PT-2023-28753 · Dst-Admin · Dst-Admin

Name of the Vulnerable Software and Affected Versions: dst-admin version 1.5.0 Description: The issue is related to a remote command execution RCE vulnerability. It can be exploited via the userId parameter at the "/home/playerOperate" API endpoint. Recommendations: For dst-admin version 1.5.0, a...

CVE-2023-43270: Improper Control of Generation of Code

dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...

CVE-2023-43270

dst-admin v1.5.0 was discovered to contain a remote command execution RCE vulnerability via the userId parameter at /home/playerOperate...

CVE-2023-5042

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

Information disclosure

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713...

CVE-2023-5042

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

CVE-2023-5042

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

CVE-2023-5042

The CVE-2023-5042 entry affects Acronis Cyber Protect Home Office for Windows, prior to build 40713, due to insecure folder permissions that lead to sensitive information disclosure. Root cause is improper/configured folder access, enabling potential unauthorized exposure of protected data. Some ...

CVE-2023-5042: Incorrect Default Permissions

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect Home Office Windows before build 40713, Acronis True Image OEM Windows before build 42575...

PT-2023-5805 · Acronis · Acronis Cyber Protect Home Office

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Home Office Windows versions before build 40713 Description: The issue is related to sensitive information disclosure due to insecure folder permissions. This could allow a remote attacker to gain unauthorized access to...

org.eclipse.jetty:jetty-home (>=9.4.21.v20190926, <=9.4.51.v20230217), org.openl.rules.demo:openl-demo-app (5.26.0) potentially affected by CVE-2023-41900 via org.eclipse.jetty:jetty-openid (>=9.4.21.v20190926, <=9.4.51.v20230217)

org.eclipse.jetty:jetty-openid MAVEN version =9.4.21.v20190926, =9.4.21.v20190926, =9.4.51.v20230217 - org.openl.rules.demo:openl-demo-app 5.26.0 Source cves: CVE-2023-41900 Source advisory: MEND:CVE-2023-41900...

MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs

By Deeba Ahmed If you are working from home, you need to be on the lookout for the new and complex variant of MidgeDropper malware. This is a post from HackRead.com Read the original post: MidgeDropper Variant Targets Work-from-Home Employees on Windows PCs...

org.eclipse.jetty:jetty-home (>=9.4.21.v20190926, <=9.4.51.v20230217), org.openl.rules.demo:openl-demo-app (5.26.0) potentially affected by CVE-2023-41900 via org.eclipse.jetty:jetty-openid (>=9.4.21.v20190926, <=9.4.51.v20230217)

org.eclipse.jetty:jetty-openid MAVEN version =9.4.21.v20190926, =9.4.21.v20190926, =9.4.51.v20230217 - org.openl.rules.demo:openl-demo-app 5.26.0 Source cves: CVE-2023-41900 Source advisory: OSV:GHSA-PWH8-58VV-VW48...

org.eclipse.jetty:jetty-home (>=9.4.21.v20190926, <=9.4.50.v20221201), org.openl.rules.demo:openl-demo-app (5.26.0) potentially affected by CVE-2023-41900 via org.eclipse.jetty:jetty-openid (>=9.4.21.v20190926, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-openid MAVEN version =9.4.21.v20190926, =9.4.21.v20190926, =9.4.50.v20221201 - org.openl.rules.demo:openl-demo-app 5.26.0 Source cves: CVE-2023-41900 Source advisory: GHSA-PWH8-58VV-VW48...

CVE-2023-41011

Command Execution vulnerability in China Mobile Communications China Mobile Intelligent Home Gateway v.HG6543C4 allows a remote attacker to execute arbitrary code via the shortcuttelnet.cg component...

CVE-2023-41010

Insecure Permissions vulnerability in Sichuan Tianyi Kanghe Communication Co., Ltd China Telecom Tianyi Home Gateway v.TEWA-700G allows a local attacker to obtain sensitive information via the default password parameter...

org.eclipse.jetty.documentation:jetty-documentation (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee10.demos:jetty-ee10-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1) +4 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee10:jetty-ee10-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)

org.eclipse.jetty.ee10:jetty-ee10-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: GHSA-3GH6-V5V9-6V9J...

org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee9.demos:jetty-ee9-demo-jetty-webapp (>=12.0.0.alpha0, <=12.0.0.beta1) +3 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee9:jetty-ee9-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)

org.eclipse.jetty.ee9:jetty-ee9-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: GHSA-3GH6-V5V9-6V9J...

org.eclipse.jetty.ee8.demos:jetty-ee8-demo-jetty-webapp (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee8:jetty-ee8-home (>=12.0.0.alpha0, <=12.0.0.beta1) +1 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee8:jetty-ee8-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)

org.eclipse.jetty.ee8:jetty-ee8-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: OSV:GHSA-3GH6-V5V9-6V9J...

org.eclipse.jetty.ee9.demos:jetty-ee9-demo-embedded (>=12.0.0.alpha0, <=12.0.0.beta1), org.eclipse.jetty.ee9.demos:jetty-ee9-demo-jetty-webapp (>=12.0.0.alpha0, <=12.0.0.beta1) +3 more potentially affected by CVE-2023-36479 via org.eclipse.jetty.ee9:jetty-ee9-servlets (>=12.0.0.alpha0, <=12.0.0.beta1)

org.eclipse.jetty.ee9:jetty-ee9-servlets MAVEN version =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.alpha0, =12.0.0.beta1 Source cves: CVE-2023-36479 Source advisory: OSV:GHSA-3GH6-V5V9-6V9J...