9974 matches found
CVE-2023-44400 Uptime Kuma has Persistentent User Sessions
Uptime Kuma is a self-hosted monitoring tool. Prior to version 1.23.3, attackers with access to a user's device can gain persistent account access. This is caused by missing verification of Session Tokens after password changes and/or elapsed inactivity periods. Version 1.23.3 has a patch for the...
CVE-2023-44400
Affected product: Uptime Kuma (self-hosted monitoring tool). Vulnerability: Prior to version 1.23.9, changing a user’s password did not revoke existing sessions, allowing previously logged-in users to retain access; this stems from missing verification of session tokens after password changes/ina...
CVE-2023-44400 Uptime Kuma has Persistentent User Sessions
Uptime Kuma is a self-hosted monitoring tool. Prior to version 1.23.3, attackers with access to a user's device can gain persistent account access. This is caused by missing verification of Session Tokens after password changes and/or elapsed inactivity periods. Version 1.23.3 has a patch for the...
CVE-2023-44400 Uptime Kuma has Persistentent User Sessions
Uptime Kuma is a self-hosted monitoring tool. Prior to version 1.23.3, attackers with access to a user's device can gain persistent account access. This is caused by missing verification of Session Tokens after password changes and/or elapsed inactivity periods. Version 1.23.3 has a patch for the...
Debian: Security Advisory (DLA-3609-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Dell Data Protection Central Encryption Issue Vulnerability
Dell Data Protection Central is a suite of data protection solutions from Dell USA. The product provides single sign-on, dashboards, and system monitoring. A vulnerability exists in Dell Data Protection Central version 19.9 due to an encryption issue that stems from insufficient encryption...
CVE-2023-45282
creationtimestamp| type| source ---|---|--- 2023-10-06 22:13:45+00:00| seen| https://t.me/cibsecurity/71757 2024-11-23 11:40:16+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/9362 2024-11-25 21:18:52+00:00| published-proof-of-concept| https://t.me/scorpionisready/942 2024-12-0...
Front-Running Vulnerability: Exploiting Reward Updates for Maximized Payouts
Lines of code Vulnerability details Impact Malicious users claim rewards at a higher rate than what was intended by front-running governance actions meant to reduce rewards. This allows them to claim rewards at a higher rate than what was intended, undermining the protocol's intended economic...
NSA and CISA Red and Blue Teams Share Top Ten Cybersecurity Misconfigurations
A plea for network defenders and software manufacturers to fix common problems. EXECUTIVE SUMMARY The National Security Agency NSA and Cybersecurity and Infrastructure Security Agency CISA are releasing this joint cybersecurity advisory CSA to highlight the most common cybersecurity...
PCI DSS 4.0 FIM Requirements Simplified with Qualys File Integrity Monitoring
File Integrity Monitoring FIM is one of the essential requirements under PCI DSS 4.0. It helps organizations detect and respond to unauthorized changes in critical system files, configuration files, or content files, which is crucial for maintaining the security of cardholder data. Organizations...
CVE-2022-22071
creationtimestamp| type| source ---|---|--- 2023-10-04 10:12:19+00:00| exploited| https://t.me/kasperskyb2b/917 2023-10-04 13:13:09+00:00| seen| https://t.me/truesecator/4924 2023-12-05 18:10:02+00:00| seen| MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123 2024-12-24 20:35:47+00:00| seen|...
Schneider Electric EcoStruxure Power Monitoring Expert Code Issue Vulnerability
The Schneider Electric EcoStruxure Power Monitoring Expert is a device from Schneider Electric France that is used to perform power distribution monitoring in IoT environments. The Schneider Electric EcoStruxure Power Monitoring Expert suffers from a code issue vulnerability that originates from...
PT-2023-5872 · Schneider Electric · Ecostruxure Power Monitoring Expert
Name of the Vulnerable Software and Affected Versions: Schneider Electric EcoStruxure Power Monitoring Expert versions affected versions not specified Description: A deserialization of untrusted data issue exists, allowing an attacker to execute arbitrary code on the targeted system by sending a...
CVE-2023-33270
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the Curl check function is vulnerable to OS command injection blind...
CVE-2023-33271
An issue was discovered in DTS Monitoring 3.57.0. The parameter commonname within the SSL Certificate check function is vulnerable to OS command injection blind...
CVE-2023-33273
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection blind...
CVE-2023-33273
An issue was discovered in DTS Monitoring 3.57.0. The parameter url within the WGET check function is vulnerable to OS command injection blind...
CVE-2023-33269
An issue was discovered in DTS Monitoring 3.57.0. The parameter options within the WGET check function is vulnerable to OS command injection blind...