5008 matches found
CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend
A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...
CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend
A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...
CVE-2023-6944 Rhdh: catalog-import function leaks credentials to frontend
A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...
carolinafintechhub.org Cross Site Scripting vulnerability OBB-3827692
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
HP Plantronics Hub Installed (Windows)
Binary data hpplantronicshubwininstalled.nbin...
Plantronics Hub < 3.25.1 Privilege Escalation
The version of Plantronics Hub installed on the remote Windows host is prior to 3.25.1. It is, therefore, affected by a privilege escalation vulnerability in its updater system. Due to a race condition, a local attacker can set any permissions on arbitrary files on an affected device. This can be...
The vulnerability of the update loader for the Plantronics Hub application, which allows a hacker to elevate their privileges.
The vulnerability of the application update downloader for controlling audio device settings in Plantronics Hub is related to synchronization errors when using a shared resource “Race Situation”. Exploiting this vulnerability can allow attackers to increase their privileges...
Expanded Coverage and AWS Compliance Pack Updates in InsightCloudSec Coming Out of AWS Re:Invent 2023
It seems like it was just yesterday that we were in Las Vegas for AWS Re:Invent, but it’s already been almost two weeks since the conference wrapped up. As is always the case, AWS unveiled a host of new services throughout the week, including advancements around serverless, artificial intelligenc...
Plantronics Hub – Local Privilege Escalation
A privilege escalation exists in the updater for Plantronics Hub 3.25.1 and below. Upgrade to the latest version of Plantronics Hub 3.25.2...
PT-2023-7996 · Plantronics · Plantronics Hub
Name of the Vulnerable Software and Affected Versions: Plantronics Hub affected versions not specified Description: The issue is related to a loader update vulnerability in the Plantronics Hub application for managing audio device settings. It is associated with synchronization errors when using ...
Endpoint Management - Devices do not receive Secure Hub push notifications.
Devices not receiving console commands, including Secure Hub push notifications and forced policy refreshes. Selective and full wipes are successful...
CVE-2023-6944
A flaw was found in the Red Hat Developer Hub RHDH. The catalog-import function leaks GitLab access tokens on the frontend when the base64 encoded GitLab token includes a newline at the end of the string. The sanitized error can display on the frontend, including the raw access token. Upon gainin...
The vulnerability of the USB 3.0 HUB driver in Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the USB 3.0 HUB driver for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
SUSE: Security Advisory (SUSE-SU-2023:4869-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Hub: insecure galaxy-importer tarfile extraction
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
CVE-2023-35629
Microsoft USBHUB 3.0 Device Driver Remote Code Execution Vulnerability...
“Amazon got hacked” messages are a false alarm
Amazon customers have been seeing a message on social media that has caused some alarm. Most of the posts look like one of these depending on the social media platform: “PSA!! Amazon got hacked. For USA based people, check your Amazon account. Hackers added HUB lockers as your default delivery...
Buffer overflow
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...
CVE-2023-48697 Azure RTOS USBX Remote Code Execution Vulnerability
Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, that is fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to memory buffer and pointer vulnerabilities in Azure RTOS USBX. The affected components include functions/processes in...