CVE-2023-38151 Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

...

CVE-2023-38151

CVE-2023-38151 affects Microsoft Host Integration Server 2020 (and associated components such as the OLE DB Provider for DB2 V7). The root cause cited in PT-2023-7053 is insufficient input validation, enabling remote code execution. Impact per sources: remote code execution with network access, r...

CVE-2023-38151 Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

...

CI/CD Risks: Protecting Your Software Development Pipelines

Have you heard about Dependabot? If not, just ask any developer around you, and they'll likely rave about how it has revolutionized the tedious task of checking and updating outdated dependencies in software projects. Dependabot not only takes care of the checks for you, but also provides...

Security Bulletin: IBM Integration Bus is vulnerable to multiple CVEs due to Apache Tomcat.

Summary Due to Apache Tomcat, IBM Integration Bus is vulnerable to multiple CVEs. CVE-2023-45648, CVE-2023-42794, CVE-2023-44487, CVE-2023-42795. Vulnerability Details CVEID: CVE-2023-45648 DESCRIPTION: Apache Tomcat is vulnerable to HTTP request smuggling, caused by improper parsing of HTTP...

Microsoft Host Integration Server 2020 Remote Code Execution Vulnerability

...

Microsoft guidance regarding credentials leaked to GitHub Actions Logs through Azure CLI

Summary The Microsoft Security Response Center MSRC was made aware of a vulnerability where Azure Command-Line Interface CLI could expose sensitive information, including credentials, through GitHub Actions logs. The researcher, from Palo Alto Networks Prisma Cloud, found that Azure CLI commands...

KB5032921 - A possible stack buffer overflow from a remote code execution vulnerability has been exposed in the OLEDB provider for DB2.

None None...

WordPress Integration for Contact Form 7 and Constant Contact Plugin <= 1.1.4 is vulnerable to Open Redirection

Software Integration for Contact Form 7 and Constant Contact Type Plugin Vulnerable versions = 1.1.4 Fixed in 1.1.5 OWASP Top 10 A5: Security Misconfiguration Classification Open Redirection CVE CVE-2023-47779 Patch priority Low CVSS severity Low 4.7 Developer Claim ownership PSID 64bf5916b57c...

Microsoft Host Integration Server Security Vulnerability

Microsoft Host Integration Server is a gateway application from Microsoft USA that provides connectivity between Microsoft Windows networks and IBM mainframes and IBM i systems. Support is provided for SNA, 3270, 5250, CICS, APPC and other IBM protocols. A security vulnerability exists in Microso...

PT-2023-7053

Name of the Vulnerable Software and Affected Versions Microsoft Host Integration Server 2020 Description The issue is related to insufficient input validation in the Microsoft Host Integration Server application. This can be exploited by a remote attacker to execute arbitrary code. Recommendation...

Crawlector - Threat Hunting Framework Designed For Scanning Websites For Malicious Objects

Crawlector the name Crawlector is a combination of Crawl er & Detector is a threat hunting framework designed for scanning websites for malicious objects. Note-1 : The framework was first presented at the No Hat conference in Bergamo, Italy on October 22nd, 2022 Slides, YouTube Recording. Also, i...

API Leaks

Grasping the Fundamentals of API Breaches API, short for Application Programming Interface, consists of a stipulated set of guidelines and procedures enabling heterogeneous software applications to establish communication amongst them. Conceptualize it as an interconnecting channel that unites...

Wordfence Intelligence Weekly WordPress Vulnerability Report (October 30, 2023 to November 5, 2023)

Wordfence just launched its bug bounty program. Over the next 6 months, all awarded bounties receive a 10% bonus. View the announcement to learn more now! Last week, there were 79 vulnerabilities disclosed in 64 WordPress Plugins and no WordPress themes that have been added to the Wordfence...

The vulnerability of the automation software for installing, deploying, monitoring, and managing Dell Command | Integration Suite for System Center lies in the incorrect handling of links before accessing files. This allows a malicious individual to delete any files they desire.

The vulnerability of the software used for automating the installation, deployment, monitoring, and management of Dell Command | Integration Suite for System Center is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow an attacker t...

Information Disclosure

github.com/mongodb/mongodb-atlas-kubernetes is vulnerable to Information Disclosure. The vulnerability arises when DEBUG mode logging is enabled as there is no logic to handle the hiding of sensitive information. This can lead to the potential disclosure of confidential data such as GCP service...

Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

Design/Logic Flaw

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

CVE-2023-0436 Secret logging may occur in debug mode of Atlas Operator

The affected versions of MongoDB Atlas Kubernetes Operator may print sensitive information like GCP service account keys and API integration secrets while DEBUG mode logging is enabled. This issue affects MongoDB Atlas Kubernetes Operator versions: 1.5.0, 1.6.0, 1.6.1, 1.7.0. Please note that thi...

Moderate: Red Hat Security Advisory: xorg-x11-server-Xwayland security, bug fix, and enhancement update

An update for xorg-x11-server-Xwayland is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...