Information disclosure

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis...

Design/Logic Flaw

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassin...

CVE-2023-38335

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassin...

Omnis Studio 安全漏洞

Omnis Studio is a rapid application development tool from Omnis. A security vulnerability exists in Omnis Studio version 10.22.00 that stems from a locked class in the Omnis library that unlocks and modifies the browser via Omnis Studio...

Oracle Business Process Management Suite (Jul 2023 CPU)

The version of Oracle Business Process Management Suite installed on the remote host is affected by multiple vulnerabilities, as referenced in the July 2023 CPU advisory, including: - Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware component:...

Oracle Linux 9 : .NET / 7.0 (ELSA-2023-4057)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4057 advisory. 7.0.109-1.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.109-1 - Update to .NET SDK 7.0.109 and...

Omnis Studio 安全漏洞

Omnis Studio is a rapid application development tool from Omnis. A security vulnerability exists in Omnis Studio version 10.22.00, which stems from an improper access control issue that allows private Omnis libraries to be opened by the Omnis Studio browser...

CVE-2023-38334

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis...

CVE-2023-38335

Omnis Studio 10.22.00 has incorrect access control. It advertises a feature for making Omnis libraries "always private" - this is supposed to be an irreversible operation. However, due to implementation issues, "always private" Omnis libraries can be opened by the Omnis Studio browser by bypassin...

PT-2023-26368 · Omnis · Omnis Studio

Name of the Vulnerable Software and Affected Versions: Omnis Studio version 10.22.00 Description: The issue is related to incorrect access control in Omnis Studio. It has a feature for locking classes within Omnis libraries, which should make it impossible to delete, view, change, copy, rename,...

CVE-2023-38334

Omnis Studio 10.22.00 is affected by an access-control weakness in its library locking feature. Several sources (including CVE-2023-38334 records from NVD/RedHat/CVE and related feeds) state that locked classes in Omnis libraries can be unlocked due to implementation issues, allowing further anal...

CVE-2023-38335

Affected software: Omnis Studio 10.22.00. Vulnerability: incorrect access control that allows bypass of the intended “always private” library setting, enabling Omnis libraries to be opened by the Omnis Studio browser through bypassing specific checks. Root cause: implementation issues in the irre...

CVE-2023-38334

Omnis Studio 10.22.00 has incorrect access control. It advertises an irreversible feature for locking classes within Omnis libraries: it should be no longer possible to delete, view, change, copy, rename, duplicate, or print a locked class. Due to implementation issues, locked classes in Omnis...

Oracle Linux 8 : .NET / 7.0 (ELSA-2023-4058)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-4058 advisory. 7.0.109-1.0.1 - Set TargetRid based on os release major version, add OL arm64 RuntimeIdentifier Orabug: 34671152 7.0.109-1 - Update to .NET SDK 7.0.109 and...

Vulnerability of the .NET software platform and Microsoft Visual Studio development tools: Errors in synchronization when using shared resources allow attackers to circumvent existing security restrictions.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Vulnerability of the .NET software platform and Microsoft Visual Studio development tools: Errors in synchronization when using shared resources allow attackers to escalate their privileges.

The vulnerability of the .NET software platform and the Microsoft Visual Studio development environment arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to gain increased privileges remotely...

Vulnerabilities fixed in Oracle Communications Applications

Vulnerabilities have been fixed in Oracle Communications Applications products. A malicious party could exploit them to carry out attacks that can result in the following categories of damage: Denial-of-Service DoS Manipulation of data Remote code execution Administrator/Root rights Remote code...

Blackbone - Windows Memory Hacking Library

Windows memory hacking library Features x86 and x64 support Process interaction Manage PEB32/PEB64 Manage process through WOW64 barrier Process Memory Allocate and free virtual memory Change memory protection Read/Write virtual memory Process modules Enumerate all 32/64 bit modules loaded...

WordPress Page Studio Lite Plugin Plugin <= 4.6 is vulnerable to Cross Site Scripting (XSS)

Software Page Studio Lite Plugin Type Plugin Vulnerable versions = 4.6 Fixed in N/A OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID 58e1ed7adebe Credits Rafie Muhammad Patchstack...

VX-API - Collection Of Various Malicious Functionality To Aid In Malware Development

The VX-API is a collection of malicious functionality to aid in malware development. It is recommended you clone and/or download this entire repo then open the Visual Studio solution file to easily explore functionality and concepts. Some functions may be dependent on other functions present with...