CVE-2023-39007

creationtimestamp| type| source ---|---|--- 2023-08-09 22:15:32+00:00| seen| https://t.me/cibsecurity/68127...

CVE-2023-39007

/ui/cron/item/open in the Cron component of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allows XSS via openAction in app/controllers/OPNsense/Cron/ItemController.php...

CVE-2023-39007

OPNsense Cron component is affected: Community Edition prior to 23.7 and Business Edition prior to 23.4.2 suffer a Cross-Site Scripting (XSS) via openAction in /ui/cron/item/open (Cron/ItemController.php). The vulnerability is triggered by opening a Cron item and, per CVSS 3.1 details, requires u...

CVE-2022-39007

creationtimestamp| type| source ---|---|--- 2022-09-16 22:35:25+00:00| seen| https://t.me/cibsecurity/49978...

CVE-2022-39007

The location module has a vulnerability of bypassing permission verification.Successful exploitation of this vulnerability may cause privilege escalation...

CVE-2022-39007

CVE-2022-39007 affects Huawei HarmonyOS Location module. Root cause: insufficient checksum of the Location module privilege, enabling bypass of permission verification and potential elevation of privilege. Impact: privilege escalation, high risk per records. No fix/version in documents; monitor f...