CVE-2023-4763

Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4763

CVE-2023-4763 is a Use-After-Free in Chromium/Google Chrome’s networking code that could allow a remote attacker to cause heap corruption via a crafted HTML page. The initial entry lists Chrome versions prior to 116.0.5845.179 as affected. Connected documents confirm the same issue across Chromiu...

Aruba Networks Airwave Cross-Site Request Forgery Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site request forgery attacks...

Aruba Networks Airwave Cross-Site Scripting Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 8.0.7. An attacker could exploit this vulnerability to perform cross-site scripting attacks...

Google Chrome < 116.0.5845.179 Multiple Vulnerabilities

The version of Google Chrome installed on the remote Windows host is prior to 116.0.5845.179. It is, therefore, affected by multiple vulnerabilities as referenced in the 202309stable-channel-update-for-desktop advisory. - Use after free in Networks in Google Chrome prior to 116.0.5845.179 allowed...

Aruba Networks Airwave Operating System Command Injection Vulnerability

Aruba Networks Airwave is a software from Aruba Networks that visualizes, tracks, and manages wired wireless networks. A security vulnerability exists in Aruba Networks Airwave versions prior to 7.7.14.2, 8.x through 8.0.7. An attacker could exploit the vulnerability to remotely execute operating...

PT-2023-4798 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 116.0.5845.179 Description: The issue is related to a use after free in the Networks component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. The severity o...

CVE-2023-39991

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Blindside Networks BigBlueButton plugin = 3.0.0-beta.4 versions...

CVE-2023-39991

CVE-2023-39991 : Affects WordPress plugin Blindside Networks BigBlueButton, version

The vulnerability of the MXSecurity software platform for managing security in industrial networks lies in its failure to protect the SQL query structure. This allows attackers to execute arbitrary commands and gain unauthorized access to protected information.

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from the lack of protective measures for SQL query structures. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands and gain unauthorized access to protected...

PT-2023-27197 · Blindside Networks · Bigbluebutton

Name of the Vulnerable Software and Affected Versions: Blindside Networks BigBlueButton plugin versions = 3.0.0-beta.4 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowi...

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from deficiencies in authentication procedures, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the MXSecurity software platform for managing security in industrial networks is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability in the software platform’s web service for managing security in industrial networks, MXSecurity, allows a perpetrator to increase their privileges.

The vulnerability of the software platform’s web service for managing security in industrial networks, MXSecurity, is related to insufficient entropy when assigning possible random values. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the MXSecurity software platform for managing security in industrial networks lies in the use of strictly encrypted credentials, which allows attackers to execute a type of “man-in-the-middle” attack.

The vulnerability of the MXSecurity software platform for managing security in industrial networks stems from the use of a strictly encrypted cryptographic key on the host. Exploiting this vulnerability allows an attacker operating remotely to execute a “man-in-the-middle” type attack...

The vulnerability of the nsm-web interface of the software platform for managing security in industrial networks from MXSecurity allows a perpetrator to register or add any device.

The vulnerability of the nsm-web interface of the MXSecurity software platform for managing security in industrial networks is related to insufficient control over the modification of dynamically defined object properties. Exploiting this vulnerability could allow a malicious actor to register or...

PoC Exploit Released for Critical VMware Aria's SSH Auth Bypass Vulnerability

Proof-of-concept PoC exploit code has been made available for a recently disclosed and patched critical flaw impacting VMware Aria Operations for Networks formerly vRealize Network Insight. The flaw, tracked as CVE-2023-34039, is rated 9.8 out of a maximum of 10 for severity and has been describe...

Exploit for Use of a Broken or Risky Cryptographic Algorithm in Vmware Aria_Operations_For_Networks

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations f...

Exploit for Use of a Broken or Risky Cryptographic Algorithm in Vmware Aria_Operations_For_Networks

CVE-2023-34039 POC for CVE-2023-34039 VMWare Aria Operations f...

CVE-2023-4481

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...

CVE-2023-4481

An Improper Input Validation vulnerability in the Routing Protocol Daemon rpd of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, network-based attacker to cause a Denial of Service DoS. When certain specific crafted BGP UPDATE messages are received over an established BG...