Ticket Support Script 跨站脚本漏洞

Ticket Support Script is an affordable online help desk system. A security vulnerability exists in PHPJabbers Ticket Support Script version v3.2, which is caused by a cross-site scripting vulnerability in the "message" parameter of the index.php file...

Ticket Support Script 安全漏洞

Ticket Support Script is an affordable online help desk system. A security vulnerability exists in Ticket Support Script version v3.2, which originates from a user enumeration vulnerability during password reset...

PT-2023-27631 · Phpjabbers · Phpjabbers Ticket Support Script

Name of the Vulnerable Software and Affected Versions: PHPJabbers Ticket Support Script version 3.2 Description: The issue occurs during password recovery, where a difference in messages could allow an attacker to determine if the user is valid or not, enabling a brute force attack with valid...

CVE-2023-39834

PbootCMS below v3.2.0 was discovered to contain a command injection vulnerability via createfunction...

CVE-2023-32510

creationtimestamp| type| source ---|---|--- 2023-08-24 16:14:57+00:00| seen| https://t.me/cibsecurity/69118...

CVE-2023-4326

creationtimestamp| type| source ---|---|--- 2023-08-15 22:31:05+00:00| seen| https://t.me/cibsecurity/68585 2023-10-16 14:42:04+00:00| exploited| https://t.me/informationsecuritychannel/50842...

CVE-2023-39805

creationtimestamp| type| source ---|---|--- 2023-08-11 00:16:11+00:00| seen| https://t.me/cibsecurity/68257...

PT-2023-15027 · Stormshield · Stormshield Ssl Vpn Client

Name of the Vulnerable Software and Affected Versions: Stormshield SSL VPN Client versions prior to 3.2.0 Description: A logged-in user, able to only launch the VPNSSL Client, can use the OpenVPN instance to execute malicious code as administrator on the local machine. Recommendations: For versio...

com.aerospike:aerospike-cache (>=0.9.1 <=1.2), com.aerospike:aerospike-kafka-connector (>=0.0.3 <=0.0.6) +64 more potentially affected by CVE-2023-36480 via com.aerospike:aerospike-client (>=3.0.34 <=4.4.9)

com.aerospike:aerospike-client MAVEN version =3.0.34, =0.9.1, =0.0.3, =1.0, =1.0, =4.2.0, =4.2.0, =4.4.9, =0.9.1, =0.0.1, =1.0.1.RELEASE, =2.5.0 - com.aerospike:spring-session-aerospike =1.0.0.RELEASE and more Source cves: CVE-2023-36480 Source advisory: OSV:GHSA-JJ95-55CR-9597...

CVE-2023-3640 Kernel: x86/mm: a per-cpu entry area leak was identified through the init_cea_offsets function when prefetchnta and prefetcht2 instructions being used for the per-cpu entry area mapping to the user space

A possible unauthorized memory access flaw was found in the Linux kernel's cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. Based on the previous CVE-2023-0597, the 'Randomize per-cpu entry area' feature was implement...

Flask-AppBuilder 安全漏洞

Flask-AppBuilder is a simple and fast application development framework. A security vulnerability exists in Flask-AppBuilder versions prior to 4.3.2, which can be exploited by an attacker to trigger a database error by adding special characters to the Add, Edit user form...

DEBIAN-CVE-2023-32324

OpenPrinting CUPS is an open source printing system. In versions 2.4.2 and prior, a heap buffer overflow vulnerability would allow a remote attacker to launch a denial of service DoS attack. A buffer overflow vulnerability in the function formatlogline could allow remote attackers to cause a DoS ...

CVE-2023-2304

The Favorites plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'userfavorites' shortcode in versions up to, and including, 2.3.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers with...

CVE-2022-46361

An attacker having physical access to WDM can plug USB device to gain access and execute unwanted commands. A malicious user could enter a system command along with a backup configuration, which could result in the execution of unwanted commands. This issue affects OneWireless all versions up to...

PT-2023-22390 · Unknown · Alarm Clock For Heavy Sleepers

Name of the Vulnerable Software and Affected Versions: Alarm Clock for Heavy Sleepers version 5.3.2 Description: An issue in the Alarm Clock for Heavy Sleepers app allows unauthorized apps to cause escalation of privilege attacks by manipulating a component. Recommendations: For version 5.3.2, at...

Alarm Clock 安全漏洞

Alarm Clock is an app from the Smart Alarm Clock Team team. It is used to set the hours and minutes of an online alarm clock. A security vulnerability exists in Alarm Clock for Heavy Sleepers version v.5.3.2, which originates from allowing unauthorized applications to cause a denial of service vi...

CVE-2023-2839

creationtimestamp| type| source ---|---|--- 2023-05-22 22:24:52+00:00| seen| https://t.me/cibsecurity/64562...

CVE-2023-31618

creationtimestamp| type| source ---|---|--- 2023-05-15 18:29:58+00:00| seen| https://t.me/cibsecurity/64158...

Rebuild 跨站请求伪造漏洞

Rebuild is a highly customizable enterprise management system. A cross-site request forgery vulnerability exists in Rebuild version 3.2. An attacker could exploit this vulnerability to perform a cross-site request forgery attack...

CVE-2023-29681

Cleartext Transmission in cookie:ecospw: in Tenda N301 v6.0, firmware v12.03.01.06pt allows an authenticated attacker on the LAN or WLAN to intercept communications with the router and obtain the password...