CVE-2023-36456

authentik is affected prior to versions 2023.4.3 and 2023.5.5 because it does not verify the origin of the X-Forwarded-For and X-Real-IP headers in both Python and Go code. This can allow spoofing of IPs in logs and in downstream flows that rely on IP checks, and may enable bypassing IP-based pol...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Mozilla Network Security Services (NSS) arbitrary code execution vulnerability( CVE-2023-0767)

Summary Potential Mozilla Network Security Services NSS arbitrary code execution vulnerability CVE-2023-0767 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2023-0767 DESCRIPTION:...

CVE-2023-22299

Milesight UR32L in v32.3.0.5 is affected by CVE-2023-22299, an OS command injection in the vtysh_ubus fw_logs_get handler exposed via the /cgi API. The vulnerability allows an attacker-supplied command (provided through the blobmsg tb[1] value) to be assembled into an iptables command and execute...

CVE-2023-24582

Milesight UR32L has two OS command injection flaws in the urvpn_client cmd_name_action path (CVE-2023-24582 and CVE-2023-24583). A JSON-driven command can be delivered over TCP/UDP to reach execute_urvpn_command, which calls cmd_name_action, then constructs a shell command and invokes system() wi...

CVE-2023-25583

Milesight UR32L (v32.3.0.5) has two OS command injection vulnerabilities in the zebra vlan_name function. A specially crafted network request can trigger arbitrary command execution on the device. The issues are documented across multiple sources (NVD, Red Hat) and are tied to the UR32L HTTP/web/...

CVE-2023-25582

CVE-2023-25582 affects Milesight UR32L v32.3.0.5 with two OS command injection flaws in the zebra vlan_name functionality. Public material documents a pre-authentication remote exploit path in UR32L’s HTTP server (via TALOS-2023-1697) leading to stack-based buffer overflow and potential RCE; addi...

EulerOS 2.0 SP11 : shim (EulerOS-SA-2023-2277)

According to the versions of the shim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There is a type confusion vulnerability relating to X.400 address processing inside an X.509 GeneralName. X.400 addresses were parsed as an...

EulerOS 2.0 SP11 : curl (EulerOS-SA-2023-2262)

According to the versions of the curl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A cleartext transmission of sensitive information vulnerability exists in curl v7.88.0 that could cause HSTS functionality fail when multiple URLs...

CVE-2023-28323

A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS Operating System vulnerabilities to escalate privileges on the machine or be used as a...

CVE-2023-32620

CVE-2023-32620 affects WAVLINK WL-WN531AX2 firmware prior to 2023526. The issue is an improper authentication vulnerability that enables a network-adjacent attacker to obtain the wireless network password. The root cause is insufficient authentication checks exposing credentials. Public discussio...

Authorization

A missing authorization check in multiple URL validation endpoints of the Insider Threat Management Server enables an anonymous attacker on an adjacent network to smuggle content via DNS lookups. All versions before 7.14.3 are affected...

CVE-2023-35998

CVE-2023-35998 concerns Proofpoint’s Insider Threat Management Server. The vulnerability is a missing authorization check in multiple SOAP endpoints, enabling an attacker on an adjacent network to read and write unauthorized objects after obtaining a valid agent authentication token. Affected all...

Hitachi Energy Relion 670, 650, SAM600-IO Series (Update A)

SUMMARY Hitachi Energy is aware of the vulnerability CVE-2022-4304 in the OSS component OpenSSL, that affects the Relion 670, 650, SAM600-IO versions that are listed below. An attacker successfully exploiting this vulnerability could send trial messages to the server and record the time taken to...

Core Writing Word and Page Counts

I want to make a note of the numbers of words and pages in my core security writings. The Tao of Network Security Monitoring / 236k words / 833 pages Extrusion Detection / 113k words / 417 pages The Practice of Network Security Monitoring / 97k words / 380 pages The Best of TaoSecurity Blog, Vol ...

SUSE SLES15: libopenssl-1_1-devel / libopenssl-1_1-devel-32bit / libopenssl1_1 / etc (SUSE-SU-2023:2622-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2622-1 advisory. - CVE-2022-4304: Reworked the fix for the Timing-Oracle in RSA decryption. The previous fix for this timing side channel turned out to cause...

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

Cryptojacking, the illicit use of computing resources to mine cryptocurrency, has become increasingly prevalent in recent years, with attackers building a cybercriminal economy around attack tools, infrastructure, and services to generate revenue from targeting a wide range of vulnerable systems,...

IoT devices and Linux-based systems targeted by OpenSSH trojan campaign

Cryptojacking, the illicit use of computing resources to mine cryptocurrency, has become increasingly prevalent in recent years, with attackers building a cybercriminal economy around attack tools, infrastructure, and services to generate revenue from targeting a wide range of vulnerable systems,...

Fortinet FortiOS Buffer Overflow Vulnerability (CNVD-2024-26327)

Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. A buffer error vulnerability exis...

CVE-2023-25187

CVE-2023-25187 affects Nokia Airscale ASIKA Single RAN devices pre-21B. The issue stems from factory-time default SSH keys tied to the operator not being changed during commissioning, allowing potential MITM of the BTS service user accessed during troubleshooting when SSH is enabled. Several sour...

LockBit ransomware advisory from CISA provides interesting insights

The US Cybersecurity and Infrastructure Security Agency CISA, Federal Bureau of Investigation FBI, Multi-State Information Sharing and Analysis Center MS-ISAC, and the cybersecurity authorities of Australia, Canada, United Kingdom, Germany, France, and New Zealand CERT NZ, NCSC-NZ have all...