TensorFlow Denial of Service vulnerability

Impact A malicious invalid input crashes a tensorflow model Check Failed and can be used to trigger a denial of service attack. To minimize the bug, we built a simple single-layer TensorFlow model containing a Convolution3DTranspose layer, which works well with expected inputs and can be deployed...

CVE-2023-26802

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...

CVE-2023-26800

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

Command injection

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

CVE-2023-26800

CVE-2023-26800 affects Ruijie Networks RG-EW1200 Wireless Routers (EW_3.0(1)B11P204). The vulnerability is a command injection via the params.path parameter in the upgradeConfirm function. Public sources describe an authenticated/remote-executable impact with network attack vector, no user intera...

CVE-2023-26802

DCBI-Netlog-LAB v1.0 (DCN) contains a command-injection flaw in /network_config/nsg_masq.cgi that allows unauthenticated attackers to bypass auth and execute arbitrary OS commands via a crafted request. Affected product: DCBI-Netlog-LAB v1.0; impact per sources is high (unathenticated, arbitrary ...

CVE-2023-26802

An issue in the component /networkconfig/nsgmasq.cgi of DCN Digital China Networks DCBI-Netlog-LAB v1.0 allows attackers to bypass authentication and execute arbitrary commands via a crafted request...

Ruijie Networks RG-EG Series Routers 命令注入漏洞

Ruijie Networks RG-EG Series Routers is a gateway product from Ruijie Networks China. A security vulnerability exists in Ruijie Networks RG-EW1200 Wireless Routers version EW3.01B11P204, which was discovered to contain a command injection vulnerability via the params.path parameter of the...

Digital China Networks DCBI-Netlog-LAB 路径遍历漏洞

Digital China Networks DCBI-Netlog-LAB DCN DCBI-Netlog-LAB is an Internet Behavior Logging System from Digital China Networks DCN. A security vulnerability exists in Digital China Networks DCBI-Netlog-LAB v1.0. An attacker could exploit the vulnerability to bypass authentication and execute...

CVE-2023-26800

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

PT-2023-20801 · Ruijie Networks · Rg-Ew1200

Name of the Vulnerable Software and Affected Versions: Ruijie Networks RG-EW1200 Wireless Routers version EW 3.01B11P204 Description: A command injection issue was discovered, which can be exploited via the params.path parameter in the upgradeConfirm function. Recommendations: For version EW...

CVE-2023-26800

Ruijie Networks RG-EW1200 Wireless Routers EW3.01B11P204 was discovered to contain a command injetion vulnerability via the params.path parameter in the upgradeConfirm function...

ChatGPT leaks bits of users' chat history

New gadgets and software come with new bugs, especially if they're rushed. We can see this very clearly in the race between tech giants to push large language models LLMs like ChatGPT and its competitors out the door. In the most recently revealed LLM bug, ChatGPT allowed some users to see the...

The vulnerability of the application software interface of the software platform for managing security in industrial networks, MXSecurity, allows a perpetrator to execute arbitrary commands.

The vulnerability of the application software interface of the MXSecurity software platform for managing security in industrial networks is related to the lack of measures taken to clean data at the management level. Exploiting this vulnerability allows a remote attacker to execute arbitrary...

PT-2023-2249 · Mirantis +7 · Mirantis Container Runtime +8

Name of the Vulnerable Software and Affected Versions: Moby versions prior to 23.0.3 Moby versions prior to 20.10.24 Mirantis Container Runtime versions prior to 20.10.16 Description: The issue is related to the use of an unsecured alternative channel in the Swarm Mode of the Moby daemon componen...

CVE-2023-0870

A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow an attacker to gain access to confidential information and compromise integrity. The solution is to upgrade to Meridian 2023.1.1 or Horizon 31.0.6 or newer...

CVE-2023-0870 Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)

A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow an attacker to gain access to confidential information and compromise integrity. The solution is to upgrade to Meridian 2023.1.1 or Horizon 31.0.6 or newer...

CVE-2023-0870 Form Can Be Manipulated with Cross-Site Request Forgery (CSRF)

A form can be manipulated with cross-site request forgery in multiple versions of OpenNMS Meridian and Horizon. This can potentially allow an attacker to gain access to confidential information and compromise integrity. The solution is to upgrade to Meridian 2023.1.1 or Horizon 31.0.6 or newer...

Aruba Networks ClearPass Policy Manager 安全漏洞

Aruba Networks ClearPass Policy Manager is an Aruba Networks application that provides a secure access management system for wireless networks. A security vulnerability exists in Aruba Networks ClearPass Policy Manager that could allow an attacker with read-only privileges to perform an action th...

Aruba Networks ClearPass OnGuard Linux 安全漏洞

Aruba Networks ClearPass OnGuard Linux is a solution module from Aruba Networks, Inc. A security vulnerability exists in Aruba Networks ClearPass OnGuard Linux that originated from a vulnerability that could allow a malicious user on a Linux instance to elevate their user privileges to a higher...