CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

PT-2023-6277

Name of the Vulnerable Software and Affected Versions WireGuard client version 0.5.3 Description The issue is related to errors in handling links, allowing a remote attacker to block IP traffic to selected IP addresses. This can be exploited to trick the victim into blocking IP traffic to chosen ...

CVE-2023-35838

The WireGuard client 0.5.3 on Windows insecurely configures the operating system and firewall such that traffic to a local network that uses non-RFC1918 IP addresses is blocked. This allows an adversary to trick the victim into blocking IP traffic to selected IP addresses and services even while...

WireGuard Security Vulnerabilities

WireGuard is an open source VPN program and protocol from the individual developer Jason A. Donenfeld. A security vulnerability exists in WireGuard version 0.5.3 that originates from an insecure configuration of the operating system and firewall that results in the blocking of traffic to a local...

CVE-2023-20561

Insufficient validation of the IOCTL Input Output Control input buffer in AMD μProf may allow an authenticated user to send an arbitrary address potentially resulting in a Windows crash leading to denial of service...

sos bug fix and enhancement update

An update is available for sos. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The sos package contains a set of utilities that gather information from system...

openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0215-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0215-1 advisory. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in...

openSUSE 15 Security Update : perl-Net-Netmask (openSUSE-SU-2023:0217-1)

The remote openSUSE 15 host has a package installed that is affected by a vulnerability as referenced in the openSUSE- SU-2023:0217-1 advisory. - The Net::Netmask module before 2.0000 for Perl does not properly consider extraneous zero characters at the beginning of an IP address string, which in...

Server-Side Request Forgery (SSRF)

gitlab is vulnerable to Server-Side Request Forgery SSRF. The vulnerability exists in web terminal advertiseaddress which allows an attacker to connect to local addresses when configuring a malicious GitLab Runner...

MediaWiki 1.24.x < 1.27.2 Wiki Visitor IP Leakage

According to its self-reported version number, the instance of MediaWiki hosted on the remote web server is prior to 1.23.16, 1.24.x prior to 1.27.2 or 1.28.x prior to 1.28.1 . It is, therefore, affected by a flaw which may allow remote attackers to discover the IP addresses of Wiki Visitors via ...

Spoofed IP Addresses for FQDN Based Tunneling

To understand the concept of Spoofed IP address in Split Tunnel of FQDN based tunneling...

Information Disclosure

gitlab is vulnerable to Information Disclosure. The vulnerability exists due to an improper access control flaw which allows an atacker to gain access to private email address of issues and merge requests assignee to Webhook data consumers...

Improper Session Management

gitlab is vulnerable to Improper Session Management. The vulnerability allows an attacker with physical access to a user’s machine may brute force the user’s password via the change password function by stealing the session id from the physical compromise of the account and splitting the attack...

Information Disclosure

gitlab is vulnerable to Information Disclosure. A lower privileged user can import users from projects that they don't have a maintainer role on and disclose email addresses of those users...

Information Disclosure

gitlab is vulnerable to Information Disclosure. This vulnerability occurs due to a flaw in the way that GitLab handles the project import/export feature. An attacker can exploit this vulnerability to obtain the private email addresses of users who have exported their projects...

CVE-2023-37873

Unauth. Reflected Cross-Site Scripting XSS vulnerability in WooCommerce Shipping Multiple Addresses plugin = 3.8.5 versions...

CVE-2023-37873

CVE-2023-37873 : Unauthenticated Reflected Cross-Site Scripting in the WordPress plugin WooCommerce Ship to Multiple Addresses (aka Shipping Multiple Addresses) for WooCommerce, affected versions

WordPress plugin WooCommerce Shipping Multiple Addresses Cross-Site Scripting Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...

PT-2023-26152 · WordPress · Woocommerce Shipping Multiple Addresses

Name of the Vulnerable Software and Affected Versions: WooCommerce Shipping Multiple Addresses plugin versions prior to 3.8.6 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This vulnerability can be exploited without authentication, allowing for...