7091 matches found
CVE-2023-0286 -X.400 address type confusion in X.509 GeneralName
There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an ASN1STRING but the public structure definition for GENERALNAME incorrectly specified the type of the x400Address field as ASN1TYPE. This field is subsequentl...
USN-6281-1: Velocity Engine vulnerability
Alvaro Munoz discovered that Velocity Engine incorrectly handled certain inputs. If a user or an automated system were tricked into opening a specially crafted input file, a remote attacker could possibly use this issue to execute arbitrary code...
typecho Code Issue Vulnerability
typecho is a PHP blogging platform for typecho individual developers. It is simple and powerful. A security vulnerability exists in typecho version 1.2.1, which stems from a file upload vulnerability that allows an attacker to execute arbitrary code via the upload and options-general parameters...
CVE-2023-36299: Unrestricted Upload of File with Dangerous Type
A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general parameters in index.php...
CVE-2023-36299
A File Upload vulnerability in typecho v.1.2.1 allows a remote attacker to execute arbitrary code via the upload and options-general parameters in index.php...
PT-2023-25519 · Typecho · Typecho
Name of the Vulnerable Software and Affected Versions: typecho version 1.2.1 Description: A File Upload issue allows a remote attacker to execute arbitrary code via the upload and options-general parameters in "index.php". Recommendations: For typecho version 1.2.1, as a temporary workaround,...
General Device Manager 2.5.2.2 Buffer Overflow
Exploit Title: General Device Manager 2.5.2.2 - Buffer Overflow SEH Date: 30.07.2023 Software Link: https://download.xm030.cn/d/MDAwMDA2NTQ= Software Link 2: https://www.maxiguvenlik.com/uploads/importfiles/GeneralDeviceManager.zip Exploit Author: Ahmet Ümit BAYRAM Tested Version: 2.5.2.2 Tested...
General Device Manager 2.5.2.2 - Buffer Overflow (SEH) Exploit
Exploit Title: General Device Manager 2.5.2.2 - Buffer Overflow SEH Software Link: https://download.xm030.cn/d/MDAwMDA2NTQ= Software Link 2: https://www.maxiguvenlik.com/uploads/importfiles/GeneralDeviceManager.zip Exploit Author: Ahmet Ümit BAYRAM Tested Version: 2.5.2.2 Tested on: Windows 10...
General Device Manager 2.5.2.2 - Buffer Overflow (SEH)
Exploit Title: General Device Manager 2.5.2.2 - Buffer Overflow SEH Date: 30.07.2023 Software Link: https://download.xm030.cn/d/MDAwMDA2NTQ= Software Link 2: https://www.maxiguvenlik.com/uploads/importfiles/GeneralDeviceManager.zip Exploit Author: Ahmet Ümit BAYRAM Tested Version: 2.5.2.2 Tested...
A week in security (July 24 - July 30)
Last week on Malwarebytes Labs: Zimbra issues awaited patch for actively exploited vulnerability Patch now! Ivanti Endpoint Manager Mobile Authentication vulnerability used in the wild 60,000 Androids have stalkerware-type app Spyhide installed Ransomware groups claim responsibility for...
PT-2025-38202
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A null pointer dereference issue was identified in the drm/ttm subsystem when swapping. This can lead to a general protection fault. The vulnerability occurs when accessing a null pointe...
The vulnerability of the Pragmatic General Multicast (PGM) protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
openssl: X.400 address type confusion in X.509 GeneralName
A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...
Tampa General Hospital half thwarts ransomware attack, but still loses patient data
The Tampa General Hospital TGH has promised to reach out to individuals whose information has been stolen by a ransomware group. In a cybersecurity notice, TGH said it noticed unusual activity on its computer systems on May 31, 2023. "Fortunately, TGHs monitoring systems and experienced technolog...
Oracle Solaris Critical Patch Update : jul2023_SRU11_4_59_144_2
This Solaris system is missing necessary patches to address critical security updates : - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General Apache Tomcat. Supported versions that are affected are 8.0.34 and prior. Easily exploitable vulnerability...
GE CIMPLICITY 缓冲区错误漏洞
GE CIMPLICITY is a client/server based HMI/SCADA solution from General Electric GE. The solution captures and shares real-time and historical data across all levels of the enterprise, enabling operational visualization of process, equipment, and resource monitoring. A security vulnerability exist...
openssl: X.400 address type confusion in X.509 GeneralName
A type confusion vulnerability was found in OpenSSL when OpenSSL X.400 addresses processing inside an X.509 GeneralName. When CRL checking is enabled for example, the application sets the X509VFLAGCRLCHECK flag, this vulnerability may allow an attacker to pass arbitrary pointers to a memcmp call,...
Driver Disk for Bnxt en 1.10.2_223.0.183.0 - For Citrix Hypervisor 8.2 LTSR
Who should install this driver disk? Customers running the Citrix Hypervisor 8.2 LTSR release who use Bnxt's en driver and wish to use the latest version of the following: Driver Module| Driver Type| Version ---|---|--- bnxten| Ethernet/NIC| 1.10.2223.0.183.0 Issues resolved in this driver disk...
CVE-2023-29452 Remove possibility to add html into Geomap attribution field
Currently, geomap configuration Administration - General - Geographical maps allows using HTML in the field “Attribution text” when selected “Other” Tile provider...
