CVE-2023-41107

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

Cross site scripting

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

PT-2023-27791

Name of the Vulnerable Software and Affected Versions TEF portal version 2023-07-17 Description The issue is related to a persistent cross-site scripting XSS attack. This type of attack involves injecting malicious scripts into a website, which are then executed by the user's browser, potentially...

CVE-2023-41107: Improper Neutralization of Input During Web Page Generation

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

CVE-2023-41107

TEF portal 2023-07-17 is vulnerable to a persistent cross site scripting XSSattack...

CVE-2023-39370

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

Cross site scripting

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

CVE-2023-39370

CVE-2023-39370 affects StarTrinity Softswitch, specifically version 2023-02-16, with a Persistent XSS vulnerability (CWE-79) in the web UI. Root cause is improper handling of user-supplied input leading to script injection. Documented impact includes confidentiality and integrity concerns (per CV...

CVE-2023-39370 StarTrinity Softswitch version 2023-02-16 - Persistent XSS (CWE-79)

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

PT-2023-26899 · Startrinity · Startrinity Softswitch

Name of the Vulnerable Software and Affected Versions: StarTrinity Softswitch version 2023-02-16 Description: The issue is related to a Persistent XSS CWE-79 in StarTrinity Softswitch. Recommendations: For StarTrinity Softswitch version 2023-02-16, at the moment, there is no information about a...

CVE-2023-39370: Improper Neutralization of Input During Web Page Generation

StarTrinity Softswitch version 2023-02-16 - Persistent XSS CWE-79...

Malicious code in emon-testt (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bc3e1ddd0c9bd0c6e361f9383435fa90d24ddfb9642622862818d1aecfe88d29 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in mmolecule-logger (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6a6a1f18648beba2a8938064ff1661d516c95d8940377de4bcd2f938360b9588 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Earth Estries Targets Government, Tech for Cyberespionage

We break down a new cyberespionage campaign deployed by a cybercriminal group we named Earth Estries. Analyzing the tactics, techniques, and procedures TTPs employed, we observed overlaps with the advanced persistent threat APT group FamousSparrow as Earth Estries targets governments and...

CVE-2023-23773

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...

CVE-2023-23773

Motorola EBTS/MBTS Base Radio fails to check firmware authenticity. The Motorola MBTS Base Radio lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a persistent impla...

CVE-2023-23772

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a...

Input validation

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a...