92 matches found
Alert: New Kubernetes Vulnerabilities Enable Remote Attacks on Windows Endpoints
Three interrelated high-severity security flaws discovered in Kubernetes could be exploited to achieve remote code execution with elevated privileges on Windows endpoints within a cluster. The issues, tracked as CVE-2023-3676, CVE-2023-3893, and CVE-2023-3955, carry CVSS scores of 8.8 and impact...
CVE-2023-3893
creationtimestamp| type| source ---|---|--- 2023-08-24 08:20:12+00:00| seen| https://t.me/ctinow/132601 2023-09-13 16:55:52+00:00| seen| https://t.me/KomunitiSiber/787 2023-09-13 18:29:02+00:00| seen| Telegram/Eqz54UavaIWHVUW9FJ7x8kPgHx309M56ivVEiN1xHvAsg 2023-09-14 15:21:47+00:00| seen|...
CVE-2023-3893
A vulnerability was found in Kubernetes. This flaw allows a user who can create pods on Windows nodes running kubernetes-csi-proxy to escalate to admin privileges on those nodes...
CVE-2022-3893
Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...
CVE-2022-3893 Potential XSS on custom menu navigation
Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...
CVE-2022-3893 Potential XSS on custom menu navigation
Cross-site Scripting XSS vulnerability in BlueSpiceCustomMenu extension of BlueSpice allows user with admin permissions to inject arbitrary HTML into the custom menu navigation of the application...
CVE-2022-3893
CVE-2022-3893 is a cross-site scripting (XSS) vulnerability in the BlueSpiceCustomMenu extension for BlueSpice. The affected component is the custom menu navigation, exploitable by a user with admin permissions to inject arbitrary HTML. According to the provided sources, this can lead to user-lev...
Ubuntu: Security Advisory (USN-3893-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
AlmaLinux 8 : java-1.8.0-openjdk (ALSA-2021:3893)
The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:3893 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: JSSE. Supported versions that are affected are Java...
RHEL 8 : java-1.8.0-openjdk (RHSA-2021:3893)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3893 advisory. The java-1.8.0-openjdk packages provide the OpenJDK 8 Java Runtime Environment and the OpenJDK 8 Java Software Development Kit. Security...
PT-2021-3893 · Microsoft · Azure Sphere
Name of the Vulnerable Software and Affected Versions: Azure Sphere affected versions not specified Description: The issue is related to insufficient input validation in the Azure Sphere operating system. Exploitation of this issue may allow an attacker to cause a denial of service...
Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free
Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free Date: 15/05/2021 CVE : CVE-2013-3893 PoC: https://github.com/travelworld/cve20133893trigger.html/blob/gh-pages/params.json Exploit Author: SlidingWindow Vendor Advisory:...
Microsoft Internet Explorer 8 SetMouseCapture Use-After-Free
Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free Date: 15/05/2021 CVE : CVE-2013-3893 PoC: https://github.com/travelworld/cve20133893trigger.html/blob/gh-pages/params.json Exploit Author: SlidingWindow Vendor Advisory:...
Microsoft Internet Explorer 8 - (SetMouseCapture) Use After Free Exploit
Exploit Title: Microsoft Internet Explorer 8 - 'SetMouseCapture ' Use After Free CVE : CVE-2013-3893 PoC: https://github.com/travelworld/cve20133893trigger.html/blob/gh-pages/params.json Exploit Author: SlidingWindow Vendor Advisory:...
CVE-2020-3893
CVE-2020-3893 is a memory corruption issue in macOS components allowing a malicious application to execute arbitrary code with kernel privileges. The initial description states a fix via input validation and a patch in macOS Catalina 10.15.4. Connected sources corroborate kernel-level impact and ...
macOS 10.15.x < 10.15.4 / 10.14.x < 10.14.6 Security Update 2020-002 / 10.13.x < 10.13.6 Security Update 2020-002
The remote host is running a version of macOS / Mac OS X that is 10.13.x prior to 10.13.6 Security Update 2020-002, 10.14.x prior to 10.14.6 Security Update 2020-002, or 10.15.x prior to 10.15.4. It is, therefore, affected by multiple vulnerabilities : - Insufficient control flow in certain data...
CVE-2014-3893
CVE-2014-3893 is a duplicate of CVE-2014-0114. Connected docs provide concrete details for CVE-2014-0114 (Apache Struts 1.x): remote code execution via ClassLoader manipulation in the Struts ActionForm, with fixes/mitigations across affected products. Remedies noted include upgrading to patched A...