CVE-2023-34111 Command Injection Vulnerability in `Release PR Merged` Workflow in taosdata/grafanaplugin

The Release PR Merged workflow in the github repo taosdata/grafanaplugin is subject to a command injection vulnerability which allows for arbitrary code execution within the github action context due to the insecure usage of $ github.event.pullrequest.title in a bash command within the GitHub...

CVE-2023-20738

In vcu, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07645149; Issue ID: ALPS07645173...

CVE-2023-21669

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

Information disclosure

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669 Buffer Over-read in WLAN HOST

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669 Buffer Over-read in WLAN HOST

Information Disclosure in WLAN HOST while sending DPP action frame to peer with an invalid source address...

CVE-2023-21669

CVE-2023-21669 affects Qualcomm WLAN components. The root cause is a buffer over-read in the WLAN HOST when processing a DPP action frame to a peer with an invalid source address, leading to information disclosure. CVSS base metrics in available records indicate HIGH impact to confidentiality (C)...

MAL-2023-364 Malicious code in fc-radio-button (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 83481051c5331447023a047dfc4f6f747cf968f9cbe6c214bd3baa3aa57c0348 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-367 Malicious code in fc-settings-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 80e7110175cf6f8b68629a84978c209f869d83a2dab01fd1f4848340f9a2340f Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in fc-configuration (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a9b68086fd0051292bc67463fb3958df8135c5e3f16b9ad8298c813e9053357b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-349 Malicious code in fc-forms (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7831dd4a2a99e2a4b2b5bc63541b0fada419350844c0faaf50991c0f5bac2713 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-348 Malicious code in fc-foreign-address (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 19696b7c9cae056f89a8ebf29870be38468039ef7d123603c9c0e42048a08668 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-329 Malicious code in fc-accounts-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b557b50f99f6f32efe3fd6bfa3bd3a29383430ab4a8beab13cf65d210eaf549d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-354 Malicious code in fc-login (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware fe337a39891907521b303615d75e614524a26835d707bd4a1ccf7f5c51a7886b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-648 Malicious code in oci-console-regions (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 67465b70cb9ad26e7d75456337941d5a6c69d46669bcfa25805aefb7f1b5ac5e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-23105 · Ibos · Ibos

Name of the Vulnerable Software and Affected Versions: IBOS version 4.5.5 Description: A critical issue has been found, affecting the function actionDel of the file "?r=dashboard/approval/del". The manipulation of the id argument leads to SQL injection. The exploit has been disclosed to the publi...

WordPress Contact Form and Calls To Action by vcita Plugin <= 2.7.1 is vulnerable to Cross Site Scripting (XSS)

Software Contact Form and Calls To Action by vcita Type Plugin Vulnerable versions = 2.7.1 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-2303 Patch priority Low CVSS severity Low 6.1 Developer Claim ownership PSID 7cc1d9903a62 Credits...

MAL-2023-301 Malicious code in eg-shared (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware ccb389cade20271770197c32e90e23b603da814949522fa67b2230203ecd9b83 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-2302

CVE-2023-2302 affects the WordPress plugin Contact Form and Calls To Action by vcita. It is a Stored XSS via the email parameter in versions ≤ 2.6.4, requiring authenticated attackers with edit_posts capability (e.g., Contributors+) to inject scripts that run on pages visited by users. Connected ...

Contact Form and Calls To Action by vcita < 2.7.1 - Contributor+ Stored Cross-Site Scripting

The plugin does not sanitize and escape the email and uid parameters in the plugin settings, which could allow users with roles as low as contributor to inject arbitrary web scripts into the settings, targeting higher-privileged users such as administrators...