PT-2023-24865 · Lenovo · Lenovo Notebook

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook products affected versions not specified Description: A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products, which may allow an attacker with local access and elevated privileges to...

CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

Spoofing

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

UBUNTU-CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

CVE-2023-35394 Azure HDInsight Jupyter Notebook Spoofing Vulnerability

...

CVE-2023-35394

CVE-2023-35394 affects Azure HDInsight Jupyter Notebook. The connected sources describe a spoofing vulnerability in Azure HDInsight Jupyter Notebook that could allow an attacker to pretend to be another user and potentially access or impersonate UI/session elements. The exact technical details (a...

Azure HDInsight Jupyter Notebook Spoofing Vulnerability

...

PT-2023-25212

Name of the Vulnerable Software and Affected Versions Azure HDInsight affected versions not specified Description The issue concerns a spoofing vulnerability in Azure HDInsight Jupyter Notebook. No specific details about the technical aspects of the vulnerability, such as API endpoints, vulnerabl...

Cross-Site Scripting (XSS)

gitlab is vulnerable to a cross-site scripting XSS vulnerability. This vulnerability occurs due to improper neutralization of input during web page generation. An attacker can exploit this vulnerability by creating a malicious Jupyter notebook that contains a crafted tag. When a victim views the...

Cross-site Scripting (XSS)

gitlab is vulnerable to Cross-site Scripting XSS. An attacker can inject and execute malicious javascript through the blob viewer of notebooks...

Python-Based PyLoose Fileless Attack Targets Cloud Workloads for Cryptocurrency Mining

A new fileless attack dubbed PyLoose has been observed striking cloud workloads with the goal of delivering a cryptocurrency miner, new findings from Wiz reveal. "The attack consists of Python code that loads an XMRig Miner directly into memory using memfd, a known Linux fileless technique,"...

CVE-2023-24217

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

CVE-2023-24217

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

Arbitrary file deletion

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...

AgileBio Electronic Lab Notebook 安全漏洞

AgileBio Electronic Lab Notebook is an editor from AgileBio Electronic. A security vulnerability exists in AgileBio Electronic Lab Notebook version v4.234 that stems from the presence of a local file inclusion vulnerability...

CVE-2023-24217

CVE-2023-24217 affects AgileBio Electronic Lab Notebook (Lab Collector) v4.234. Multiple connected sources (Exploit-DB, Red Hat, NVD, PRION, CNNVD) describe a local file inclusion vulnerability that enables an authenticated attacker to execute OS commands (RCE) on the underlying system. Exploit c...

Agilebio Lab Collector 4.234 Remote Code Execution

Exploit Title: Agilebio Lab Collector Electronic Lab Notebook Remote Code Execution Date: 2023-02-28 Exploit Author: Anthony Cole Vendor Homepage: https://labcollector.com/labcollector-lims/add-ons/eln-electronic-lab-notebook/ Version: v4.234 Contact: http://twitter.com/acole76 Website:...

CVE-2023-24217

AgileBio Electronic Lab Notebook v4.234 was discovered to contain a local file inclusion vulnerability...