Microsoft Skype for Business Remote Code Execution Vulnerability

Microsoft Skype for Business Server is a secure and unified communications platform from Microsoft that provides instant messaging IM, audio and video calling, online conferencing, online status messages, and sharing capabilities. A remote code execution vulnerability exists in Microsoft Skype fo...

WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR

Description The plugin does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced 1. Create a private folder that contains a file that you intend keep secret. 2. Add the plugin shortcode...

WordPress File Sharing Plugin < 2.0.5 - Subscriber+ Sensitive Data and Files Exposure via IDOR

Description The plugin does not check authorization before displaying files and folders, allowing users to gain access to those filed by manipulating IDs which can easily be brute forced PoC 1. Create a private folder that contains a file that you intend keep secret. 2. Add the plugin shortcode...

PT-2023-30798 · WordPress · Wordpress File Sharing Plugin

Name of the Vulnerable Software and Affected Versions: WordPress File Sharing Plugin versions prior to 2.0.5 Description: The issue allows users to gain access to files and folders by manipulating IDs, which can be easily brute forced, due to a lack of authorization checks. Recommendations: For...

CVE-2023-41238

Unauth. Reflected Cross-Site Scripting XSS vulnerability in UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin = 2.8.3 versions...

CVE-2023-41238

The CVE-2023-41238 entry concerns the WordPress plugin Ultimate Social Media Icons & Social Sharing Icons (often listed as Social Media Share Buttons & Social Sharing Icons) with versions

PT-2023-27861 · WordPress · Ultimatelysocial Social Media Share Buttons & Social Sharing Icons

Name of the Vulnerable Software and Affected Versions: UltimatelySocial Social Media Share Buttons & Social Sharing Icons plugin versions = 2.8.3 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites,...

September 26, 2023—KB5030310 (OS Build 22621.2361) Preview

None None...

September 26, 2023—KB5030300 (OS Build 19045.3516) Preview

None None...

September 26, 2023—KB5030301 (OS Build 22000.2482) Preview

None None...

From Watering Hole to Spyware: EvilBamboo Targets Tibetans, Uyghurs, and Taiwanese

Tibetan, Uyghur, and Taiwanese individuals and organizations are the targets of a persistent campaign orchestrated by a threat actor codenamed EvilBamboo to gather sensitive information. "The attacker has created fake Tibetan websites, along with social media profiles, likely used to deploy...

PT-2023-6035 · Apple · Macos Sonoma +5

Name of the Vulnerable Software and Affected Versions: macOS Ventura versions prior to 13.6 iOS versions prior to 16.7 iPadOS versions prior to 16.7 watchOS versions prior to 10 iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 Description: A logic issue was...

WordPress File Sharing < 2.0.4 - Admin+ Stored XSS

Description The plugin does not sanitize and escape some of its settings, which could allow high-privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

CVE-2023-41387

A SQL injection in the flutterdownloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and...

CVE-2023-41387

A SQL injection in the flutterdownloader component through 1.11.1 for iOS allows remote attackers to steal session tokens and overwrite arbitrary files inside the app's container. The internal database of the framework is exposed to the local user if an app uses UIFileSharingEnabled and...

The vulnerability of the IBM Aspera Faspex application’s configuration, related to insufficient data authenticity verification, allows a perpetrator to compromise the integrity of the protected information.

The vulnerability of the IBM Aspera Faspex file-sharing application relates to insufficient verification of data authenticity. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Internet Connection Sharing (ICS) function of the Windows operating system, which allows for the execution of arbitrary code

The vulnerability of the Internet Connection Sharing ICS function in the Windows operating system is related to insufficient checking of data entered by users. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

CVE-2023-38148

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

Remote code execution

Internet Connection Sharing ICS Remote Code Execution Vulnerability...

CVE-2023-38148

Mode C: CVE-2023-38148 is described in connected sources as a Windows Internet Connection Sharing (ICS) Remote Code Execution vulnerability. It is reported that an unauthenticated attacker could exploit ICS by sending a specially crafted data packet to a vulnerable system to install malware. The ...