26056 matches found
Security Bulletin: IBM Watson Explorer affected by vulnerability in Apache Commons.
Summary IBM Watson Explorer Analytical Components contain a vulnerable version of Apache Commons. Vulnerability Details CVEID:CVE-2023-24998 DESCRIPTION: Apache Commons FileUpload and Tomcat are vulnerable to a denial of service, caused by not limit the number of request parts to be processed in...
Security Bulletin: IBM Watson Explorer affected by vulnerability in OpenSSL.
Summary IBM Watson Explorer Foundational Components contains a vulnerable version of OpenSSL. Vulnerability Details CVEID:CVE-2022-4450 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by a double-free error related to the improper handling of specific PEM data by the PEMreadbioe...
Security Bulletin: IBM Watson Explorer is affected by a vulnerability in Apache UIMA
Summary IBM Watson Explorer OneWEX and Foundational Components contains a vulnerable version of Apache UIMA. Vulnerability Details CVEID:CVE-2022-32287 DESCRIPTION: Apache UIMA could allow a remote attacker to traverse directories on the system, caused by improper validation of user supplied inpu...
Malicious code in mobile-coin-block-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-606 Malicious code in mobile-coin-block-explorer (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 55fa1745bad5c1749dccb8fbb0dcfe3d2d1046ffe8df941579b0ad26de5713c6 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
Researchers Detail Severe "Super FabriXss" Vulnerability in Microsoft Azure SFX
Details have emerged about a now-patched vulnerability in Azure Service Fabric Explorer SFX that could lead to unauthenticated remote code execution. Tracked as CVE-2023-23383 CVSS score: 8.2, the issue has been dubbed "Super FabriXss" by Orca Security, a nod to the FabriXss flaw CVE-2022-35829,...
Microsoft Internet Explorer Memory Corruption Vulnerability
Microsoft Internet Explorer contains a memory corruption vulnerability that allows remote attackers to execute code or cause a denial of service via a crafted website...
CVE-2022-2561
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OPC Labs QuickOPC 2022.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Deserialization of untrusted data
This vulnerability allows remote attackers to execute arbitrary code on affected installations of OPC Labs QuickOPC 2022.1. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...
Explorer32++ 1.3.5.531 Buffer Overflow
Exploit Title: Explorer32++ 1.3.5.531 - Buffer overflow Discovery by: Rafael Pedrero Discovery Date: 2022-01-09 Vendor Homepage: http://www.explorerplusplus.com/ Software Link : http://www.explorerplusplus.com/ Tested Version: 1.3.5.531 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...
Explorer32++ v1.3.5.531 - Buffer overflow
Exploit Title: Explorer32++ 1.3.5.531 - Buffer overflow Discovery by: Rafael Pedrero Discovery Date: 2022-01-09 Vendor Homepage: http://www.explorerplusplus.com/ Software Link : http://www.explorerplusplus.com/ Tested Version: 1.3.5.531 Tested on: Windows 10 CVSS v3: 7.3 CVSS vector:...
Security Bulletin: Stored cross-site vulnerability when performing a document upload using Responsive Document Explorer affect IBM Business Automation Workflow - CVE-2023-24957
Summary IBM Business Automation Workflow is vulnerable to a Stored cross-site vulnerability when performing a document upload using Responsive Document Explorer. Vulnerability Details CVEID:CVE-2023-24957 DESCRIPTION: IBM Business Automation Workflow is vulnerable to cross-site scripting. This...
New DotRunpeX Malware Delivers Multiple Malware Families via Malicious Ads
A new piece of malware dubbed dotRunpeX is being used to distribute numerous known malware families such as Agent Tesla, Ave Maria, BitRAT, FormBook, LokiBot, NetWire, Raccoon Stealer, RedLine Stealer, Remcos, Rhadamanthys, and Vidarhttps://thehackernews.com/2023/01/t...
CVE-2023-23383
Service Fabric Explorer Spoofing Vulnerability...
CVE-2023-23383
Service Fabric Explorer Spoofing Vulnerability...
CVE-2023-23383
Service Fabric Explorer Spoofing Vulnerability...
Spoofing
Service Fabric Explorer Spoofing Vulnerability...
CVE-2023-23383
CVE-2023-23383 is a spoofing vulnerability affecting Azure Service Fabric Explorer (SFX). Public materials describe a remote, unauthenticated chain enabling spoofed UI and, in a detailed exploit write-up, remote code execution via an XSS chain in SFX 9.1.1436.9590 and earlier. Affected product/ve...
