CVE-2023-2829

A named instance configured to run as a DNSSEC-validating recursive resolver with the Aggressive Use of DNSSEC-Validated Cache RFC 8198 option synth-from-dnssec enabled can be remotely terminated using a zone with a malformed NSEC record. This issue affects BIND 9 versions 9.16.8-S1 through...

Stack overflow

Stack-based buffer overflow vulnerability exists in TELLUS v4.0.15.0 and TELLUS Lite v4.0.15.0. Opening a specially crafted SIM2 file may lead to information disclosure and/or arbitrary code execution. This vulnerability is different from CVE-2023-32538 and CVE-2023-32273...

Where from, Where to — The Evolution of Network Security

For the better part of the 90s and early aughts, the sysadmin handbook said, "Filter your incoming traffic, not everyone is nice out there " later coined by Gandalf as "You shall not pass ". So CIOs started to supercharge their network fences with every appliance they could get to protect against...

SUSE CVE-2023-33864

StreamReader::ReadFromExternal in RenderDoc before 1.27 allows an Integer Overflow with a resultant Buffer Overflow. It uses uint32tmBufferSize-mInputSize even though mInputSize can exceed mBufferSize...

PT-2023-24520 · Renderdoc · Renderdoc

Name of the Vulnerable Software and Affected Versions: RenderDoc versions prior to 1.27 Description: The issue is related to an Integer Overflow that results in a Buffer Overflow. This occurs because the StreamReader::ReadFromExternal function in RenderDoc uses uint32 tm BufferSize-m InputSize ev...

Copy_from_user Spectre-V1 Gadget in Linux Kernel

...

Tenda AC6 fromDhcpListClient function stack buffer overflow vulnerability

Tenda AC6 is a dual-band wireless router from Tenda that supports 2.4GHz and 5GHz bands with a maximum transmission rate of 1167Mbps. The Tenda AC6 suffers from a stack buffer overflow vulnerability, which originates from the fromDhcpListClient function resulting in a stack-based buffer overflow...

Default credentials

In WFTPD 3.25, usernames and password hashes are stored in an openly viewable wftpd.ini configuration file within the WFTPD directory. NOTE: this is a product from 2006...

The vulnerability of the ComponentModel Profile.FromFile() function in the application programming complex of the PLC CODESYS Development System allows a perpetrator to execute arbitrary commands.

The vulnerability of the ComponentModel Profile.FromFile function in the CODESYS Development System application framework is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Meet 'Jack' from Romania! Mastermind Behind Golden Chickens Malware

The identity of the second threat actor behind the Golden Chickens malware has been uncovered courtesy of a "fatal" operational security blunder, cybersecurity firm eSentire said. The individual in question, who lives in Bucharest, Romania, has been given the codename Jack. He is one of the two...

CVE-2023-29985

Sourcecodester Student Study Center Desk Management System v1.0 admin\reports\index.phpdatefrom has a SQL Injection vulnerability...

PT-2023-22504 · Unknown · Sourcecodester Student Study Center Desk Management System

Name of the Vulnerable Software and Affected Versions: Sourcecodester Student Study Center Desk Management System version 1.0 Description: The issue is related to a SQL Injection vulnerability. It affects the adminreportsindex.php endpoint, specifically the date from parameter. Recommendations: F...

CVE-2023-31703

Cross Site Scripting XSS in the edit user form in Microworld Technologies eScan management console 14.0.1400.2281 allows remote attacker to inject arbitrary code via the from parameter...

MicroWorld eScan Management Console 跨站脚本漏洞

MicroWorld eScan Management Console is a control panel from MicroWorld Japan. It helps system administrators remotely manage all eScan client computers on a network. A security vulnerability exists in MicroWorld eScan Management Console version 14.0.1400.2281, which originates from the presence o...

CVE-2021-33066

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2021. Notes: none...

The vulnerability of the _copy_from_user() function in the lib/usercopy.c module of the Linux kernel allows a hacker to disclose protected information.

The vulnerability of the copyfromuser function in the lib/usercopy.c module of the Linux kernel is related to the characteristics of the branch prediction module’s operation. Exploiting this vulnerability allows an attacker to gain access to protected memory from a program that does not have the...

What Makes Bitcoin NFTs Different from Other NFTs?

By Owais Sultan Non-fungible tokens NFTs have been gaining traction in the cryptocurrency world. They are digital assets that represent unique… This is a post from HackRead.com Read the original post: What Makes Bitcoin NFTs Different from Other NFTs?...

CVE-2023-23169

creationtimestamp| type| source ---|---|--- 2023-05-12 14:26:56+00:00| seen| https://t.me/cibsecurity/64001 2026-07-29 12:00:34+00:00| seen| https://t.me/CVEhub/11966 2026-07-30 00:01:00+00:00| seen| https://t.me/CVEhub/11966 2026-07-31 02:00:04+00:00| published-proof-of-concept|...

Malicious code in gql2ts-from-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a1acee750c796d45e602f027ea638a05590a78bb142aca903bfb2bb169466a6 The OpenSSF Package Analysis project identified 'gql2ts-from-schema' @ 2.1.1 npm as malicious. It is considered malicious because: - The package...

MAL-2023-1190 Malicious code in gql2ts-from-schema (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 7a1acee750c796d45e602f027ea638a05590a78bb142aca903bfb2bb169466a6 The OpenSSF Package Analysis project identified 'gql2ts-from-schema' @ 2.1.1 npm as malicious. It is considered malicious because: - The package...