CVE-2023-4028

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2023-4028

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code...

Lenovo Notebook 安全漏洞

Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. The Lenovo Notebook suffers from a security vulnerability that originates from a buffer overflow vulnerability in the SystemUserMasterHddPwdDxe driver. The vulnerability can be exploited by an attacker to elevate privileges and...

CVE-2023-34419: Buffer Copy without Checking Size of Input

A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code...

CVE-2023-4028: Buffer Copy without Checking Size of Input

A buffer overflow has been identified in the SystemUserMasterHddPwdDxe driver in some Lenovo Notebook products which may allow an attacker with local access and elevated privileges to execute arbitrary code...

Lenovo Notebook 安全漏洞

Lenovo Notebook is a laptop computer from Lenovo, a Chinese company. A security vulnerability exists in Lenovo Notebook, which stems from a buffer overflow vulnerability found in the SetupUtility driver...

PT-2023-24865 · Lenovo · Lenovo Notebook

Name of the Vulnerable Software and Affected Versions: Lenovo Notebook products affected versions not specified Description: A buffer overflow has been identified in the SetupUtility driver in some Lenovo Notebook products, which may allow an attacker with local access and elevated privileges to...

CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

Spoofing

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

UBUNTU-CVE-2023-35394

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

CVE-2023-35394 Azure HDInsight Jupyter Notebook Spoofing Vulnerability

...

CVE-2023-35394

CVE-2023-35394 affects Azure HDInsight Jupyter Notebook. The connected sources describe a spoofing vulnerability in Azure HDInsight Jupyter Notebook that could allow an attacker to pretend to be another user and potentially access or impersonate UI/session elements. The exact technical details (a...

Azure HDInsight Jupyter Notebook Spoofing Vulnerability

...

CVE-2023-35394: Improper Neutralization of Input During Web Page Generation

Azure HDInsight Jupyter Notebook Spoofing Vulnerability...

PT-2023-25212

Name of the Vulnerable Software and Affected Versions Azure HDInsight affected versions not specified Description The issue concerns a spoofing vulnerability in Azure HDInsight Jupyter Notebook. No specific details about the technical aspects of the vulnerability, such as API endpoints, vulnerabl...

Cross-Site Scripting (XSS)

gitlab is vulnerable to a cross-site scripting XSS vulnerability. This vulnerability occurs due to improper neutralization of input during web page generation. An attacker can exploit this vulnerability by creating a malicious Jupyter notebook that contains a crafted tag. When a victim views the...

Cross-site Scripting (XSS)

gitlab is vulnerable to Cross-site Scripting XSS. An attacker can inject and execute malicious javascript through the blob viewer of notebooks...

Python-Based PyLoose Fileless Attack Targets Cloud Workloads for Cryptocurrency Mining

A new fileless attack dubbed PyLoose has been observed striking cloud workloads with the goal of delivering a cryptocurrency miner, new findings from Wiz reveal. "The attack consists of Python code that loads an XMRig Miner directly into memory using memfd, a known Linux fileless technique,"...