You Don’t Need to Turn Off Apple’s NameDrop Feature in iOS 17

Yes, your iPhone automatically turns on NameDrop with the latest software update. But you shouldn’t really be worried about it—regardless of what the police are saying...

SUSE-SU-2023:4579-1 Security update for slurm_22_05

This update for slurm2205 fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race condition that could have led to an attacker taking control of an arbitrary file, or removing entire directory contents bsc1216207. Bug fixes: - Add missing dependencies to slurm-config to...

DLA-3666-1 reportbug - security update

Bulletin has no description...

SUSE-SU-2023:4547-1 Security update for fdo-client

This update for fdo-client fixes the following issues: - Removed build key via utils/keysgen.sh. bsc1216293...

DLA-3664-1 symfony - security update

Bulletin has no description...

PT-2023-28690 · Dell · Dell Command Configure

Name of the Vulnerable Software and Affected Versions: Dell Command | Configure versions prior to 4.11.0 Description: The issue is related to improper access control, allowing a local malicious user to potentially modify files inside the installation folder during an application upgrade. This cou...

PT-2023-32081 · WordPress · Funnelforms Free

Name of the Vulnerable Software and Affected Versions: Funnelforms Free plugin for WordPress versions up to, and including, 3.4 Description: The issue is related to Cross-Site Request Forgery due to missing or incorrect nonce validation on the fnsf copy posts function. This allows unauthenticated...

PT-2023-30595 · Timo Reith · Post Status Notifier Lite

Name of the Vulnerable Software and Affected Versions: Timo Reith Post Status Notifier Lite plugin versions = 1.11.0 Description: The issue is related to improper neutralization of input during web page generation, which can lead to Cross-site Scripting. Recommendations: For Timo Reith Post Statu...

PT-2023-32474

Name of the Vulnerable Software and Affected Versions DECE Software Geodi versions prior to 8.0.0.27396 Description The issue is related to improper neutralization of input during web page generation, which allows for stored cross-site scripting XSS. This means that an attacker can inject malicio...

Email Security Flaw Found in the Wild

Googles Threat Analysis Group announced a zero-day against the Zimbra Collaboration email server that has been used against governments around the world. TAG has observed four different groups exploiting the same bug to steal email data, user credentials, and authentication tokens. Most of this...

MGASA-2023-0323 Fix u-boot reading file would overwrite reserved memory error

U-boot would not boot after upgrading to 2023.01 version on RPI 4/CM4 boards. Log would report: - Found EFI removable media binary efi/boot/bootaa64.efi - Reading file would overwrite reserved memory The updated package allows u-boot to load properly bootaa64.efi...

PT-2023-32211 · WordPress · Seraphinite Accelerator

Name of the Vulnerable Software and Affected Versions: Seraphinite Accelerator WordPress plugin versions prior to 2.2.29 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because a parameter is not properly sanitised and escaped before being outputted back i...

PT-2023-8597 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions 6.3-milestone-2 through 14.10.14 XWiki Platform versions 15.5.0 through 15.5.0 XWiki Platform versions 15.6RC0 Description: The Solr-based search suggestion provider in XWiki Platform exposes the content of all documen...

PT-2023-30557 · Unknown · Gopi Ramasamy Vertical Scroll Recent Post

Name of the Vulnerable Software and Affected Versions: Gopi Ramasamy Vertical scroll recent post versions n/a through 14.0 Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on...

PT-2023-30549 · Unknown · Plainview Protect Passwords

Name of the Vulnerable Software and Affected Versions: Plainview Protect Passwords versions 1.4 and earlier Description: The issue is a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on a web...

PT-2023-27653 · Opencrx · Opencrx

Name of the Vulnerable Software and Affected Versions: OpenCRX version 5.2.0 Description: The issue allows for HTML injection via the Activity Milestone Name Field, which could potentially lead to malicious code execution. Recommendations: For OpenCRX version 5.2.0, update to a newer version that...

PT-2023-30480 · Unknown · Woocommerce Product Table Lite

Name of the Vulnerable Software and Affected Versions: WooCommerce Product Table Lite versions 2.6.2 and earlier Description: A Cross-Site Request Forgery CSRF issue affects the software, allowing unauthorized actions to be performed on behalf of a user without their knowledge. Recommendations: F...

PT-2023-27011 · Unknown · Clusterpro X +3

Name of the Vulnerable Software and Affected Versions: CLUSTERPRO X versions 5.1 and earlier EXPRESSCLUSTER X versions 5.1 and earlier CLUSTERPRO X SingleServerSafe versions 5.1 and earlier EXPRESSCLUSTER X SingleServerSafe versions 5.1 and earlier Description: The issue allows an attacker to log...

PT-2023-30869 · Unknown · Concrete Cms

Name of the Vulnerable Software and Affected Versions: Concrete CMS versions prior to 8.5.13 Concrete CMS versions 9.x prior to 9.2.2 Description: The issue allows for stored XSS on the Admin page via an uploaded file name. Recommendations: For versions prior to 8.5.13, update to version 8.5.13 o...

PT-2023-26853 · Dell · Dell Os Recovery Tool

Name of the Vulnerable Software and Affected Versions: Dell OS Recovery Tool versions 2.2.4013, 2.3.7012.0, and 2.3.7515.0 Description: The issue is related to an Improper Access Control Vulnerability. A local authenticated non-administrator user could potentially exploit this, leading to the...