Mozilla Thunderbird < 115.4

The version of Thunderbird installed on the remote Windows host is prior to 115.4. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-47 advisory. - It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user d...

Security Vulnerabilities fixed in Firefox ESR 115.4 — Mozilla

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an insufficient activation-delay. An attacker could have created a malicious link using bidirectional characters to spoof the location in the address bar when visited. Drivers a...

Mobile Application Security

Our progression into the digital age has notably changed the way we function. Everything from financial management, online purchases, virtual education, to entertainment—has been compacted into the easily-navigatable universe of apps on our handheld devices. This amplified reliance on mobile...

CVE-2023-5254 AI ChatBot <= 4.8.9 - Unauthenticated Sensitive Information Exposure via qcld_wb_chatbot_check_user

The ChatBot plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and including, 4.8.9 via the qcldwbchatbotcheckuser function. This can allow unauthenticated attackers to extract sensitive data including confirmation as to whether a user name exists on the site ...

Torchbox Wagtail Log Information Disclosure Vulnerability

Torchbox Wagtail is an open source content management system CMS from Torchbox UK. A security vulnerability exists in Wagtail that originates from a user with a Wagtail Administrator Limited Privilege Editor account that can retrieve any user's display name...

Apache InLong 代码问题漏洞

Apache InLong is the U.S. Apache Apache Foundation's one-stop massive data integration framework. Provides automated, secure and reliable data transfer capabilities. Apache InLong has a deserialization vulnerability that originates from unsafe deserialization processing of serialized data receive...

PT-2023-20094 · Ezoic · Ezoic Ampedsense – Adsense Split Tester

Name of the Vulnerable Software and Affected Versions: Ezoic AmpedSense – AdSense Split Tester plugin versions = 4.68 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowin...

Insufficient Verification of Data Authenticity in Apache InLong

Insufficient Verification of Data Authenticity vulnerability in Apache InLong.This issue affects Apache InLong: from 1.4.0 through 1.8.0, General user can view all user data like Admin account. Users are advised to upgrade to Apache InLong's 1.9.0 or cherry-pick 1 to solve it. 1 ...

CVE-2023-5579

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

CVE-2023-5579

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

Design/Logic Flaw

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

CVE-2023-5579 yhz66 Sandbox User Data information disclosure

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

CVE-2023-5579 yhz66 Sandbox User Data information disclosure

A vulnerability was found in yhz66 Sandbox 6.1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file /im/user/ of the component User Data Handler. The manipulation leads to information disclosure. The exploit has been disclosed to the public and may...

CVE-2023-5579

CVE-2023-5579 affects yhz66 Sandbox 6.1.0, specifically the User Data Handler component (file path /im/user/). The vulnerability arises from manipulation of an unknown functionality in that area, leading to information disclosure. The exploit has been publicly disclosed. Connected sources indicat...

PT-2023-32191 · Unknown · Yhz66 Sandbox

Name of the Vulnerable Software and Affected Versions: yhz66 Sandbox version 6.1.0 Description: A vulnerability was found in the User Data Handler component, specifically affecting some unknown functionality of the file /im/user/. This issue leads to information disclosure. Recommendations: For...

PT-2023-6283 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro affected versions not specified Description: The issue is related to the lack of proper validation of user-supplied data when parsing DICOM files, which could lead to a stack-based buffer overflow. An attacker could...

PT-2023-32173 · Unknown · Frappe Lms

Name of the Vulnerable Software and Affected Versions: frappe/lms versions prior to 5614a6203fb7d438be8e2b1e3030e4528d170ec4 Description: The issue is related to Cross-site Scripting XSS, which is a type of security vulnerability that occurs when an attacker injects malicious scripts into a...

The vulnerability of the NiceVision video surveillance system, which stems from the use of rigidly encoded credentials, allows a intruder to obtain information about cameras, user details, and modify database recordings.

The vulnerability of the NiceVision video surveillance system lies in the use of rigidly encoded credentials. Exploiting this vulnerability allows a malicious actor to remotely obtain information about cameras, user details, and modify data in the database...

Remote Code Execution (RCE)

mediawiki is vulnerable to Remote Code Execution RCE. The vulnerability allows an attacker to inject arbitrary code into a web page, potentially allowing them to steal user data or take control of the user's computer...

Cross-site Scripting (XSS)

mediawiki is vulnerable to Cross-site Scripting XSS. The vulnerability allows an attacker to inject arbitrary code into a web page, potentially allowing them to steal user data or take control of the user's computer...