CVE-2023-1595 novel-plus list sql injection

A vulnerability has been found in novel-plus 3.6.2 and classified as critical. Affected by this vulnerability is an unknown functionality of the file common/log/list. The manipulation of the argument sort leads to sql injection. The attack can be launched remotely. The exploit has been disclosed ...

PT-2023-17104 · Unknown · Novel-Plus

Name of the Vulnerable Software and Affected Versions: novel-plus version 3.6.2 Description: A critical issue has been found in an unknown functionality of the file common/log/list. The manipulation of the sort argument leads to SQL injection. The attack can be launched remotely. Recommendations:...

novel-plus SQL注入漏洞

novel-plus novel-plus is a multi-end PC, WAP reading, functional original literature CMS system. A security vulnerability exists in novel-plus version 3.6.2, which stems from a problem in the file /common/sysFile/list, where the operation of the parameter sort can lead to sql injection...

Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS : amanda regression (USN-5966-2)

The remote Ubuntu 16.04 ESM / 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5966-2 advisory. USN-5966-1 fixed vulnerabilities in amanda. Unfortunately it introduced a regression in GNUTAR-based backups. This update...

CVE-2020-24468

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was in a CNA pool that was not assigned to any issues during 2020. Notes: none...

Amazon Linux AMI : xorg-x11-server (ALAS-2023-1702)

It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1702 advisory. A vulnerability was found in X.Org. This issue occurs due to a dangling pointer in DeepCopyPointerClasses that can be exploited by ProcXkbSetDeviceInfo and ProcXkbGetDeviceInfo to read and write into freed...

Patch CVE-2023-23397 Immediately: What You Need To Know and Do

We break down the basic information of CVE-2023-23397, the zero-day, zero-touch vulnerability that was rated 9.8 on the Common Vulnerability Scoring System CVSS scale...

Amazon Linux 2023 : xorg-x11-server-common, xorg-x11-server-devel, xorg-x11-server-source (ALAS2023-2023-102)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-102 advisory. A flaw was found in the Xorg-x11-server. An out-of-bounds access issue can occur in the SProcRenderCompositeGlyphs function due to improper validation of the request length. CVE-2021-4008 A fla...

Amazon Linux 2023 : dbus, dbus-common, dbus-daemon (ALAS2023-2023-100)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2023-100 advisory. An issue was discovered in D-Bus before 1.12.24, 1.13.x and 1.14.x before 1.14.4, and 1.15.x before 1.15.2. An authenticated attacker can cause dbus-daemon and other programs that use libdbus t...

CVE-2023-1500

creationtimestamp| type| source ---|---|--- 2023-03-19 23:33:38+00:00| seen| https://t.me/cibsecurity/60295 2025-02-26 19:24:04+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5574...

CVE-2023-28115

creationtimestamp| type| source ---|---|--- 2023-03-17 14:49:52+00:00| published-proof-of-concept| https://github.com/KnpLabs/snappy/security/advisories/GHSA-gq6w-q6wh-jggc 2023-03-18 01:31:50+00:00| seen| https://t.me/cibsecurity/60277 2023-03-23 11:05:11+00:00| published-proof-of-concept|...

CVE-2023-27040

creationtimestamp| type| source ---|---|--- 2023-03-16 19:30:53+00:00| seen| https://t.me/cibsecurity/60171 2025-02-26 20:24:53+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5598...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

.NET 7.0 bugfix update

An update is available for dotnet7.0. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list .NET Core is a managed-software framework. It implements a subset of the .N...

CVE-2023-23150

creationtimestamp| type| source ---|---|--- 2023-03-16 06:30:22+00:00| seen| https://t.me/cibsecurity/60102...

MAL-2023-785 Malicious code in sp-yammer-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e8aa9f2fdde63c7f1d8b9e4885d5fb8dcc69ae8544c66b319067aba02d0c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in sp-yammer-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 23e8aa9f2fdde63c7f1d8b9e4885d5fb8dcc69ae8544c66b319067aba02d0c62 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2020-27507

creationtimestamp| type| source ---|---|--- 2023-03-15 23:30:08+00:00| seen| https://t.me/cibsecurity/60090 2025-03-02 11:44:19+00:00| seen| Telegram/fyzFqjuXCkdPmO83bEGfiGYI8venyJkbQsk1XacvxPClMfq...

CVE-2022-46773

IBM Robotic Process Automation 21.0.0 - 21.0.7 and 23.0.0 is vulnerable to client-side validation bypass for credential pools. Invalid credential pools may be created as a result. IBM X-Force ID: 242951...

MAL-2023-907 Malicious code in ts-infra-common (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware cd47b4be284dd70bab7f8e9fe313c2b801c8ee87b2d44363e711d723212d06e9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...