CVE-2023-36089

Authentication Bypass vulnerability in D-Link DIR-645 firmware version 1.03 allows remote attackers to gain escalated privileges via function phpcgimain in cgibin. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36092

Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2023-36090

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Authentication flaw

UNSUPPORTED WHEN ASSIGNED Authentication Bypass vulnerability in D-Link DIR-859 FW105b03 allows remote attackers to gain escalated privileges via via phpcgimain. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Authentication flaw

UNSUPPORTED WHEN ASSIGNED Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

PT-2023-4061 · D Link · D-Link Dir-895

Name of the Vulnerable Software and Affected Versions: D-Link DIR-895 version FW102b07 Description: The issue is related to a function called phpcgi main in the D-Link DIR-895 router's firmware, which has weaknesses in its authentication procedure. This can be exploited by a remote attacker to ga...

PT-2023-4037 · D Link · D-Link Dir-859

Name of the Vulnerable Software and Affected Versions: D-Link DIR-859 versions FW105b03 Description: The issue is related to an authentication bypass in the D-Link DIR-859 router's firmware, specifically affecting the phpcgi main function. This allows remote attackers to gain escalated privileges...

CVE-2023-36090

CVE-2023-36090 describes an Authentication Bypass in the D-Link DIR-885L (FW102b01) where lack of valid authentication in phpcgi allows remote attackers to escalate privileges. Affected product: D-Link DIR-885L; vulnerability type: authentication bypass via phpcgi; impact: remote, unauthenticated...

CVE-2023-36090

Authentication Bypass vulnerability in D-Link DIR-885L FW102b01 allows remote attackers to gain escalated privileges via phpcgi. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile

CVE-2023-35078 shodan dorks You can use the following sho...

Apache Tomcat SEoL (8.5.x)

According to its version, Apache Tomcat is 8.5.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

CVE-2023-34150 Apache Any23: Possible excessive allocation of resources reading input.

UNSUPPORTED WHEN ASSIGNED Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage...

Security Bulletin: Multiple Vulnerabilities in IBM® Java SDK affect IBM WebSphere Application Server shipped with IBM Business Automation Workflow April 2023 CPU

Summary WebSphere Application Server is shipped as a component of IBM Business Automation Workflow. Information about a security vulnerability affecting IBM WebSphere Application Server Traditional have been published in a security bulletin. Vulnerability Details Refer to the security bulletins...

CVE-2023-35133

An issue in the logic used to check 0.0.0.0 against the cURL blocked hosts lists resulted in an SSRF risk. This flaw affects Moodle versions 4.2, 4.1 to 4.1.3, 4.0 to 4.0.8, 3.11 to 3.11.14, 3.9 to 3.9.21 and earlier unsupported versions...

SUSE-SU-2023:2613-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE-SU-2023:2546-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE-SU-2023:2545-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

SUSE-SU-2023:2533-1 Security update for bluez

This update for bluez fixes the following issues: - CVE-2023-27349: Fixed crash while handling unsupported events bsc1210398...

Published Explorer.exe and other applications close instantly after launch

When a published application such as Explorer is started, it closes instantly. Please note: this can also apply to many other applications that exhibit this behavior and not excluded to just explorer.exe. This is a built-in timer in Terminal Services which dictates if a session is not fully...

CVE-2023-34941

A stored cross-site scripting XSS vulnerability in the urlFilterList function of Asus RT-N10LX Router v2.0.0.39 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the URL Keyword List text field. NOTE: This vulnerability only affects products that are no...