info-ren.org Cross Site Scripting vulnerability OBB-3827297

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-52286

Tencent tdsqlpcloud through 1.8.5 allows unauthenticated remote attackers to discover database credentials via an index.php/api/install/getdbinfo request, a related issue to CVE-2023-42387...

CVE-2023-51428

Technical details about CVE-2023-51428 (affected products, vulnerable components, root cause, impact, fixes) are not publicly provided in the connected documents. Monitor for updates from vendors and security advisories.

CVE-2023-23439

CVE-2023-23439 relates to an information disclosure vulnerability affecting some Honor devices. Connected sources identify at least the Honor LGE-AN00 (Honor Magic 4) as impacted, with exploitation potentially leading to leakage of confidential data. The available documents do not provide detaile...

PT-2023-18620 · Unknown · Anders Thorborg

Name of the Vulnerable Software and Affected Versions: Anders Thorborg versions 1.4.12 and earlier Description: The issue is related to a Missing Authorization vulnerability in Anders Thorborg. This vulnerability allows unauthorized access. Recommendations: For versions 1.4.12 and earlier, update...

Novel-Plus Cross-Site Scripting Vulnerability

Novel-Plus is an online social reading and writing platform from Novel-Plus, Inc. A cross-site scripting vulnerability exists in Novel-Plus 4.2.0 and earlier versions, which stems from the parameter nickName in the file /user/updateUserInfo that causes cross-site scripting...

PT-2023-18945 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an information leak, where successful exploitation could cause the leak of information. There is no information provided about the estimated number of...

PT-2023-18950 · Huawei · Honor

Name of the Vulnerable Software and Affected Versions: Honor products affected versions not specified Description: The issue is related to an out of bounds read vulnerability. Successful exploitation of this vulnerability could cause an information leak. Recommendations: At the moment, there is n...

Tenda M3 fromSetLocalVlanInfo function stack buffer overflow vulnerability

Tenda M3 is a wireless controller AC from Tenda for centralized management of multiple wireless access points in scenarios such as hotel chains, low-star hotels and small and medium-sized businesses. The Tenda M3 suffers from a stack buffer overflow vulnerability, which stems from the failure of...

CVE-2023-51093

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function fromSetLocalVlanInfo...

CVE-2023-51101

Tenda W9 V1.0.0.74456CN was discovered to contain a stack overflow via the function formSetUplinkInfo...

CVE-2023-51098

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formSetDiagnoseInfo...

CVE-2023-51100

Tenda W9 V1.0.0.74456CN was discovered to contain a command injection vulnerability via the function formGetDiagnoseInfo...

CVE-2023-51093

Tenda M3 V1.0.0.124856 was discovered to contain a stack overflow via the function fromSetLocalVlanInfo...

PT-2023-31764 · Tenda · Tenda W9

Name of the Vulnerable Software and Affected Versions: Tenda W9 version 1.0.0.74456 CN Description: A command injection issue was discovered via the formGetDiagnoseInfo function. Recommendations: For Tenda W9 version 1.0.0.74456 CN, consider disabling the formGetDiagnoseInfo function until a patc...

PT-2023-8326 · Tenda · Tenda M3

Name of the Vulnerable Software and Affected Versions: Tenda M3 version 1.0.0.124856 Description: The issue is related to a stack overflow via the fromSetLocalVlanInfo function, which can allow a remote attacker to execute arbitrary code by exploiting a buffer overflow in memory. Recommendations:...

CVE-2023-7094

CVE-2023-7094 affects Netentsec NS-ASG Application Security Gateway 6.3. The vulnerability is an information-disclosure in an unknown functionality of the file /protocol/nsasg6.0.tgz, exploitable remotely. Public exploit details exist; multiple sources corroborate the issue and the affected compo...

CVE-2023-7094 Netentsec NS-ASG Application Security Gateway nsasg6.0.tgz information disclosure

A vulnerability classified as problematic was found in Netentsec NS-ASG Application Security Gateway 6.3. Affected by this vulnerability is an unknown functionality of the file /protocol/nsasg6.0.tgz. The manipulation leads to information disclosure. The attack can be launched remotely. The explo...

PT-2023-31416 · Beyondtrust · Beyondtrust Privilege Management For Windows

Name of the Vulnerable Software and Affected Versions: BeyondTrust Privilege Management for Windows versions prior to 2023-07-14 Description: The Challenge Response feature allows local administrators to bypass it by decrypting the shared key or locating the decrypted shared key in process memory...

info-tabac.ca Cross Site Scripting vulnerability OBB-3820755

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...