The vulnerability in the software web interface for Cisco Webex Meetings allows attackers to perform cross-site scripting attacks and gain unauthorized access to protected information.

The vulnerability of Cisco Webex Meetings software’s web interface is related to the lack of measures taken to protect the website structure during the processing of Webex Events classic applications. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks a...

CVE-2023-37475 vulnerabilities

Vulnerabilities for packages: argo-events, argo-events-fips...

CVE-2023-37475 vulnerabilities

Vulnerabilities for packages: argo-events...

GHSA-9X44-9PGQ-CF45 vulnerabilities

Vulnerabilities for packages: argo-events, argo-events-fips...

GHSA-9X44-9PGQ-CF45 vulnerabilities

Vulnerabilities for packages: argo-events...

MS KB5014754 - Audit events found for FAS

As Per the Microsoft KB linked below, we have found audit events on our domain controllers that indicate we will be impacted when this change is enforced. We need the remediation steps, so we can implement them before we're impacted...

CVE-2023-3635

creationtimestamp| type| source ---|---|--- 2023-07-12 22:25:45+00:00| seen| https://t.me/cibsecurity/66601 2024-02-09 07:21:56+00:00| seen| https://t.me/ctinow/181827 2026-07-10 18:14:34+00:00| seen| https://gist.github.com/tmorone-rezi/c607e9d3f7174de55bf897d9c8d951d8...

CVE-2023-2796

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventonicsdownload ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id...

CVE-2023-2796

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventonicsdownload ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id...

Authorization

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventonicsdownload ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id...

CVE-2023-2796 EventON < 2.1.2 - Unauthenticated Event Access

The EventON WordPress plugin before 2.1.2 lacks authentication and authorization in its eventonicsdownload ajax action, allowing unauthenticated visitors to access private and password protected Events by guessing their numeric id...

PT-2023-4277 · WordPress · Eventon

Name of the Vulnerable Software and Affected Versions: EventON WordPress plugin versions prior to 2.1.2 Description: The issue is related to a lack of authentication and authorization in the eventon ics download ajax action of the EventON WordPress plugin. This allows unauthenticated visitors to...

Zephyr 资源管理错误漏洞

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A resource management error vulnerability exists in Zephyr 3.3 and earlier versions that stems from not clearing global references to state pointers after processing connection events, which could allow a...

CVE-2023-20133

A vulnerability in the web interface of Cisco Webex Meetings could allow an authenticated, remote attacker to conduct a stored cross-site scripting XSS attack against a user of the interface. This vulnerability exists because of insufficient validation of user-supplied input in Webex Events class...

CVE-2023-31248

creationtimestamp| type| source ---|---|--- 2023-07-05 22:22:11+00:00| seen| https://t.me/cibsecurity/66006 2024-02-01 18:26:15+00:00| seen| https://t.me/ctinow/177731 2024-10-31 15:27:49+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/8634 2026-07-29 12:02:23+00:00| see...

Tiva Events Calender v1.4 - Cross Site Scripting Vulnerability

Document Title: =============== Tiva Events Calender v1.4 - Cross Site Scripting Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2276 Release Date: ============= 2023-07-04 Vulnerability Laboratory ID VL-ID:...

Qualcomm Chipsets 缓冲区错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption issue when processing DMA buffer release events...

CVE-2021-25371

creationtimestamp| type| source ---|---|--- 2023-06-29 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:34:44+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2971843 2025-02-14 21:08:32+00:00| seen| Telegram/rPUBeKEjxriGCQ6M-QAX4jArKG6pjkVh-imtV6AOfQBbDV...

CVE-2023-3330

creationtimestamp| type| source ---|---|--- 2023-06-28 07:17:33+00:00| seen| https://t.me/cibsecurity/65598 2023-06-28 07:17:34+00:00| seen| https://t.me/cibsecurity/65599 2023-06-28 07:17:35+00:00| seen| https://t.me/cibsecurity/65600...

CVE-2023-34148

creationtimestamp| type| source ---|---|--- 2023-06-27 02:21:52+00:00| seen| https://t.me/cibsecurity/65537 2023-06-27 02:25:03+00:00| seen| https://t.me/cibsecurity/65555 2023-06-27 08:09:12+00:00| seen| https://t.me/cibsecurity/65565...