PT-2023-22683 · Unknown · Pear Admin Boot

Name of the Vulnerable Software and Affected Versions: Pear-Admin-Boot versions up to 2.0.2 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Title of a private message. This enables attackers to...

CVE-2023-29779

Sengled Dimmer Switch V0.0.9 contains a denial of service DOS vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes. After receiving the malicious command, the device will keep reporting its status and finally drain its battery...

CVE-2023-29566

creationtimestamp| type| source ---|---|--- 2023-04-24 22:19:44+00:00| seen| https://t.me/cibsecurity/62751 2025-02-06 02:41:38+00:00| seen| Telegram/YUJ3MA5RQySjmkETUpM2a2duCu8Du9AsBZArgxAdME3fr1W2 2025-02-06 02:42:28+00:00| seen| Telegram/uoNOhU3puDvltuJYDoum2LFxcYgGbYQV91jFQthOWPlhqHI...

Denial of service

Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes...

PT-2023-21583 · Avalanche · Avalanche

Name of the Vulnerable Software and Affected Versions: Avalanche versions 6.3.x and below Description: An authentication bypass issue exists that could allow an attacker to gain access by exploiting the SetUser method or by exploiting a Race Condition in the authentication message. Recommendation...

PT-2023-22417 · Third Reality · Third Reality Smart Blind

Name of the Vulnerable Software and Affected Versions: Third Reality Smart Blind version 1.00.54 Description: The issue allows a remote attacker to send malicious Zigbee messages to a vulnerable device, causing it to crash. This is a denial-of-service vulnerability. Recommendations: For Third...

CVE-2023-29780

Third Reality Smart Blind 1.00.54 contains a denial-of-service vulnerability, which allows a remote attacker to send malicious Zigbee messages to a vulnerable device and cause crashes...

CVE-2023-25507

creationtimestamp| type| source ---|---|--- 2023-04-22 07:37:25+00:00| seen| https://t.me/cibsecurity/62645...

CVE-2022-29604

creationtimestamp| type| source ---|---|--- 2023-04-20 16:30:44+00:00| seen| https://t.me/cibsecurity/62514...

USN-6034-1 dnsmasq vulnerability

It was discovered that Dnsmasq was sending large DNS messages over UDP, possibly causing transmission failures due to IP fragmentation. This update lowers the default maximum size of DNS messages to improve transmission reliability over UDP...

USN-6034-1: Dnsmasq vulnerability

It was discovered that Dnsmasq was sending large DNS messages over UDP, possibly causing transmission failures due to IP fragmentation. This update lowers the default maximum size of DNS messages to improve transmission reliability over UDP...

Lazarus Group Adds Linux Malware to Arsenal in Operation Dream Job

The notorious North Korea-aligned state-sponsored actor known as the Lazarus Group has been attributed to a new campaign aimed at Linux users. The attacks are part of a persistent and long-running activity tracked under the name Operation Dream Job , ESET said in a new report published today. The...

PT-2023-7613 · Qualcomm · Qualcomm Data Modem

Name of the Vulnerable Software and Affected Versions: Qualcomm Data Modem affected versions not specified Description: The issue is related to a transient denial of service DOS in the data modem while handling Translation Lookaside Buffer TLB control messages from the network. This is due to...

protobuf-java: Message-Type Extensions parsing issue leads to DoS

A flaw was found in Message-Type Extensions in protobuf-java core that can lead to a denial of service. Inputs containing multiple instances of non-repeated embedded messages with repeated or unknown fields can cause objects to convert between mutable and immutable forms, resulting in long garbag...

Wireshark LISP Parser Denial of Service Vulnerability

Wireshark is a set of network packet analysis software from the Wireshark team. The function of the software is to intercept network packets and display the detailed data for analysis. Wireshark suffers from a denial of service vulnerability that stems from not properly handling incoming error...

Oracle Financial Services Applications 安全漏洞

Oracle Financial Services Applications is a suite of financial services software from Oracle USA. The product includes core banking, online banking, and estate management. A security vulnerability exists in the SMS Module component of Oracle Financial Services Applications versions 14.5, 14.6, an...

CVE-2023-30769

Vulnerability discovered is related to the peer-to-peer p2p communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes...

Design/Logic Flaw

Vulnerability discovered is related to the peer-to-peer p2p communications, attackers can craft consensus messages, send it to individual nodes and take them offline. An attacker can crawl the network peers using getaddr message and attack the unpatched nodes...

Thunderbird: Hang when processing certain OpenPGP messages

The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...

Thunderbird: Hang when processing certain OpenPGP messages

The Mozilla Foundation Security Advisory describes this flaw as: Certain malformed OpenPGP messages could trigger incorrect parsing of PKESK/SKESK packets due to a bug in the Ribose RNP library used by Thunderbird up to version 102.9.1, which would cause the Thunderbird user interface to hang. Th...