CVE-2023-23773

The CVE-2023-23773 entry concerns Motorola MBTS/EBTS Base Radio firmware: the update packages lack cryptographic signature validation, enabling an authenticated attacker to achieve arbitrary code execution, potentially extract secret key material, and leave a persistent implant on the device. Roo...

CVE-2023-23772

The CVE-2023-23772 issue concerns the Motorola MBTS Site Controller, where firmware update packages are not validated cryptographically. The root cause is lack of firmware update authenticity checks, enabling an authenticated attacker to potentially achieve arbitrary code execution, extract secre...

CVE-2023-23772

Motorola MBTS Site Controller fails to check firmware update authenticity. The Motorola MBTS Site Controller lacks cryptographic signature validation for firmware update packages, allowing an authenticated attacker to gain arbitrary code execution, extract secret key material, and/or leave a...

Motorola MBTS Base Radio和Motorola EBTS Base Radio 数据伪造问题漏洞

The Motorola MBTS Base Radio and Motorola EBTS Base Radio are walkie-talkies from Motorola, USA. A security vulnerability exists in the Motorola MBTS Base Radio and Motorola EBTS Base Radio that stems from an inability to check the authenticity of the firmware, allowing an authenticated attacker ...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831-winrar-expoit-simple-Poc Very important I h...

Exploit for Insufficient Verification of Data Authenticity in Rarlab Winrar

CVE-2023-38831 Vulnerable: WinRAR = 6.22 https://www.wi...

CODESYS Development System

1. EXECUTIVE SUMMARY CVSS v3 9.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: CODESYS, GmbH Equipment: CODESYS Development System Vulnerability: Insufficient Verification of Data Authenticity. 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an...

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

Authorization

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

CVE-2023-36541

CVE-2023-36541 affects Zoom Desktop Client for Windows prior to 5.14.5. The issue is described as insufficient verification of data authenticity, enabling an authenticated user to escalate privileges via network access. Affected component: Zoom Desktop Client for Windows (Windows builds before 5....

CVE-2023-36541

Insufficient verification of data authenticity in Zoom Desktop Client for Windows before 5.14.5 may allow an authenticated user to enable an escalation of privilege via network access...

Hive Pro Achieves ISO/IEC 27001: 2022 Certification

Hive Pro has achieved ISO 27001: 2022 Certification, Demonstrating A Continuous Commitment to Excellence in Information Security August 8th, 2023 - HERNDON, VA: Hive Pro, a pioneer in the Threat Exposure Management market, is thrilled to announce that they have successfully attained ISO 27001:202...

The vulnerability of the CODESYS Development System, a programming platform for applications, stems from insufficient verification of data authenticity. This allows attackers to modify the content of notifications received via HTTP from the CODESYS notification server.

The vulnerability of the CODESYS Development System, a programming platform for applications, is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to modify the content of notifications received through HTTP from the CODESYS...

The vulnerability of the DevTools set of tools for web development in Google Chrome allows a hacker to circumvent existing navigation restrictions.

The vulnerability of the DevTools set of tools for web development in Google Chrome is related to insufficient verification of data authenticity. Exploiting this vulnerability could allow an attacker to circumvent existing navigation restrictions remotely...

The vulnerability of the Advantech WebAccess remote monitoring software lies in its insufficient verification of data authenticity, allowing a intruder to execute arbitrary code.

The vulnerability of Advantech WebAccess remote monitoring software is related to insufficient verification of data authenticity. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit, related to insufficient validation of data authenticity, allows attackers to compromise data integrity.

The vulnerability of the Web page rendering modules in WebKitGTK and WPE WebKit is related to insufficient validation of data authenticity. Exploiting this vulnerability allows attackers to compromise data integrity...

BD Alaris System with Guardrails Suite MX

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 8.2 ATTENTION : Low attack complexity Vendor : Becton, Dickinson and Company BD Equipment : Alaris PCU, Guardrails Editor, Systems Manager, Calculation Services, CQI Reporter Vulnerabilities : Insufficient Verification of Data Authenticity, Missing...

ROS-2-907

2.907 Vulnerability in Mozilla Thunderbird email client CVE-2021-29964, CVE-2021-29967 1. Vulnerability Description: CVE-2021-29964 A vulnerability in the Mozilla Thunderbird email client, is related to boundary conditions. Exploitation of the vulnerability could allow an attacker acting remotely...

ROS-2-543

2.543 Multiple vulnerabilities in Squid CVE-2021-28651, CVE-2021-28662, CVE-2021-28652, CVE-2021-31806, CVE-2021-31808 1. Vulnerability Description: The vulnerability allows a remote attacker to execute a denial-of-service DoS attack.Identifier of the Information Security Threats Data Bank of the...