CVE-2023-3016

A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

CVE-2023-3016

A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

Cross site scripting

A vulnerability was found in yiwent Vip Video Analysis 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to th...

Server side request forgery (ssrf)

A vulnerability has been found in yiwent Vip Video Analysis 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file data/title.php. The manipulation of the argument titurl leads to server-side request forgery. The attack can be launched remotely. The...

CVE-2023-3016

CVE-2023-3016 affects yiwent Vip Video Analysis 1.0. The vulnerability is in the admin/admincore.php component and is a cross-site scripting flaw. The issue can be triggered remotely and an exploit has been disclosed publicly. Several connected sources note no confirmed vendor patch/version updat...

CVE-2023-3015

The CVE-2023-3015 entry affects yiwent Vip Video Analysis 1.0, with a vulnerability in the data/title.php file where manipulating the titurl argument triggers server-side request forgery (SSRF). It can be exploited remotely, and public disclosures exist (VDB-230359). Connected sources corroborate...

Vip Video Analysis 代码问题漏洞

Vip Video Analysis is a vip video parsing application by yiwen personal developer. A code issue vulnerability exists in Vip Video Analysis version 1.0, which stems from a server-side request forgery due to misuse of the parameter titurl...

Vip Video Analysis 跨站脚本漏洞

Vip Video Analysis is a vip video parsing application by yiwen personal developer. A cross-site scripting vulnerability exists in Vip Video Analysis version 1.0. An attacker can exploit this vulnerability to conduct cross-site scripting attacks...

PT-2023-22558 · Unknown · Yiwent Vip Video Analysis

Name of the Vulnerable Software and Affected Versions: yiwent Vip Video Analysis version 1.0 Description: A critical issue has been found in the software, affecting an unknown functionality of the file data/title.php. The manipulation of the titurl argument leads to server-side request forgery...

PT-2023-22563 · Unknown · Yiwent Vip Video Analysis

Name of the Vulnerable Software and Affected Versions: yiwent Vip Video Analysis version 1.0 Description: A vulnerability was found in yiwent Vip Video Analysis, affecting some unknown functionality of the file admin/admincore.php. The manipulation leads to cross site scripting. The attack may be...

Wireshark Buffer Overflow Vulnerability (CNVD-2023-62289)

Wireshark formerly Ethereal is a suite of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. A security vulnerability exists in Wireshark that stems from a failure to properly handle incomi...

Wireshark Denial of Service Vulnerability (CNVD-2023-62288)

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display detailed data for analysis. Wireshark suffers from a denial of service vulnerability that stems from not properly...

Raidforums Database Leak: Data of 460,000 Users Dumped Online

By Waqas An analysis by Hackread.com indicates that the database is legitimate since it contains details of the forum's founder, Omnipotent. This is a post from HackRead.com Read the original post: Raidforums Database Leak: Data of 460,000 Users Dumped Online...

MAL-2023-1085 Malicious code in @mddsfmsdflm/itemselector (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 88f4e295b9c4b793c8ffbdc4077606b6d5b61c41ab83b85bda2b46680c678174 The OpenSSF Package Analysis project identified '@mddsfmsdflm/itemselector' @ 103.0.9 npm as malicious. It is considered malicious because: - Th...

Wireshark Buffer Overflow Vulnerability (CNVD-2023-62290)

Wireshark is open source network protocol analysis software for troubleshooting network failures and other problems. The software runs on multiple platforms, captures network packets, and can parse multiple protocols. Wireshark has a security vulnerability that can be exploited by attackers to...

PrinterLogic Build 1.0.757 XSS / SQL Injection / Authentication Bypass

PrinterLogic SaaS, multiple vulnerabilities =========================================================== PrinterLogic's Enterprise Print Management software allows IT professionals to simplify printer driver management and empower end users. -- https://www.printerlogic.com/ Background...

Serenity / StartSharp Software File Upload / XSS / User Enumeration / Reusable Tokens

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Multiple Vulnerabilities product: Serenity and StartSharp Software vulnerable version: 6.7.1 fixed version: 6.7.1 or higher CVE number: CVE-2023-31285, CVE-2023-31286,...

PT-2023-10449 · Undefined · Undefined

ParsedReport CompletenessLow 30-05-2023 Subgroup of the Blind Eagle? Analysis of recent attack activities from the Hagga organization https://ti.qianxin.com/blog/articles/Subgroup-of-Blind-Eagle-Analysis-of-Recent-Attack-Activities-from-Hagga-Group-CN Report completeness: Low Actors/Campaigns:...

MAL-2023-1147 Malicious code in coveo.analytics-fts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6043a9b37b40dc82161ee17610e0b57801c116d25e9164912ac9352ab55c9c00 The OpenSSF Package Analysis project identified 'coveo.analytics-fts' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...

Malicious code in coveo.analytics-fts (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 6043a9b37b40dc82161ee17610e0b57801c116d25e9164912ac9352ab55c9c00 The OpenSSF Package Analysis project identified 'coveo.analytics-fts' @ 2.0.0 npm as malicious. It is considered malicious because: - The packag...