CVE-2023-32478

Dell PowerStore versions prior to 3.5.0.1 contain an insertion of sensitive information into log file vulnerability. A high privileged malicious user could potentially exploit this vulnerability, leading to sensitive information disclosure...

CVE-2023-32478

Dell PowerStore (pre-3.5.0.1) is affected by a vulnerability where sensitive information can be inserted into log files. The issue stems from how logs may capture sensitive data, enabling a high-privilege or potentially compromised user to disclose information. Affected product/version scope: Del...

CVE-2023-3722 Avaya Aura Device Services Remote Code Execution

An OS command injection vulnerability was found in the Avaya Aura Device Services Web application which could allow remote code execution as the Web server user via a malicious uploaded file. This issue affects Avaya Aura Device Services version 8.1.4.0 and earlier...

SUSE-SU-2023:2870-1 Security update for ImageMagick

This update for ImageMagick fixes the following issues: - CVE-2023-3195: Fixed stack overflow in coders/tiff.c while parsing malicious tiff file bsc1212235...

PT-2023-9084 · Trimble · Trimble Sketchup Viewer

Name of the Vulnerable Software and Affected Versions: Trimble SketchUp Viewer affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Trimble SketchUp Viewer. User interaction is required to exploit this issue, where...

Auto-GPT 代码注入漏洞

Auto-GPT is an artificial intelligence software agent program open-sourced by Significant Gravitas. A code injection vulnerability exists in versions of Auto-GPT prior to 0.4.3, which stems from the ability to achieve arbitrary code execution on a host running Auto-GPT by overwriting...

CVE-2023-35312

Microsoft VOLSNAP.SYS Elevation of Privilege Vulnerability...

PT-2023-25226 · Unknown · Gz Scripts Car Listing Script Php

Name of the Vulnerable Software and Affected Versions: GZ Scripts Car Listing Script PHP version 1.8 Description: A vulnerability was found in the file /preview.php, where the manipulation of the page/sort by argument leads to cross-site scripting. The attack can be initiated remotely. The vendor...

PT-2023-25230 · Unknown · Gz Scripts Ticket Booking Script

Name of the Vulnerable Software and Affected Versions: GZ Scripts Ticket Booking Script version 1.8 Description: A problematic issue has been found in the software, affecting some unknown functionality of the file /load.php. The manipulation of the arguments first name, second name, phone, addres...

Availability Booking Calendar PHP 跨站脚本漏洞

Availability Booking Calendar PHP is a GZ Scripts open source availability booking calendar system . A cross-site scripting vulnerability exists in GZ Scripts Availability Booking Calendar PHP version 1.8, which stems from the parameter cid/firstname/secondname/address1/country in the file load.p...

The vulnerability of the boa file at/goform/formSetWanDhcpplus in the microprogramming software for D-Link N300 WI-Fi Router DIR-605L allows a perpetrator to execute arbitrary code.

The vulnerability of the boa parameter file in the goform/formSetWanDhcpplus software for D-Link N300 WI-Fi Router DIR-605L wireless access points is related to the ability to write data beyond the buffer in memory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary...

CVE-2023-28365

A backup file vulnerability found in UniFi applications Version 7.3.83 and earlier running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored...

PT-2023-21675 · Ubiquiti · Unifi

Name of the Vulnerable Software and Affected Versions: UniFi versions 7.3.83 and earlier Description: A backup file vulnerability found in UniFi applications running on Linux operating systems allows application administrators to execute malicious commands on the host device being restored...

PYSEC-2023-97

easy-parse v0.1.1 was discovered to contain a XML External Entity Injection XXE vulnerability which allows attackers to execute arbitrary code via a crafted XML file...

Privilege escalation

A maliciously crafted DLL file can be forced to write beyond allocated boundaries in the Autodesk installer when parsing the DLL files and could lead to a Privilege Escalation vulnerability...

Important: Red Hat Security Advisory: jenkins and jenkins-2-plugins security update

An update for jenkins and jenkins-2-plugins is now available for OpenShift Developer Tools and Services for OCP 4.13. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Design/Logic Flaw

An insertion of sensitive information into log file vulnerability in Fortinet FortiOS 7.2.0 through 7.2.4 and FortiProxy 7.0.0 through 7.0.10. 7.2.0 through 7.2.1 allows an attacker to read certain passwords in plain text...

CVE-2023-34855

A Cross Site Scripting XSS vulnerability in Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi...

CVE-2023-34855

A Cross Site Scripting XSS vulnerability in Youxun Electronic Equipment Shanghai Co., Ltd AC Centralized Management Platform v1.02.040 allows attackers to execute arbitrary code via uploading a crafted HTML file to the interface /upfile.cgi...

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router allows a hacker to execute arbitrary code.

The vulnerability of the /userfs/bin/tcapi file of the Diagnostics microprogramming system for the D-Link DSL-3782 router lies in the fact that the output of the operation goes beyond the buffer in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...