CVE-2023-35351 Windows Active Directory Certificate Services (AD CS) Remote Code Execution Vulnerability

...

CVE-2023-35351

CVE-2023-35351: Windows Active Directory Certificate Services (AD CS) Remote Code Execution vulnerability. Affected: Windows AD CS; vulnerability type is remote code execution. CVSSv3.1 base score 6.6 (vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H). Exploitation status and detailed root ca...

CVE-2023-35350

Technical details for CVE-2023-35350 are not publicly available in the provided documents. Affected product/impact/root cause are not disclosed here. Monitor for updates and official advisories.

CVE-2023-35351: Use After Free

Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...

CVE-2023-35350: Heap-based Buffer Overflow

Windows Active Directory Certificate Services AD CS Remote Code Execution Vulnerability...

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

CVE-2023-27396

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

CVE-2023-27396: Missing Authentication for Critical Function

FINS Factory Interface Network Service is a message communication protocol, which is designed to be used in closed FA Factory Automation networks, and is used in FA networks composed of OMRON products. Multiple OMRON products that implement FINS protocol contain following security issues --...

cs.unipi.gr Cross Site Scripting vulnerability OBB-3384417

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Metasploit Weekly Wrap-Up

AD CS certificate templates Our very own Spencer McIntyre has developed a new module that allows for creating, reading, updating and deleting certificate template objects from Active Directory. ESC4 Exploitation These changes notably enables the exploitation of the technique identified as ESC4...

CVE-2022-47611

Cross-Site Request Forgery CSRF vulnerability in Julian Weinert // cs&m Hover Image plugin = 1.4.1 versions...

CVE-2022-47611 WordPress Hover Image Plugin <= 1.4.1 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Julian Weinert // cs&m Hover Image plugin = 1.4.1 versions...

CVE-2022-47611

The CVE-2022-47611 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in the WordPress Hover Image plugin, affecting versions up to 1.4.1. Affected component: Hover Image plugin for WordPress. Root cause: CSRF vulnerability that can be triggered by an unauthenticated actor to coerc...

PT-2023-15434 · WordPress · Cs&M Hover Image Plugin

Name of the Vulnerable Software and Affected Versions: Julian Weinert // cs&m Hover Image plugin versions 1.4.1 and earlier Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintende...

CVE-2022-47611: Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in Julian Weinert // cs&m Hover Image plugin = 1.4.1 versions...

Online Computer and Laptop Store SQL注入漏洞

Online Computer and Laptop Store is an online computer and laptop store by Carlo Montero Personal Developer. A SQL injection vulnerability exists in SourceCodester Online Computer and Laptop Store version 1.0, which stems from a problem with the component GET Parameter Handler, where manipulation...

PT-2025-38027

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An integer overflow exists in the radeon cs parser init function within the DRM/Radeon driver. When the size variable is initialized to 0x40000000, an integer overflow occurs during the...

Omron CS/CJ Series

1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Omron Equipment: SYSMAC CS/CJ Series Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to access...

CISA Releases Four Industrial Control Systems Advisories

CISA released four Industrial Control Systems ICS advisories on April 18, 2023. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. CISA encourages users and administrators to review the newly released ICS advisories for...

PT-2023-21095 · Omron · Sysmac Nx1P-Series Cpu Units +4

Name of the Vulnerable Software and Affected Versions: SYSMAC CS-series CPU Units, all versions SYSMAC CJ-series CPU Units, all versions SYSMAC CP-series CPU Units, all versions SYSMAC NJ-series CPU Units, all versions SYSMAC NX1P-series CPU Units, all versions SYSMAC NX102-series CPU Units, all...