CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

CVE-2023-45396

An Insecure Direct Object Reference IDOR vulnerability leads to events profiles access in Elenos ETG150 FM transmitter running on version 3.12...

CVE-2023-4966

creationtimestamp| type| source ---|---|--- 2023-10-10 18:16:58+00:00| seen| https://t.me/cibsecurity/71957 2023-10-11 04:00:00+00:00| seen| https://www.govcert.gov.hk/en/alertsdetail.php?id=1133 2023-10-11 10:17:06+00:00| seen| https://t.me/itsecnews/3438 2023-10-18 14:01:45+00:00| exploited|...

PT-2023-6540 · Google +5 · Google Chrome +5

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 118.0.5993.117 Microsoft Edge versions prior to 118.0.5993.117 Description: The issue is related to a use after free in the Profiles component, which can be exploited by a remote attacker using a crafted HTML...

CVE-2023-40044

creationtimestamp| type| source ---|---|--- 2023-09-29 08:31:16+00:00| seen| https://t.me/thehackernews/3938 2023-09-29 09:43:11+00:00| seen| https://t.me/KomunitiSiber/861 2023-09-29 09:57:03+00:00| seen| Telegram/coCViSpTdBJIO6f5nGTY2jkmcohpMEICdIU3s8ly80oqRQ 2023-09-29 11:44:51+00:00| seen|...

JetBrains TeamCity < 2023.05.3 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2023.05.3. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration CVE-2023-41248 - In JetBrains TeamCity before 2023.05....

From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

Tibetan, Uyghur, and Taiwanese individuals and organizations are the targets of a persistent campaign orchestrated by a threat actor codenamed EvilBamboo to gather sensitive information. "The attacker has created fake Tibetan websites, along with social media profiles, likely used to deploy...

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package allows a hacker to cause a service failure or exert other effects.

The vulnerability of the profiles/audio/avdtp.c component in the BlueZ software package is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures or other adverse effects...

Locally cached profiles not getting deleted at User logoff from the VDA

Locally cached user profiles does not get deleted at user logoff. User gets a temp profile at next consecutive login...

FSLogix | Blank Desktop icons and start menu icons are being displayed

When launching published desktops using FSLogix profiles, we observe that the desktop icons are displayed with a blank icon. When trying to open start menu within the published desktop session, we observe blank icons for the start menu tiles...

HOW TO | New network printers are not saving after re-logon

• The users are able to connect and add their network printers to their VDI sessions. However, after logoff the printer settings are not being retained within the user profile. • We would like to retain the network printer within the profile so that it is available for all subsequent logins...

How to delete profile at logoff without profile saved on user store

Citrix Profile Mangement is often used with a shared storage, but some environments prevent the using of shared storage, and also want to use the function of delete locally cached profiles at logff in UPM. This article tells how to achieve this goal...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

Cross site scripting

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...

CVE-2023-41248

JetBrains TeamCity prior to 2023.05.3 is vulnerable to a stored XSS flaw in Cloud Profiles configuration (CVE-2023-41248). Affected product/version: TeamCity before 2023.05.3. Root cause: stored XSS during Cloud Profiles setup. Impact: potential user-impact via crafted input; CVSS base metrics in...

JetBrains TeamCity 跨站脚本漏洞

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides features such as continuous unit testing, code quality analysis and build issue analysis reports. A cross-site scripting vulnerability exists in JetBrai...

CVE-2023-41248: Improper Neutralization of Input During Web Page Generation

In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration...