SAMSUNG Galaxy Store Security Breach

SAMSUNG Galaxy Store is an application store by Samsung South Korea. A security vulnerability exists in SAMSUNG Galaxy Store version 4.5.56.6, which stems from an incorrect incoming intent filtering issue that allows a local attacker to access the Privileged Content Provider with Galaxy Store...

OPPO Store app security breach

The OPPO Store app is a mobile store application from OPPO Guangdong Mobile Communications OPPO, China. A security vulnerability exists in OPPO Store app version 5.11.2023, which stems from a remote code execution RCE vulnerability in the webview component...

DigaSell Digital Store PHP Script 1.0.0 SQL Injection

==================================================================================================================================== | Title : DigaSell - Digital store PHP Script V1.0.0 Blind Sql Injection Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser :...

Microsoft Windows HEVC Video Extension from Device Manufacturer RCE (August 2023)

The Windows 'HEVC from Device Manufacturer' app installed on the remote host is affected by a remote code execution vulnerability. An attacker who successfully exploits this vulnerability could execute arbitrary code. Exploitation of the vulnerability requires that a program process a specially...

PYSEC-2023-139

Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent does not verify SMTP servers' certificates. This makes Sydent's emails vulnerable to interception via a man-in-the-middle MITM attack. Attackers with...

Code injection

Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent does not verify SMTP servers' certificates. This makes Sydent's emails vulnerable to interception via a man-in-the-middle MITM attack. Attackers with...

PYSEC-2023-139

Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent does not verify SMTP servers' certificates. This makes Sydent's emails vulnerable to interception via a man-in-the-middle MITM attack. Attackers with...

CVE-2023-38686

Removed by vendor...

CVE-2023-38686 Sydent does not verify email server certificates

Sydent is an identity server for the Matrix communications protocol. Prior to version 2.5.6, if configured to send emails using TLS, Sydent does not verify SMTP servers' certificates. This makes Sydent's emails vulnerable to interception via a man-in-the-middle MITM attack. Attackers with...

com.aerospike:aerospike-cache (>=0.9.1, <=1.2), com.aerospike:aerospike-play-cache_2.11 (>=1.0, <=1.2) +2 more potentially affected by CVE-2023-36480 via com.aerospike:aerospike-client (3.1.3)

com.aerospike:aerospike-client MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on com.aerospike:aerospike-client and may be impacted: - com.aerospike:aerospike-cache =0.9.1, =1.0, =1.0, =0.9.1, =1.2 Source cves: CVE-2023-36480 Source...

PYSEC-2023-135

Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store. e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems...

PYSEC-2023-135

Certifi 2023.07.22 removes root certificates from "e-Tugra" from the root store. These are in the process of being removed from Mozilla's trust store. e-Tugra's root certificates are being removed pursuant to an investigation prompted by reporting of security issues in their systems...

CLSA-2023-1691070280 Update of ca-certificates

Update to CKBI 2.62 from NSS 3.91 - Certificate "BJCA Global Root CA1" - Certificate "BJCA Global Root CA2"...

SUSE CVE-2023-34320

Cortex-A77 cores r0p0 and r1p0 are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either a load to device or non-cacheable memory, and either a store exclusive or register read of the Physical Address Register PAREL1 in close...

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

arm: Guests can trigger a deadlock on Cortex-A77

ISSUE DESCRIPTION Cortex-A77 cores r0p0 and r1p0 are affected by erratum 1508412 where software, under certain circumstances, could deadlock a core due to the execution of either a load to device or non-cacheable memory, and either a store exclusive or register read of the Physical Address Regist...

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template was discovered to contain a Server-Side Template Injection SSTI vulnerability via the keyword parameter...

Delay in adding a store in Citrix Workspace 2203 and higher

Citrix Workspace App delays in adding the Store and enumerating resources when done manually or using a policy. This can also be seen with SSON being used with CWA...

CVE-2023-36210

MotoCMS Version 3.4.3 Store Category Template is affected by a Server-Side Template Injection (SSTI) via the keyword parameter. The NVD entry for CVE-2023-36210 reports a high-severity vulnerability with CVSS v3.1 base score 9.8 (Attack Vector: Network, Privileges Required: None, User Interaction...