11963 matches found
Denial Of Service (DoS)
vrite is vulnerable to Denial of Service DoS. This vulnerability exists due to the absence of rate limits, which allows an attacker to send spam messages to the victim's email inbox...
Fortinet FortiOS Access Control Error Vulnerability (CNVD-2023-98189)
Fortinet FortiOS is a set of security operating system dedicated to FortiGate network security platform from American Fita Fortinet. The system provides users with firewall, antivirus, IPSec/SSLVPN, Web content filtering and anti-spam and other security features. An Access Control Error...
The vulnerability of the Input component in the Google Chrome browser allows attackers to perform spoofing attacks.
The vulnerability of the Input component in Google Chrome browser is related to improperly implemented security checks for standard elements. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...
WordPress Peter’s Custom Anti-Spam Plugin <= 3.2.2 is vulnerable to Cross Site Scripting (XSS)
Software Peter’s Custom Anti-Spam Type Plugin Vulnerable versions = 3.2.2 Fixed in 3.2.3 OWASP Top 10 A5: Security Misconfiguration Classification Cross Site Scripting XSS CVE CVE-2023-45759 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID b962af4e74c9 Credits SeungYongLe...
Unrestricted delegator contract deployment risks gas abuse; implement mitigations.
Lines of code Vulnerability details Impact deployProxyDelegatorIfNeeded deploys a new delegator contract if one does not exist. This could be abused to spam deploy many delegators and waste gas. Proof of Concept The issue with potentially spam deploying many delegator contracts occurs in the...
How looking at decades of spam led Jaeson Schultz from Y2K to the metaverse and cryptocurrency
At this point in his career, Jaeson Schultz has seen nearly every type of online scam there is to see. From fake bomb threats at schools, to "sextortion" campaigns, cryptocurrency mining, metaverse and more of the 2010s, to the earliest type of spam emails in the 1990s that promised to protect...
Amazon Prime email scammer snatches defeat from the jaws of victory
More often than not, its our solemn duty on this site to keep you informed about the nature and tactics of dangerous, cunnning, and persistent cybercriminals. This is not one of those days. In fact, this is the oppposite of one of those days. This is about a passable spam email sent by a spammer...
Anyone can create multiple RootBridgeAgent
Lines of code Vulnerability details Impact createBridgeAgent is used to create a new Root Bridge Agent. This new RootBridgeAgent is added to the array on the rootPort. This can be used to randomly spam the array with thousand of array addresses whereby the ones deployed by the protocol are harder...
A malicious user can spam ghost deposits to DoS the LayerZeroEndpoint messaging layer
Lines of code Vulnerability details Impact There can be many deposits that will strain the messaging layer, especially in chains that do not cost much to send a transaction. Proof of Concept The entry point of the bridge is callOutSignedAndBridge in BranchBridgeAgent.sol. This function will pack...
OPENSUSE-SU-2023:0278-1 Security update for seamonkey
This update for seamonkey fixes the following issues: update to SeaMonkey 2.53.17.1 Upstream libwebp security fix bug 1852749. CVE-2023-4863: Heap buffer overflow in libwebp bug 1852649. Fix bad string encoded in ansi. l10n fr problem only bug 1847887. SeaMonkey 2.53.17 uses the same backend as...
CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation
Amulet Security Advisory for CometBFT: ASA-2023-002 Component: CometBFT Criticality: Low Affected versions: All Affected users: Validators, Chain Builders + Maintainers Summary A default configuration in CometBFT has been found to be large for common use cases, and may affect block times and...
GHSA-HQ58-P9MV-338C CometBFT's default for `BlockParams.MaxBytes` consensus parameter may increase block times and affect consensus participation
Amulet Security Advisory for CometBFT: ASA-2023-002 Component: CometBFT Criticality: Low Affected versions: All Affected users: Validators, Chain Builders + Maintainers Summary A default configuration in CometBFT has been found to be large for common use cases, and may affect block times and...
The vulnerability of the Prompts component in the Google Chrome browser allows attackers to perform spoofing attacks.
The vulnerability of the Prompts component in the Google Chrome browser is related to the improper use of standard permissions. Exploiting this vulnerability allows a malicious actor to carry out spam attacks using a specially created HTML page...
Are You Willing to Pay the High Cost of Compromised Credentials?
Weak password policies leave organizations vulnerable to attacks. But are the standard password complexity requirements enough to secure them? 83% of compromised passwords would satisfy the password complexity and length requirements of compliance standards. That's because bad actors already have...
MSC-2023-16266
This package has been identified by Mend as containing potential malicious functionality. The severity of the functionality can change depending on where the library is running user's machine or backend server. The following risks were identified: Contacting external host – this package sends...
FreeBSD : gitea -- information disclosure (36a37c92-44b1-11ee-b091-6162c1274384)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 36a37c92-44b1-11ee-b091-6162c1274384 advisory. - The Gitea team reports: Fix API leaking Usermail if not logged in The API should only return the real...
CVE-2023-32497
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Supersoju Block Referer Spam plugin = 1.1.9.4 versions...
CVE-2023-32496
Auth. admin+ Stored Cross-Site Scripting XSS vulnerability in Bill Minozzi Block Bad Bots and Stop Bad Bots Crawlers and Spiders and Anti Spam Protection plugin = 7.31 versions...
