OESA-2023-1205 sudo security update

Sudo is a program designed to allow a sysadmin to give limited root privileges to users and log root activity. The basic philosophy is to give as few privileges as possible but still allow people to get their work done. Security Fixes: Sudo before 1.9.13 does not escape control characters in...

CVE-2023-28808

Some Hikvision Hybrid SAN/Cluster Storage products have an access control vulnerability which can be used to obtain the admin permission. The attacker can exploit the vulnerability by sending crafted messages to the affected devices...

CVE-2022-38053

creationtimestamp| type| source ---|---|--- 2023-04-09 13:17:01+00:00| seen| https://t.me/CyberSecurityTechnologies/8083 2023-04-09 15:26:50+00:00| seen| Telegram/wXJFleV8vEaWRjyjght-R7V6rgaHTWmrrJG5mADAecKVQmw 2023-04-13 07:13:01+00:00| seen| https://t.me/RespaldoHackingTeam/657 2023-04-17...

Improper Input Validation

phpmyfaq is vulnerable to Improper Input Validation. The library does not properly neutralize user-controllable inputs before it is placed as frontend outputs on a web page served to other users which allows an attacker to perform privileged operations on behalf of the user or gain access to...

CVE-2023-20666

creationtimestamp| type| source ---|---|--- 2023-04-06 22:27:22+00:00| seen| https://t.me/cibsecurity/61588 2025-02-14 10:06:10+00:00| seen| Telegram/0qBQMh2fKEi5Glj0ZIUaBAWmU33jFNzEacJpD6Pd-D07YS 2025-02-14 10:08:10+00:00| seen| Telegram/Tl0YsoMx86pL3rLbBRyWBIi57upthh3Fp3JvHbTpijTsdtTs...

CVE-2023-29389

Toyota RAV4 2021 vehicles automatically trust messages from other ECUs on a CAN bus, which allows physically proximate attackers to drive a vehicle by accessing the control CAN bus after pulling the bumper away and reaching the headlight connector, and then sending forged "Key is validated"...

Bus Pass Management System 1.0 - Stored Cross-Site Scripting Vulnerability

Exploit Title: Bus Pass Management System 1.0 - Stored Cross-Site Scripting XSS Exploit Author: Matteo Conti - https://deltaspike.io Vendor Homepage: https://phpgurukul.com/ Software Link: https://phpgurukul.com/wp-content/uploads/2021/07/Bus-Pass-Management-System-Using-PHP-MySQL.zip Version: 1....

CVE-2023-1579

creationtimestamp| type| source ---|---|--- 2023-04-04 02:25:09+00:00| seen| https://t.me/cibsecurity/61365 2025-02-14 10:06:10+00:00| seen| Telegram/418qXQ-oeDz8bPSVZYe1hSJHguhWb0hZne-aJ-fMVvmDFNVR 2025-02-14 10:08:09+00:00| seen| Telegram/XunXts8gepyH6wYojBr4mTYDPx4qGJUgKLFqb7BUtX5u7qd...

PT-2023-13276 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a time-of-check time-of-use race condition in the Modem when processing RRC Reconfiguration messages, which can cause a transient denial of service. Recommendations: A...

PT-2023-12817 · Qualcomm · 9205 Lte Modem Firmware +7

Name of the Vulnerable Software and Affected Versions: No specific software or versions mentioned Description: The issue is related to memory corruption in a modem, caused by improper input validation when handling incoming CoAP messages. Recommendations: At the moment, there is no information...

多款Nexx产品安全漏洞

Nexx Smart Plug and others are products of Nexx Corporation.Nexx Smart Plug is a smart plug.Nexx Smart Alarm is a smart alarm.Nexx Smart Home Device is a smart home device. A security vulnerability exists in the Nexx Smart Home Device that stems from not verifying that the holder token in the...

PT-2023-13238 · Qualcomm · 9205 Lte Modem Firmware +18

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The issue is related to memory corruption in a modem. This occurs due to an improper check while calculating the size of a serialized CoAP message, leading to potential exploitation...

Hitachi Vantara Pentaho Business Analytics Server 安全漏洞

Hitachi Vantara Pentaho Business Analytics Server is a modern data blending, integration, and business analytics platform from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Vantara Pentaho Business Analytics Server that originates from displaying a full parameterized SQL...

Cisco Firepower Threat Defense Software SSL Decryption Policy Bleichenbacher Attack (cisco-sa-ftd-tls-bb-rCgtmY2)

A vulnerability in the TLS handler of Cisco Firepower Threat Defense FTD Software could allow an unauthenticated, remote attacker to gain access to sensitive information. This vulnerability is due to improper implementation of countermeasures against a Bleichenbacher attack on a device that uses...

SUSE CVE-2023-26041

Nextcloud Talk is a fully on-premises audio/video and chat communication service. When cron jobs were misconfigured and therefore messages are not expired, the API would still return them while they were then hidden by the frontend code. It is recommended that the Nextcloud Talk is upgraded to...

SUSE SLES12 Security Update : sudo (SUSE-SU-2023:1700-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:1700-1 advisory. - CVE-2023-28486: Fixed missing control characters escaping in log messages bsc1209362. - CVE-2023-28487: Fixed missing control...

SUSE-SU-2023:1700-1 Security update for sudo

This update for sudo fixes the following issues: - CVE-2023-28486: Fixed missing control characters escaping in log messages bsc1209362. - CVE-2023-28487: Fixed missing control characters escaping in sudoreplay output bsc1209361...

CVE-2023-1014

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting. This issue affects Vira-Investing: before 1.0.84.86...

Input validation

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting.This issue affects Vira-Investing: before 1.0.84.86...

CVE-2023-1014 Information disclosure in Vira-Investing

Improper Protection for Outbound Error Messages and Alert Signals vulnerability in Virames Vira-Investing allows Account Footprinting. This issue affects Vira-Investing: before 1.0.84.86...