3200 matches found
Three tips for building your CISO career in today’s evolving security industry
CISOs share how to build effective, collaborative teams and land your next role...
Malicious code in theme-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7162ab25878f8f496bd39b46209cf74bee0f29b34253a0f1cca5d6a48ba830bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-881 Malicious code in theme-next (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7162ab25878f8f496bd39b46209cf74bee0f29b34253a0f1cca5d6a48ba830bb Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
CVE-2023-34103 Stored XSS (Cross Site Scripting) in html content based fields of avo
Avo is an open source ruby on rails admin panel creation framework. In affected versions some avo fields are vulnerable to Cross Site Scripting XSS when rendering html based content. Attackers do need form edit privilege in order to successfully exploit this vulnerability, but the results are...
K000134706: Python IDNA vulnerability CVE-2022-45061
Security Advisory Description An issue was discovered in Python before 3.11.1. An unnecessary quadratic algorithm exists in one path when processing some inputs to the IDNA RFC 3490 decoder, such that a crafted, unreasonably long name being presented to the decoder could lead to a CPU denial of...
webkitgtk: heap-use-after-free in WebCore::RenderLayer::setNextSibling()
A use-after-free vulnerability in WebCore::RenderLayer::setNextSibling in WebKitGTK before 2.36.8 allows attackers to execute code remotely...
CVE-2023-27919
Authentication bypass vulnerability in NEXT ENGINE Integration Plugin for EC-CUBE 2.0 series all versions allows a remote unauthenticated attacker to alter the information stored in the system...
PT-2023-21418 · Ec Cube · Next Engine Integration Plugin
Name of the Vulnerable Software and Affected Versions: NEXT ENGINE Integration Plugin for EC-CUBE 2.0 series all versions Description: The issue allows a remote unauthenticated attacker to alter the information stored in the system due to an authentication bypass vulnerability. Recommendations: F...
Intel NUC Pro Software Suite 安全漏洞
Intel NUC Pro Software Suite is an application from Intel Corporation USA. A security vulnerability exists in Intel NUC Pro Software Suite versions prior to 2.0.0.3, which stems from the presence of improper access control that could allow an authenticated user to potentially enable privilege...
CVE-2023-27919
Authentication bypass vulnerability in NEXT ENGINE Integration Plugin for EC-CUBE 2.0 series all versions allows a remote unauthenticated attacker to alter the information stored in the system...
CVE-2023-27919
CVE-2023-27919 describes an authentication bypass in the NEXT ENGINE Integration Plugin (for EC-CUBE 2.0 series) , affecting all versions. The vulnerability allows a remote unauthenticated attacker to alter information stored in the system. The provided documents do not include a published fix or...
CVE-2023-27919
Authentication bypass vulnerability in NEXT ENGINE Integration Plugin for EC-CUBE 2.0 series all versions allows a remote unauthenticated attacker to alter the information stored in the system...
kernel: clocksource: hyper-v: unexport __init-annotated hv_init_clocksource()
In the Linux kernel, the following vulnerability has been resolved: clocksource: hyper-v: unexport init-annotated hvinitclocksource EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The...
kernel: net: xfrm: unexport __init-annotated xfrm4_protocol_init()
In the Linux kernel, the following vulnerability has been resolved: net: xfrm: unexport init-annotated xfrm4protocolinit EXPORTSYMBOL and init is a bad combination because the .init.text section is freed up after the initialization. Hence, modules cannot use symbols annotated init. The access to ...
kernel: net/mlx5: E-Switch, pair only capable devices
In the Linux kernel, the following vulnerability has been resolved: net/mlx5: E-Switch, pair only capable devices OFFLOADS paring using devcom is possible only on devices that support LAG. Filter based on lag capabilities. This fixes an issue where mlx5getnextphysdev was called without holding th...
CVE-2023-2521
A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input leads to cross site scripting. It is possible to...
CVE-2023-2521
A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input leads to cross site scripting. It is possible to...
Cross site scripting
A vulnerability was found in NEXTU NEXT-7004N 3.0.1. It has been classified as problematic. Affected is an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input leads to cross site scripting. It is possible to...
CVE-2023-2521
CVE-2023-2521 affects NEXTU NEXT-7004N v3.0.1. The vulnerability is a cross-site scripting flaw in the POST Request Handler, specifically in the /boafrm/formFilter function where the url parameter can be manipulated (example payload: ). Exploitation is remote but requires user interaction, with n...
PT-2023-19980 · Nextu · Nextu Next-7004N
Name of the Vulnerable Software and Affected Versions: NEXTU NEXT-7004N version 3.0.1 Description: A problematic issue has been found, affecting an unknown function of the file /boafrm/formFilter of the component POST Request Handler. The manipulation of the argument url with the input leads to...