CVE-2023-25535

Dell SupportAssist for Home PCs Installer Executable file version prior to 3.13.2.19 used for initial installation has a high vulnerability that can result in local privilege escalation LPE. This vulnerability only affects first-time installations done prior to 8th March 2023...

PT-2024-12065 · Dell · Dell Supportassist

Name of the Vulnerable Software and Affected Versions: Dell SupportAssist for Home PCs Installer Executable versions prior to 3.13.2.19 Description: The issue affects the initial installation of Dell SupportAssist for Home PCs and can result in local privilege escalation LPE. This vulnerability...

Boundary vulnerable to session hijacking through TLS certificate tampering

Boundary and Boundary Enterprise “Boundary” is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use TOFU token may craft a TLS...

Session fixation

Boundary and Boundary Enterprise “Boundary” is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use TOFU token may craft a TLS...

CVE-2024-1052 Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering

Boundary and Boundary Enterprise “Boundary” is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use TOFU token may craft a TLS...

CVE-2024-1052 Boundary Vulnerable to Session Hijacking Through TLS Certificate Tampering

Boundary and Boundary Enterprise “Boundary” is vulnerable to session hijacking through TLS certificate tampering. An attacker with privileges to enumerate active or pending sessions, obtain a private key pertaining to a session, and obtain a valid trust on first use TOFU token may craft a TLS...

CVE-2024-1052

Boundary and Boundary Enterprise are affected by CVE-2024-1052: session hijacking via TLS certificate tampering. The issue occurs when an attacker who can enumerate active/pending sessions, obtain a session private key, and possess a valid TOFU token can craft a TLS certificate to hijack an activ...

albertafirstflooringltd.com Cross Site Scripting vulnerability OBB-3847403

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

BIT-LIFERAY-2023-33943

Cross-site scripting XSS vulnerability in the Account module in Liferay Portal 7.4.3.21 through 7.4.3.62, and Liferay DXP 7.4 update 21 through 62 allows remote attackers to inject arbitrary web script or HTML via a crafted payload injected into a user's 1 First Name, 2 Middle Name, 3 Last Name, ...

PT-2024-16132 · Sourcecodester · Sourcecodester Facebook News Feed Like

Name of the Vulnerable Software and Affected Versions: SourceCodester Facebook News Feed Like version 1.0 Description: A problematic issue has been found, affecting the New Account Handler component. The manipulation of the First Name/Last Name argument with the input alert1 leads to cross-site...

CVE-2024-1024: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in SourceCodester Facebook News Feed Like 1.0 and classified as problematic. This vulnerability affects unknown code of the component New Account Handler. The manipulation of the argument First Name/Last Name with the input leads to cross site scripting. The attack...

Red Hat Shim Security Breach

Red Hat Shim is a simple software package from Red Hat. It is intended to be used as a first-stage boot loader on UEFI systems. A security vulnerability exists in Red Hat Shim. An attacker exploiting this vulnerability could cause memory corruption and possibly lead to a bootstrap crash or data...

CVE-2024-23656

creationtimestamp| type| source ---|---|--- 2024-01-25 21:26:45+00:00| seen| https://t.me/ctinow/173803 2024-02-01 03:16:27+00:00| seen| https://t.me/ctinow/177280...

CVE-2023-33758

creationtimestamp| type| source ---|---|--- 2024-01-25 09:26:28+00:00| seen| https://t.me/ctinow/173337 2024-01-26 15:43:12+00:00| seen| https://t.me/arpsyndicate/2989 2024-01-31 23:16:59+00:00| seen| https://t.me/ctinow/177171 2024-02-18 13:41:44+00:00| seen| https://t.me/ctinow/187246 2025-06-2...

PT-2024-12514 · Solax · Solax Pocket Wifi

Name of the Vulnerable Software and Affected Versions: SolaX Pocket WiFi versions 3 through 3.001.02 Description: An issue was discovered where authentication for the web interface is completed via an unauthenticated WiFi AP. The administrative password for the web interface has a default passwor...

CVE-2024-0782: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in CodeAstro Online Railway Reservation System 1.0 and classified as problematic. This vulnerability affects unknown code of the file pass-profile.php. The manipulation of the argument First Name/Last Name/User Name leads to cross site scripting. The attack can be...

Canadian Man Stuck in Triangle of E-Commerce Fraud

A Canadian man who says hes been falsely charged with orchestrating a complex e-commerce scam is seeking to clear his name. His case appears to involve "triangulation fraud," which occurs when a consumer purchases something online -- from a seller on Amazon or eBay, for example -- but the seller...

CVE-2023-48248

creationtimestamp| type| source ---|---|--- 2024-01-10 12:21:59+00:00| seen| https://t.me/ctinow/165742 2024-01-28 10:26:56+00:00| seen| https://t.me/ctinow/174888...

CVE-2023-49238

In Gradle Enterprise before 2023.1, a remote attacker may be able to gain access to a new installation in certain installation scenarios because of a non-unique initial system user password. Although this password must be changed upon the first login, it is possible that an attacker logs in befor...

Webcam redirection in double hop is not working

Webcam is not working anymore in a double hop scenario. If the first hop VDA is 1912CU3 webcam redirects fine. However if first hop VDA is CVAD 1912 CU8 VDA then webcam redirection fails. With https://webcamtests.com/ when clicking on "Test my cam" an error is seen. "Your webcam is being used or...