12041 matches found
CVE-2023-4413
A vulnerability was found in rkhunter Rootkit Hunter 1.4.4/1.4.6. It has been classified as problematic. Affected is an unknown function of the file /var/log/rkhunter.log. The manipulation leads to sensitive information in log files. An attack has to be approached locally. The complexity of an...
CVE-2023-4030
creationtimestamp| type| source ---|---|--- 2023-08-17 20:37:36+00:00| seen| https://t.me/cibsecurity/68773...
CVE-2023-32488
Dell PowerScale OneFS, 8.2.x-9.5.0.x, contains an information disclosure vulnerability in NFS. A low privileged attacker could potentially exploit this vulnerability, leading to information disclosure...
RUSTSEC-2023-0103 `postgress` was removed from crates.io for malicious code
This crate was part of a typosquatting malware cluster published by the malicious user amaperf and contained a malware payload in build.rs to exfiltrate host information to the attacker. This advisory is to retrospectively document this attempted attack. The version information and download recor...
Linux kernel 资源管理错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel, which stems from a reference count double-decrement, and could allow a local attacker with user rights to crash the system ...
PT-2025-53214
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains an information leak in the vfio/type1 subsystem. A hole in the vfio iommu type1 info cap migration structure is not initialized, potentially exposing data to...
ezeitung2.info Cross Site Scripting vulnerability OBB-3585155
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Over 120,000 Computers Compromised by Info Stealers Linked to Users of Cybercrime Forums
A "staggering" 120,000 computers infected by stealer malware have credentials associated with cybercrime forums, many of them belonging to malicious actors. The findings come from Hudson Rock, which analyzed data collected from computers compromised between 2018 to 2023. "Hackers around the world...
CVE-2023-39827
Tenda A18 V15.13.07.09 was discovered to contain a stack overflow via the ruleinfo parameter in the formAddMacfilterRule function...
CVE-2023-21292
CVE-2023-21292 affects Android’s ActivityManagerService.openContentUri, where a confused deputy could allow a third-party app to access restricted files and disclose information locally without extra execution privileges and with no user interaction. The vulnerability is described in Android’s CV...
CVE-2023-21276
CVE-2023-21276 affects Google Android: information disclosure via writeToParcel in CursorWindow.cpp caused by uninitialized data. This enables local information disclosure with no extra privileges and no user interaction required. The provided documents state the issue, its root cause, and impact...
guide2.info Cross Site Scripting vulnerability OBB-3579305
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Tenda A18 Buffer Error Vulnerability
Tenda A18 is an AC1200 dual-band Wi-Fi repeater from Tenda, China. A security vulnerability exists in Tenda A18 version V15.13.07.09, which originates from a stack overflow vulnerability in the parameter ruleinfo of the function formAddMacfilterRule...
CVE-2023-22444
The CVE CVE-2023-22444 affects Intel® NUC BIOS firmware across multiple models (e.g., 13 Extreme Compute Element/Kit, 11 Performance Kit/Mini PC, Compute Element, Laptop Kit, Pro Kit/Board/Mini PC). The underlying issue is improper initialization in the BIOS firmware, which may allow a privileged...
GHSA-VMCH-3W2X-VHGQ .NET Denial of Service Vulnerability
Microsoft Security Advisory CVE-2023-38180: .NET Denial of Service Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in ASP.NET Core 2.1, .NET 6.0, and .NET 7.0. This advisory also provides guidance on what developers can do...
CVE-2023-4242
The FULL - Customer plugin for WordPress is vulnerable to Information Disclosure via the /health REST route in versions up to, and including, 2.2.3 due to improper authorization. This allows authenticated attackers with subscriber-level permissions and above to obtain sensitive information about...
PT-2023-35943 · Git +1 · Pcre2
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a heap-buffer-overflow WRITE 4 crash type. The crash state involves functions such as get grouplength and get branchlength. No...
CVE-2023-35381
Windows Fax Service Remote Code Execution Vulnerability...
CVE-2023-36907
Technical details about CVE-2023-36907 are not publicly available in the provided documents; no affected products, root cause, impact, or fixes are described here. Monitor official updates from NVD/Microsoft for remediation.
