CVE-2023-28122

A local privilege escalation LPE vulnerability in UI Desktop for Windows Version 0.59.1.71 and earlier allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later...

Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in JWx [CVE-2024-28122]

Summary IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data is vulnerable to a denial of service in JWx, caused by a flaw when using a compressed JWE message CVE-2024-28122 . JWx is included as part of the utilities used by our Speech Services. This vulnerabilitiy has been addressed...

CVE-2024-28122

An uncontrolled resource consumption vulnerability was found in jwx. This flaw allows an attacker with a trusted public key to cause a denial of service condition by crafting a malicious JWE token with an exceptionally high compression ratio...

CVE-2024-28122

creationtimestamp| type| source ---|---|--- 2024-03-09 02:26:39+00:00| seen| https://t.me/ctinow/203722 2024-03-09 02:31:48+00:00| seen| https://t.me/ctinow/203726 2024-03-10 10:46:12+00:00| seen| https://t.me/ctinow/204203 2025-04-16 15:56:05+00:00| published-proof-of-concept|...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: minio, spire-server, falcoctl, mc, boring-registry...

CVE-2024-28122 vulnerabilities

Vulnerabilities for packages: falcoctl-fips, boring-registry-fips, boring-registry, spire-server-fips, external-secrets-fips, minio, mc-fips, falcoctl, mc, minio-fips, spire-server...

CVE-2024-28122 JWX vulnerable to a denial of service attack using compressed JWE message

JWX is Go module implementing various JWx JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE technologies. This vulnerability allows an attacker with a trusted public key to cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionally high...

CVE-2024-28122 JWX vulnerable to a denial of service attack using compressed JWE message

JWX is Go module implementing various JWx JWA/JWE/JWK/JWS/JWT, otherwise known as JOSE technologies. This vulnerability allows an attacker with a trusted public key to cause a Denial-of-Service DoS condition by crafting a malicious JSON Web Encryption JWE token with an exceptionally high...

CVE-2024-28122

CVE-2024-28122 (JWx) is a DoS vulnerability in the Go JOSE library (jwx) where an attacker with a trusted public key can craft a JWE with an exceptionally high compression ratio to exhaust resources. The issue affects the JWx modules and has been patched in versions 1.2.29 and 2.0.21. Public deta...

CVE-2023-28122

A local privilege escalation LPE vulnerability in UI Desktop for Windows Version 0.59.1.71 and earlier allows a malicious actor with local access to a Windows device running said application to submit arbitrary commands as SYSTEM.This vulnerability is fixed in Version 0.62.3 and later...

CVE-2023-28122

CVE-2023-28122 describes a local privilege escalation in UI Desktop for Windows versions 0.59.1.71 and earlier . An attacker with local access can submit arbitrary commands as SYSTEM . The vulnerability is addressed by upgrading to version 0.62.3 or later. The initial description notes the impact...

CVE-2021-28122

Open5GS WebUI prior to 2.2.1 is affected by a request-validation issue that allows an unauthenticated attacker to perform CRUD operations on the subscriber database due to Express not requiring authentication. Affected versions are 2.1.3 through 2.2.x before 2.2.1. The issue enables actions such ...

Airspan ProST WiMAX Device Web接口验证绕过漏洞

BUGTRAQ ID: 28122 CNCAN ID:CNCAN-2008030701 Airspan的WiMAX基站和终端用户设备AS.MAX家族包括对住宅和移动因特网接入、企业数据网络和语音IP的支持。 Airspan ProST WiMAX设备存在验证绕过问题，远程攻击者可以利用漏洞未授权访问受此漏洞影响设备，修改任何配置。 目前没有详细漏洞细节提供。 Airspan ProST 目前没有解决方案提供，不过可限制80/tcp端口的过滤来降低威胁： http://www.airspan.com/productswimaxcustpremProST.aspx...