CVE-2023-39203

CVE-2023-39203 affects Zoom Desktop Client for Windows and Zoom VDI Client within Zoom Team Chat, where uncontrolled resource consumption could allow an unauthenticated user to disclose information via network access. Public records confirm this as a resource-management vulnerability tied to Zoom...

PT-2023-6932 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to insufficient exception handling, which may allow a remote attacker to cause a denial of service. It involves an improper conditions check in Zoom Team Chat for Zoom...

PT-2023-6934 · Zoom · Zoom Desktop Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions affected versions not specified Zoom VDI Client versions affected versions not specified Description: The issue is related to uncontrolled resource consumption in Zoom Team Chat, which may allow an...

CVE-2023-39203: Memory Allocation with Excessive Size Value

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access...

CVE-2023-39205: Improper Check for Unusual or Exceptional Conditions

Improper conditions check in Zoom Team Chat for Zoom clients may allow an authenticated user to conduct a denial of service via network access...

Zoom VDI Meeting Client < 5.16.0 Vulnerability (ZSB-23047)

The version of Zoom VDI Meeting Client installed on the remote host is prior to 5.16.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23047 advisory. - Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an...

WordPress Team Members Showcase Plugin <= 1.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Team Members Showcase Type Plugin Vulnerable versions = 1.3.4 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-32957 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 8f4be40a02eb Credits Emili Castells...

CVE-2023-47185

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

CVE-2023-47185

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

Cross site scripting

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

CVE-2023-47185 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

CVE-2023-47185

CVE-2023-47185: Unauth. stored XSS in the WordPress wpDiscuz plugin (gVectors Team Comments) affects versions

CVE-2023-47185 WordPress wpDiscuz Plugin <= 7.6.11 is vulnerable to Cross Site Scripting (XSS)

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

CVE-2023-47185: Improper Neutralization of Input During Web Page Generation

Unauth. Stored Cross-Site Scripting XSS vulnerability in gVectors Team Comments — wpDiscuz plugin = 7.6.11 versions...

supra-team-eastside.de Improper Access Control vulnerability OBB-3772757

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Leading, effective, and powerful tools for identifying site visitors

By Owais Sultan Knowing who visits your website gives you valuable data that your sales team can use this valuable marketing… This is a post from HackRead.com Read the original post: Leading, effective, and powerful tools for identifying site visitors...

Medium: kernel

Issue Overview: An issue was discovered in drivers/mtd/ubi/cdev.c in the Linux kernel 6.2. There is a divide-by-zero error in dodivsz,mtd-erasesize, used indirectly by ctrlcdevioctl, when mtd-erasesize is 0. CVE-2023-31085 A flaw in the kernel Xen event handler can cause a deadlock with Xen conso...

team-schirra.de Improper Access Control vulnerability OBB-3767853

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

hu60wap6 Cross-Site Scripting Vulnerability

hu60wap6 is a community system by the Tiger Greenwood team hu60t team. A cross-site scripting vulnerability exists in hu60wap6, which stems from a markdown function in the file src/class/ubbparser.php that can lead to cross-site scripting...

Google Expands Its Bug Bounty Program to Tackle Artificial Intelligence Threats

Google has announced that it's expanding its Vulnerability Rewards Program VRP to compensate researchers for finding attack scenarios tailored to generative artificial intelligence AI systems in an effort to bolster AI safety and security. "Generative AI raises new and different concerns than...