CVE-2023-44275

OPNsense

CVE-2023-44276

OPNsense before 23.7.5 allows XSS via the index.php sequence parameter to the Lobby Dashboard...

CVE-2023-44275

OPNsense before 23.7.5 allows XSS via the index.php columncount parameter to the Lobby Dashboard...

Tutor LMS < 2.3.0 - Subscriber+ Stored Cross-Site Scripting

Description The plugin does not sanitise and escape some of its settings, which could allow users such as subscriber to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup 1. Register a student account and go to the...

Malicious code in @zettle-bo/dashboard (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 510b4f65adcadc6cf06f1caf2a6a9f71e0b88b31e88b96d18de7dc241fdb9c70 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

GHSA-X4HH-VJM7-G2JV Faktory Web Dashboard can lead to denial of service(DOS) via malicious user input

Summary Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. Details The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web dashboard. The value is used directly without any checks to create a string...

Sql injection

Faktory is a language-agnostic persistent background job server. Prior to version 1.8.0, the Faktory web dashboard can suffer from denial of service by a crafted malicious url query param days. The vulnerability is related to how the backend reads the days URL query parameter in the Faktory web...

CVE-2023-37279

Faktory web dashboard vulnerability: prior to version 1.8.0, a crafted malicious days URL query parameter is read without validation, used to create a string slice, leading to memory growth and potential DoS. The issue is fixed in 1.8.0. Public advisory (GHSA) provides PoC details; impact is serv...

PT-2023-25879 · Faktory · Faktory

Name of the Vulnerable Software and Affected Versions: Faktory versions prior to 1.8.0 Description: The Faktory web dashboard can suffer from denial of service by a crafted malicious URL query parameter days. This issue is related to how the backend reads the days URL query parameter in the Fakto...

Faktory Security Breach

Faktory is a job server. It is a repository for background jobs in the application. Jobs have a type and a set of parameters and are placed in a queue for staff to fetch and execute. A security vulnerability exists in Faktory versions prior to 1.8.0 that stems from the Faktory Web dashboard that...

PT-2023-6859 · Opnsense · Opnsense

Name of the Vulnerable Software and Affected Versions: OPNsense versions prior to 23.7.5 Description: The issue is related to the lack of protection of the web page structure in the OPNsense operating system. This can be exploited by a remote attacker to conduct cross-site scripting attacks using...

PT-2023-6860 · Opnsense · Opnsense

Name of the Vulnerable Software and Affected Versions: OPNsense versions prior to 23.7.5 Description: The issue is related to the lack of protection of the web page structure in the OPNsense operating system. This can be exploited by a remote attacker to conduct cross-site scripting attacks using...

CVE-2023-26141

A denial of service vulnerability was found in Sidekiq. This flaw allows an attacker to manipulate the localStorage value in the dashboard-charts.js file and cause excessive polling requests...

Exchange Backups failing with "Failed to access mailbox" starting September 13th, 2023

This issue is related to EX675238 listed in the Microsoft Health Dashboard, which caused some M365 environments to have issues with RESTAPI calls used to access the mailboxes externally...

GHSA-3QC2-V3HP-6CV8 sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

sidekiq Denial of Service vulnerability

Versions of the package sidekiq before 7.1.3 and 6.5.10 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

DEBIAN-CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

UBUNTU-CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...

CVE-2023-26141

Versions of the package sidekiq before 7.1.3 are vulnerable to Denial of Service DoS due to insufficient checks in the dashboard-charts.js file. An attacker can exploit this vulnerability by manipulating the localStorage value which will cause excessive polling requests...