimestamp| type| source ---|---|--- 2023-06-27 16:22:03+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4636 2023-07-09 04:19:04+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4710 2023-07-15 05:28:23+00:00| seen| https://t.me/kasraonecom/376 2023-07-22...

IBM Robotic Process Automation 安全漏洞

IBM Robotic Process Automation is a robotic process automation product from International Business Machines IBM. can help you automate more business and IT processes at scale with the ease and speed of traditional RPA. A security vulnerability exists in IBM Robotic Process Automation for Cloud Pa...

Supporting Our U.S. Federal Customers for BOD 23–02 by Mitigating the Risk From Internet-Exposed Management Interfaces

On June 13, 2023, the U.S. Cybersecurity & Infrastructure Security Agency CISA released Binding Operational Directive BOD 23-02: Mitigating the Risk from Internet-Exposed Management Interfaces. The directive requires federal civilian executive-branch agencies to adhere to two primary actions:...

shirt84.de Cross Site Scripting vulnerability OBB-3461231

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-32404

creationtimestamp| type| source ---|---|--- 2023-06-23 22:39:44+00:00| seen| https://t.me/cibsecurity/65482...

CVE-2023-35159

creationtimestamp| type| source ---|---|--- 2023-06-23 22:33:44+00:00| published-proof-of-concept| https://t.me/cibsecurity/65479...

CVE-2023-34466

creationtimestamp| type| source ---|---|--- 2023-06-23 20:33:37+00:00| seen| https://t.me/cibsecurity/65475...

CVE-2023-2989

creationtimestamp| type| source ---|---|--- 2023-06-23 19:25:05+00:00| seen| https://t.me/truesecator/4537...

media.faf-messe.de Cross Site Scripting vulnerability OBB-3460674

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

release-check.swamid.se Cross Site Scripting vulnerability OBB-3460649

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...