Exploit for Unrestricted Upload of File with Dangerous Type in Wpallimport Wp_All_Import

WordPress Plugin WP All Import = 3.6.7 - Thực thi mã từ xa R...

CVE-2023-43551

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...

CVE-2023-43551 Improper Authentication in Multi-Mode Call Processor

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...

CVE-2023-43551 Improper Authentication in Multi-Mode Call Processor

Cryptographic issue while performing attach with a LTE network, a rogue base station can skip the authentication phase and immediately send the Security Mode Command...

Debian: Security Advisory (DSA-5584-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 5584-1] bluez security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5584-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso December 21, 2023 https://www.debian.org/security/faq -...

CVE-2023-45866

Bluetooth HID Hosts in BlueZ may permit an unauthenticated Peripheral role HID Device to initiate and establish an encrypted connection, and accept HID keyboard reports, potentially permitting injection of HID messages when no user interaction has occurred in the Central role to authorize such...

CVE-2023-33914

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed...

Information disclosure

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-33914

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed...

CVE-2023-33914

In NIA0 algorithm in Security Mode Command, there is a possible missing verification incorrect input. This could lead to remote information disclosure no additional execution privileges needed...

UNISOC Chipsets Input Validation Error Vulnerability

UNISOC Chipsets is a chipset from China's Unisplendour UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from the NIA0 algorithm in Security Mode Command that may have incorrect inputs that lack validation...

PT-2023-24565 · Unisoc (Shanghai) Technologies Co. +2 · T760/T770/T820/S8000 +5

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns a possible missing verification of incorrect input in the NIA0 algorithm used in the Security Mode Command. This could lead to remote...

CVE-2023-21631

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

Input validation

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

CVE-2023-21631 Improper Input Validation in Modem

Weak Configuration due to improper input validation in Modem while processing LTE security mode command message received from network...

PT-2023-18294 · Modem · Modem

Name of the Vulnerable Software and Affected Versions: Modem affected versions not specified Description: The issue is related to a weak configuration in the Modem due to improper input validation when processing LTE security mode command messages received from the network. This can lead to...

The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform allows a perpetrator to bypass security restrictions, gain unauthorized access to protected information, or execute arbitrary codes.

The vulnerability of the Enhanced Security mode of the Teacher Console and Student Console on the Faronics Insight computer network management platform is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent...

CVE-2023-28352

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...

Design/Logic Flaw

An issue was discovered in Faronics Insight 10.0.19045 on Windows. By abusing the Insight UDP broadcast discovery system, an attacker-controlled artificial Student Console can connect to and attack a Teacher Console even after Enhanced Security Mode has been enabled...