CVE-2023-21245

In showNextSecurityScreenOrFinish of KeyguardSecurityContainerController.java, there is a possible way to access the lock screen during device setup due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction ...

c-ares: Insufficient randomness in generation of DNS query IDs

A vulnerability was found in c-ares. This issue occurs when /dev/urandom or RtlGenRandom are unavailable, c-ares will use rand to generate random numbers used for DNS query ids. This is not a CSPRNG, and it is also not seeded by srand, so it will generate predictable output...

CVE-2023-36693

creationtimestamp| type| source ---|---|--- 2023-07-11 14:29:44+00:00| seen| https://t.me/cibsecurity/66353...

BlueMark Innovations DroneScout ds230 安全漏洞

BlueMark Innovations DroneScout ds230 is a Remote ID receiver from BlueMark Innovations that supports various protocols and bands. A security vulnerability exists in the BlueMark Innovations DroneScout ds230 Remote ID receiver that stems from being affected by a loss of information vulnerability...

WordPress Booking Package Plugin <= 1.5.98 is vulnerable to Privilege Escalation

Software Booking Package Type Plugin Vulnerable versions = 1.5.98 Fixed in 1.5.99 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-37389 Patch priority High CVSS severity High 8.8 Developer Claim ownership PSID 0ff1d9e379c0 Credits Rafie...

WordPress JetFormBuilder Plugin <= 3.0.8 is vulnerable to Privilege Escalation

Software JetFormBuilder Type Plugin Vulnerable versions = 3.0.8 Fixed in 3.0.9 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2023-37866 Patch priority Medium CVSS severity Medium 7.2 Developer Crocoblock PSID bb75400351be Credits Rafie...

CVE-2023-32652

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...

Cross site scripting

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...

CVE-2023-32652

PiiGAB M-Bus is affected by CVE-2023-32652 due to not validating identification strings before processing, which can enable cross-site scripting (XSS). The vulnerability affects the M-Bus SoftwarePack 900S family and is documented across multiple feeds (NVD, CVE List, PRION, CNNVD, CISA ICS). The...

CVE-2023-32652 PiiGAB M-Bus Cross-site Scripting

PiiGAB M-Bus does not validate identification strings before processing, which could make it vulnerable to cross-site scripting attacks...

CVE-2023-34192

creationtimestamp| type| source ---|---|--- 2023-07-06 20:20:39+00:00| seen| https://t.me/cibsecurity/66147 2023-07-17 15:17:53+00:00| exploited| https://t.me/ctinow/124273 2023-08-20 14:30:22+00:00| published-proof-of-concept| https://t.me/MrVGunz/843 2025-02-25 16:23:14+00:00| seen|...

PiiGAB M-Bus 跨站脚本漏洞

PiiGAB M-Bus is a communication protocol used between meters and centralized data acquisition systems or prepaid units from PiiGAB. A cross-site scripting vulnerability exists in PiiGAB M-Bus version 900S, which stems from the fact that it will not validate identification strings and may be...

Fedora: Security Advisory for suricata (FEDORA-2023-5230b1a68a)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory for suricata (FEDORA-2023-7e952959f8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 37 Update: suricata-6.0.13-1.fc37

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

[SECURITY] Fedora 38 Update: suricata-6.0.13-1.fc38

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

The Power of Browser Fingerprinting: Personalized UX, Fraud Detection, and Secure Logins

The case for browser fingerprinting: personalizing user experience, improving fraud detection, and optimizing login security Have you ever heard of browser fingerprinting? You should! It's an online user identification technique that collects information about a visitor's web browser and its...

Design/Logic Flaw

Vulnerability of lax app identity verification in the pre-authorization function.Successful exploitation of this vulnerability will cause malicious apps to become pre-authorized...

CVE-2023-34602

JeecgBoot up to v 3.5.1 was discovered to contain a SQL injection vulnerability via the component queryTableDictItemsByCode at org.jeecg.modules.api.controller.SystemApiController...

CVE-2023-33921

A vulnerability has been identified in CP-8031 MASTER MODULE All versions CPCI85 V05, CP-8050 MASTER MODULE All versions CPCI85 V05. The affected devices contain an exposed UART console login interface. An attacker with direct physical access could try to bruteforce or crack the root password to...