4964 matches found
curl: CVE-2023-46218: cookie mixed case PSL bypass
A vulnerability in libcurl was discovered that allows bypassing cookie domain restrictions through improper hostname normalization. This enables a malicious site to set supercookies readable by other sites under the same top level domain. The issue was caused by libcurl failing to convert the...
Active exploitation of Cisco IOS XE Software Web Management User Interface vulnerabilities
Updates Nov. 02: Identified a third version of the BadCandy implant. Added expected response from the new version of the implant against one of the HTTP requests used to check for infected device. Nov. 1: Observed increase in exploitation attempts since the publication of the proofs-of-concept PO...
CVE-2023-36953
creationtimestamp| type| source ---|---|--- 2023-10-16 12:36:38+00:00| seen| https://t.me/cibsecurity/72307...
CVE-2023-45273
Cross-Site Request Forgery CSRF vulnerability in Matt McKenny Stout Google Calendar plugin = 1.2.3 versions...
Ubuntu 18.04 ESM / 20.04 ESM : hosted-git-info vulnerability (USN-5216-1)
The remote Ubuntu 18.04 ESM / 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5216-1 advisory. It was discovered that hosted-git-info incorrectly handled certain inputs. A remote attacker could use this to cause a denial of service. Tenable has...
CVE-2018-25091
urllib3 before 1.24.2 does not remove the authorization HTTP header when following a cross-origin redirect i.e., a redirect that differs in host, port, or scheme. This can allow for credentials in the authorization header to be exposed to unintended hosts or transmitted in cleartext. NOTE: this...
CVE-2023-40534
creationtimestamp| type| source ---|---|--- 2023-10-10 22:46:13+00:00| seen| https://t.me/cibsecurity/71924...
Security Bulletin: IBM QRadar Use Case Manager app is vulnerable to using components with known vulnerabilities
Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. The update addresses these issues. Vulnerability Details CVEID:CVE-2023-2142 DESCRIPTION: Mozilla Nunjucks is vulnerable to cross-site scripting, caused by...
CVE-2023-44762
creationtimestamp| type| source ---|---|--- 2023-10-06 16:26:36+00:00| seen| https://t.me/cibsecurity/71711...
CVE-2023-43068
creationtimestamp| type| source ---|---|--- 2023-10-05 22:13:10+00:00| seen| https://t.me/cibsecurity/71681...
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Case Manager (CVE-2023-35890)
Summary IBM WebSphere Application Server is shipped as a component of IBM Case Manager. Information about a security vulnerability affecting IBM WebSphere Application Server has been published in a security bulletin. Vulnerability Details Refer to the security bulletins listed in the...
[SECURITY] Fedora 39 Update: plantuml-1.2023.11-1.fc39
PlantUML is a program allowing to draw UML diagrams, using a simple and human readable text description. It is extremely useful for code documenting, sketching project architecture during team conversations and so on. PlantUML supports the following diagram types - sequence diagram - use case...
CVE-2023-44023
creationtimestamp| type| source ---|---|--- 2023-09-27 19:33:52+00:00| seen| https://t.me/cibsecurity/71051...
cvxPerVotium() calculation will return zero if all CVX tokens are pending withdrawal as obligations
Lines of code Vulnerability details Summary The implementation of cvxPerVotium contains an edge case that causes it to return an invalid zero value price. Impact The cvxPerVotium function present in the VotingStrategy contract is used to measure the number of held CVX tokens per vAfEth. 144:...
CVE-2023-42821
creationtimestamp| type| source ---|---|--- 2023-09-22 10:53:16+00:00| published-proof-of-concept| https://github.com/gomarkdown/markdown/security/advisories/GHSA-m9xq-6h2j-65r2 2023-09-22 20:31:53+00:00| seen| https://t.me/cibsecurity/70951...
Arbitrary File Overwrite
org.eclipse.jgit is vulnerable to Arbitrary File Overwrite. The vulnerability is due to a symbolic link present in a specially crafted git repository which can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive filesystem...
GHSA-3P86-9955-H393 Arbitrary File Overwrite in Eclipse JGit
Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...
Arbitrary File Overwrite in Eclipse JGit
Arbitrary File Overwrite in Eclipse JGit = 6.6.0 In Eclipse JGit, all versions = 6.6.0.202305301015-r, a symbolic link present in a specially crafted git repository can be used to write a file to locations outside the working tree when this repository is cloned with JGit to a case-insensitive...
Oracle Linux 9 : istio (ELSA-2023-12771)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-12771 advisory. - Addresses CVE CVE-2023-35941, CVE-2023-35942, CVE-2023-35943, CVE-2023-35944. kubevirt - CVE-2023-35941 - CVE-2023-35942 - CVE-2023-35943 -...