Oracle Database Server Security Vulnerability

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing, and other functions. A security vulnerability in the Oracle Notification Server component of Oracle Databas...

Rockwell Automation FactoryTalk Linx Input Validation Error Vulnerability

Rockwell Automation FactoryTalk Linx is a set of industrial communication solutions from Rockwell Rockwell Automation. It is used to communicate between small applications and large automation systems. Rockwell Automation FactoryTalk Linx has an input validation error vulnerability that can be...

12 Best AI-powered Customer Communication Platforms for Contact Centers

By Owais Sultan AI-powered Customer Communication Platforms will revolutionize customer interactions, streamlining support, and providing personalized, efficient service, ultimately enhancing customer… This is a post from HackRead.com Read the original post: 12 Best AI-powered Customer...

CVE-2023-5422

The functions to fetch e-mail via POP3 or IMAP as well as sending e-mail via SMTP use OpenSSL for static SSL or TLS based communication. As the SSLgetverifyresult function is not used the certificated is trusted always and it can not be ensured that the certificate satisfies all necessary securit...

CVE-2023-5422

CVE-2023-5422 affects OTRS and related editions. The issue arises from using OpenSSL for email transport (POP3/IMAP via SSL/TLS and SMTP) without validating certificates because SSL_get_verify_result() is not used, allowing an attacker to impersonate a trusted host with invalid/expired certificat...

Exploit for Improper Authentication in Ruijienetworks Rg-Ew1200G_Firmware

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...

Exploit for Improper Authentication in Ruijienetworks Rg-Ew1200G_Firmware

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...

Exploit for Improper Access Control in Ruijie Rg-Ew1200G_Firmware

Ruijie-RG-EW1200G CVE-2023-4169CVE-2023-3306CVE-2023-4415 1...

Hardcoded credentials

IBM Security Verify Governance 10.0 contains hard-coded credentials, such as a password or cryptographic key, which it uses for its own inbound authentication, outbound communication to external components, or encryption of internal data. IBM X-Force ID: 256016...

IBM Security Verify Governance 信任管理问题漏洞

IBM Security Verify Governance is an intelligent identity access platform from International Business Machines IBM, Inc. provides organizations with a platform to analyze, define and control user access and access risk. IBM Security verify Governance suffers from a hard-coded vulnerability that...

Malicious code in xsolla-paystation-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 805042517f32c5bf86be354525e626c93152ff256ee91fc9cdf74042868bae95 The OpenSSF Package Analysis project identified 'xsolla-paystation-widget' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

MAL-2023-8379 Malicious code in xsolla-paystation-widget (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 805042517f32c5bf86be354525e626c93152ff256ee91fc9cdf74042868bae95 The OpenSSF Package Analysis project identified 'xsolla-paystation-widget' @ 1.0.0 npm as malicious. It is considered malicious because: - The...

OESA-2023-1711 firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions. Security Fixes: When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a...

CVE-2023-44195

An Improper Restriction of Communication Channel to Intended Endpoints vulnerability in the NetworkStack agent daemon nsagentd of Juniper Networks Junos OS Evolved allows an unauthenticated network based attacker to cause limited impact to the availability of the system. If specific packets reach...

Mitsubishi Electric MELSEC-F Series

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION : Exploitable remotely/low attack complexity Vendor : Mitsubishi Electric Corporation Equipment : MELSEC-F Series Vulnerability : Improper Authentication 2. RISK EVALUATION Successful exploitation of this vulnerability may allow a remote...

Malicious Package

Overview DiscordsRpc is a malicious package. This package contains malicious code that executes covert scripts upon installation or uninstallation, communicating with a remote server to download and execute additional malicious files, thereby deploying the SeroXen RAT on the victim's machine, all...

The Risks of Exposing DICOM Data to the Internet

Introduction Digital Imaging and Communications in Medicine DICOM is the international standard for the transmission, storage, retrieval, print, and display of medical images and related information. While DICOM has revolutionized the medical imaging industry, allowing for enhanced patient care...

CVE-2023-44981

Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper quorum.auth.enableSasl=true, the authorization is done by verifying that the instance part in SASL authentication ID is listed in zoo.cfg server list. The...

CVE-2023-44981

Authorization Bypass Through User-Controlled Key vulnerability in Apache ZooKeeper. If SASL Quorum Peer authentication is enabled in ZooKeeper quorum.auth.enableSasl=true, the authorization is done by verifying that the instance part in SASL authentication ID is listed in zoo.cfg server list. The...

Malicious code in abc-user-feedback (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3ff790dbcec56cb74a132d712fc0219e9b1671efca1e5a70c8619088b6b8ab64 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...