Information Disclosure

labelstudio is vulnerable to Information Disclosure. The vulnerability exists due to a misconfiguration in the Nginx server which allows an attacker to use a single path traversal payload and read all the files in /labelstudio/core...

Rockstar Games: Access to the business emails of Rockstar Support agents through the support platform

The researcher identified a flaw in the Zendesk configuration on the Rockstar Games support platform that allowed users to access the business emails of support agents. The issue was resolved earlier this year when the support site was overhauled...

Red Hat Keycloak 信任管理问题漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Red Hat Keycloak that originates from allowing unintended access to untrusted certificates when used to...

CVE-2023-21027

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-21027

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

Authentication flaw

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-21027

CVE-2023-21027 affects PasspointXmlUtils.java on Android 13. A logic error enables an authentication misconfiguration that can lead to remote information disclosure without additional privileges and without user interaction. NVD CVSSv3.1 base score is 7.5 (HIGH) with network attack vector, no pri...

CVE-2023-21027

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...

CVE-2023-28332 Moodle: algebra filter xss when filter is misconfigured

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

CVE-2023-28332 Moodle: algebra filter xss when filter is misconfigured

If the algebra filter was enabled but not functional eg the necessary binaries were missing from the server, it presented an XSS risk...

Node.js March 17th Infrastructure Incident Post-mortem

Node.js March 17th Infrastructure Incident Post-mortem By Matt Cowley, Claudio Wunder, Mar 23, 2023 The Incident Starting on March 15th and going through to March 17th with much of the issue being mitigated on the 16th, users were receiving intermittent 404 responses when trying to download Node....

WordPress LiteSpeed Cache Plugin <= 5.3 is vulnerable to Cross Site Request Forgery (CSRF)

Software LiteSpeed Cache Type Plugin Vulnerable versions = 5.3 Fixed in 5.3.1 OWASP Top 10 A6: Security Misconfiguration Classification Cross Site Request Forgery CSRF CVE CVE-2022-46800 Patch priority Low CVSS severity Low 5.4 Developer Hai Zheng / Lite Speed Cache PSID 9f42f7c99015 Credits...

The vulnerability of the OverlayFS subsystem in Linux kernel allows a hacker to increase their privileges.

The vulnerability of the OverlayFS subsystem in Linux operating systems is related to incorrect configuration of the file system. Exploiting this vulnerability can allow attackers to increase their privileges...

CVE-2023-28109 Play With Docker vulnerable to Authorization Bypass Through User-Controlled Key

Play With Docker is a browser-based Docker playground. Versions 0.0.2 and prior are vulnerable to domain hijacking. Because CORS configuration was not correct, an attacker could use play-with-docker.com as an example and set the origin header in an http request as evil-play-with-docker.com. The...

CVE-2023-28109

Play With Docker (browser-based Docker playground) is affected by a CORS configuration vulnerability. Versions 0.0.2 and earlier allow domain hijacking: an attacker can craft requests with Origin header set to evil-play-with-docker.com, causing the server to echo header values in responses and by...

PT-2023-21567 · Docker · Play With Docker

Name of the Vulnerable Software and Affected Versions: Play With Docker versions 0.0.2 and prior Description: Play With Docker is a browser-based Docker playground. The issue arises from incorrect CORS configuration, allowing an attacker to bypass the CORS policy by setting the origin header in a...

SonicWall SonicOS Security Misconfiguration (SNWLID-2023-0005)

According to its self-reported version, the remote SonicWall firewall is running a version of SonicOS that is affected by a security misconfiguration vulnerability, due to improper restriction of excessive MFA attempts in the SonicOS SSLVPN interface, which may allow a remote authenticated attack...

If frontend == address(0), 10% of the ticket price is not used as intended

Lines of code Vulnerability details Impact The function buyTickets, has no check that frontend is not equal to zero address. This is possible if there was some misconfiguration from the frontend side or a player uses this function directly and does not set any address. In this case, the user...

Wago Multiple Products Web-based Management Origin Validation Error (CVE-2022-45139)

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of...

The vulnerability of the Windows DCOM Server component allows a hacker to bypass authentication procedures and gain increased privileges.

The vulnerability of the Windows DCOM Server component of the operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass authentication procedures and gain increased privileges...