kernel: USB: gadget: Fix use-after-free during usb config switch

A use-after-free vulnerability was found in the Linux kernel's USB gadget subsystem. When switching USB configuration from RNDIS to another configuration, if the hardware's pullup callback fails either unsupported or hardware fault, the error handling path triggers rndisclose on already-freed...

c-ares: buffer overflow in config_sortlist() due to missing string length check

A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...

CVE-2023-5719

The Crimson 3.2 Windows-based configuration tool allows users with administrative access to define new passwords for users and to download the resulting security configuration to a device. If such a password contains the percent % character, invalid values will be included, potentially truncating...

PT-2023-12543

Name of the Vulnerable Software and Affected Versions Ortus Solutions ColdBox Elixir version 3.1.6 Description A problematic vulnerability has been found in Ortus Solutions ColdBox Elixir, affecting the ENV Variable Handler component, specifically the file src/defaultConfig.js. This issue leads t...

The vulnerability of the Customer, Config, Pricing Manager components of the Oracle Communications BRM software platform—the Elastic Charging Engine—allows a malicious actor to disclose protected information.

The vulnerability of the Customer, Config, Pricing Manager components of the Oracle Communications BRM software platform, specifically the Elastic Charging Engine, exists due to insufficient validation of input data. Exploiting this vulnerability could allow attackers to disclose sensitive...

[SECURITY] Fedora 39 Update: python-configobj-5.0.8-6.fc39

ConfigObj is a simple but powerful configuration file reader and writer: an i ni file round tripper. Its main feature is that it is very easy to use, with a straightforward programmers interface and a simple syntax for config files...

Exploit for Unprotected Alternate Channel in Rockwellautomation Allen-Bradley_Stratix_5200_Firmware

CVE-2023-20198 An Exploitation script developed to exploit the...

CVE-2023-1194

An out-of-bounds OOB memory read flaw was found in parseleasestate in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. When an attacker sends the CREATE command with a malformed payload to KSMBD, due to a missing check of NameOffset in the parseleasestate...

c-ares: buffer overflow in config_sortlist() due to missing string length check

A flaw was found in the c-ares package. The aressetsortlist is missing checks about the validity of the input string, which allows a possible arbitrary length stack overflow. This issue may cause a denial of service or a limited impact on confidentiality and integrity...

CVE-2023-5910

A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.php of the component Web Config. The manipulation of the argument Site Title with the input alert1 leads to cross site scripting. The attack may be initiated...

PT-2023-32415 · Unknown · Lissy93 Dashy

Name of the Vulnerable Software and Affected Versions: Lissy93 Dashy version 2.1.1 Description: A critical vulnerability has been found in Lissy93 Dashy, affecting an unknown part of the file /config-manager/save of the component Configuration Handler. The manipulation of the argument config lead...

Dashy Access Control Error Vulnerability

Dashy is a self-hostable personal dashboard by Alicia Sykes Individual Developer. An Access Control Error vulnerability exists in Dashy version 2.1.1, which stems from incorrect manipulation of the parameter config resulting in incorrect access control...

CVE-2023-5910 PopojiCMS Web Config install.php cross site scripting

A vulnerability was found in PopojiCMS 2.0.1 and classified as problematic. This issue affects some unknown processing of the file install.php of the component Web Config. The manipulation of the argument Site Title with the input alert1 leads to cross site scripting. The attack may be initiated...

CVE-2023-1193

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...

Electron Technologies FZC PopojiCMS Cross-Site Scripting Vulnerability

Electron Technologies FZC PopojiCMS is an open source content management system CMS based on the Popoji framework from Electron Technologies FZC, USA. A cross-site scripting vulnerability exists in Electron Technologies FZC PopojiCMS version 2.0.1, which stems from some unknown processing in the...

PT-2023-32414 · Popojicms · Popojicms

Name of the Vulnerable Software and Affected Versions: PopojiCMS version 2.0.1 Description: A vulnerability was found in the file install.php of the component Web Config, affecting some unknown processing. The manipulation of the argument Site Title with the input alert1 leads to cross site...

PT-2023-7771 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI versions prior to 5.11.3 Description: The issue is related to a lack of neutralization of special elements in the command test.php script of the Core Config Manager component in Nagios XI, allowing for remote code execution. This...

CVE-2023-45670 Frigate cross-site request forgery in `config_save` and `config_set` request handlers

Frigate is an open source network video recorder. Prior to version 0.13.0 Beta 3, the config/save and config/set endpoints of Frigate do not implement any CSRF protection. This makes it possible for a request sourced from another site to update the configuration of the Frigate server e.g. via...

Exploit for Improper Access Control in Joomla Joomla\!

CVE-2023-23752 Joomla Unauthorized Access Vulnerability CVE...

PT-2023-29639 · Frigate · Frigate

Name of the Vulnerable Software and Affected Versions: Frigate versions prior to 0.13.0 Beta 3 Description: Frigate is an open source network video recorder. The config/save and config/set endpoints of Frigate do not implement any CSRF protection, making it possible for a request sourced from...