869 matches found
CVE-2023-37952
creationtimestamp| type| source ---|---|--- 2023-07-12 20:25:51+00:00| seen| https://t.me/cibsecurity/66578...
Mozilla Releases Security Update for Firefox and Firefox ESR
Mozilla has released a security update to address a vulnerability in Firefox and Firefox ESR. An attacker could exploit this vulnerability to take control of an affected system. CISA encourages users and administrators to review Mozilla Security Advisory MFSA 2023-26link is external and apply the...
CLSA-2023-1688678245 Fix CVE(s): CVE-2023-2603
SECURITY UPDATE: Integer overflow in libcapstrdup - debian/patches/CVE-2023-2603.patch: enhance libcap's internal strdup code to limit the processing of long strings - CVE-2023-2603...
CVE-2023-30320
creationtimestamp| type| source ---|---|--- 2023-07-06 20:20:27+00:00| seen| https://t.me/cibsecurity/66138...
SAMSUNG Mobile device 缓冲区错误漏洞
SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile device SMR Jul-2023 Release 1 version, which stems from an incorrect input validation vulnerability ...
Mobileiron Sentry 安全漏洞
Mobileiron Sentry is a Smart Gateway product from Mobileiron, Inc. A security vulnerability exists in Sentry versions 23.6.0 through 23.6.2 and earlier, which stems from the Sentry API returning an incorrect HTTP header if the request header ends in system.base-hostname...
Android Automotive OS Update Bulletin—July 2023Stay organized with collectionsSave and categorize content based on your preferences.
The Android Automotive OS AAOS Update Bulletin contains details of security vulnerabilities affecting the Android Automotive OS platform. The full AAOS update comprises the security patch level of 2023-07-05 or later from the July 2023 Android Security Bulletin in addition to all issues in this...
USN-6136-1 frr vulnerabilities
It was discovered that FRR incorrectly handled parsing certain BGP messages. A remote attacker could possibly use this issue to cause FRR to crash, resulting in a denial of service. This issue only affected Ubuntu 23.04. CVE-2023-31489 It was discovered that FRR incorrectly handled parsing certai...
CVE-2023-2416
creationtimestamp| type| source ---|---|--- 2023-06-03 12:26:46+00:00| seen| https://t.me/cibsecurity/64959...
Active Mirai Botnet Variant Exploiting Zyxel Devices for DDoS Attacks
The U.S. Cybersecurity and Infrastructure Security Agency CISA has added a recently patched critical security flaw in Zyxel gear to its Known Exploited Vulnerabilities KEV catalog, citing evidence of active exploitation. Tracked as CVE-2023-28771 CVSS score: 9.8, the issue relates to a command...
CVE-2022-24631
creationtimestamp| type| source ---|---|--- 2023-05-30 00:36:22+00:00| seen| https://t.me/cibsecurity/64770...
Pimcore 安全漏洞
Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce frameworks and product information management applications. A security vulnerability exists in Pimcore...
PT-2023-4017 · Miniorange · Miniorange Oauth Single Sign On – Sso
Name of the Vulnerable Software and Affected Versions: miniOrange OAuth Single Sign On – SSO OAuth Client plugin versions through 6.23.3 Description: The issue is related to an Improper Authentication vulnerability in the miniOrange OAuth Single Sign On – SSO OAuth Client plugin, which allows...
Barracuda ESG TAR Filename Command Injection
This module exploits CVE-2023-2868, a command injection vulnerability in Barracuda Email Security Gateway ESG appliances. The vulnerability exists in how the ESG processes TAR file attachments - filenames containing shell metacharacters backticks are passed directly to shell commands during...
CVE-2022-45079
creationtimestamp| type| source ---|---|--- 2023-05-22 14:25:25+00:00| seen| https://t.me/cibsecurity/64515...
Ideasoft E-commerce Platform 安全漏洞
Ideasoft E-commerce Platform is an open source e-commerce platform from Ideasoft. A security vulnerability exists in Ideasoft E-commerce Platform versions prior to 23.05, which stems from a vulnerability in Rental Module that allows an attacker to bypass authorization via a controlled user key...
CVE-2023-2800
creationtimestamp| type| source ---|---|--- 2023-05-18 20:33:04+00:00| seen| https://t.me/cibsecurity/64413...
CVE-2023-0812
creationtimestamp| type| source ---|---|--- 2023-05-15 16:46:08+00:00| seen| https://t.me/cibsecurity/64136 2025-01-24 21:05:08+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/3018...