CVE-2023-35342: Improper Link Resolution Before File Access

Windows Image Acquisition Elevation of Privilege Vulnerability...

CVE-2023-32050: Improper Link Resolution Before File Access

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-35320: Improper Link Resolution Before File Access

Connected User Experiences and Telemetry Elevation of Privilege Vulnerability...

PT-2023-3860 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows Peer Name Resolution Protocol affected versions not specified Description: The issue is related to insufficient input validation in the implementation of the Peer Name Resolution protocol in the Windows operating system. This can be...

Microsoft Windows Peer Name Resolution Protocol security vulnerabilities

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation. A security vulnerability exists in Microsoft Windows Peer Name Resolution Protocol. An attacker could exploit this vulnerability to cause a denial of service. The following...

CVE-2023-35338: NULL Pointer Dereference

Windows Peer Name Resolution Protocol Denial of Service Vulnerability...

CVE-2023-22835

Foundry Issues under CVE-2023-22835 allows a Denial of Service via submitting malformed data in an Issue, causing loss of frontend functionality for all participants. Affected versions are Foundry Issues prior to 2.510.0 and Foundry Frontend prior to 6.228.0. Remediation per PT/RedHat/NVD sources...

cURL siglongjmp Buffer Overflow DoS

The vulnerability of the alarm and siglongjmp functions in the command-line utility cURL is related to improper synchronization during the resolution of host names. Exploiting this vulnerability can allow a remote attacker to cause service failures...

The first disputer might lose funds although his dispute is valid.

Lines of code Vulnerability details Impact The first disputer might lose funds although his dispute is valid. Proof of Concept Users can dispute the current tree using disputeTree and the governor refunds the dispute funds if the dispute is valid in resolveDispute. function disputeTreestring memo...

CVE-2023-37206: Improper Link Resolution Before File Access

Uploading files which contain symlinks may have allowed an attacker to trick a user into submitting sensitive data to a malicious website. This vulnerability affects Firefox 115...

CVE-2023-34450 CometBFT PeerState JSON serialization deadlock

CometBFT is a Byzantine Fault Tolerant BFT middleware that takes a state transition machine and replicates it on many machines. An internal modification made in versions 0.34.28 and 0.37.1 to the way struct PeerState is serialized to JSON introduced a deadlock when new function MarshallJSON is...

Debian: Security Advisory (DSA-5441-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DNS Resolution through NetScaler Fails with Unknown Host Error

DNS resolution for FQDN fails and following error is received when pinging FQDN from NetScaler: VPX-190 ping www.citrix.com ping: cannot resolve www.citrix.com: Unknown host ERROR:...

[SECURITY] [DLA 3470-1] owslib security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3470-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk June 25, 2023 https://wiki.debian.org/LTS -...

The Power of Browser Fingerprinting: Personalized UX, Fraud Detection, and Secure Logins

The case for browser fingerprinting: personalizing user experience, improving fraud detection, and optimizing login security Have you ever heard of browser fingerprinting? You should! It's an online user identification technique that collects information about a visitor's web browser and its...

Debian DSA-5438-1 : asterisk - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5438 advisory. A flaw was found in Asterisk, an Open Source Private Branch Exchange. A buffer overflow vulnerability affects users that use PJSIP DNS resolver. This vulnerabilit...

PT-2023-23807 · Dell · Dell Vxrail

Name of the Vulnerable Software and Affected Versions: Dell VxRail versions prior to 7.0.450 Description: The issue concerns an improper certificate validation, which could be exploited by a high privileged remote attacker to carry out a man-in-the-middle attack. This attack involves supplying a...

ROS-20230621-24

A vulnerability in the curl program is related to a post-release usage error in SSH fingerprint validation sha256. Exploitation of the vulnerability could allow an attacker acting remotely to use the application to connect to a malicious SSH server, cause a post-release exploit error, and gain...

ROS-20230621-04

A vulnerability in the curl program is related to incorrect certificate validation when matching wildcards in TLS certificates for IDNs. wildcards in TLS certificates for IDNs. Exploitation of the vulnerability could allow an attacker acting remotely to create a specially crafted certificate that...

openSUSE 15: curl / libcurl-devel / libcurl-devel-32bit / libcurl4 / etc (SUSE-SU-2023:2224-2)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2224-2 advisory. This update for curl adds the following feature: Update to version 8.0.1 jscPED-2580 - CVE-2023-28319: use-after-free in SSH sha256 fingerprint check...