6273 matches found
simba-uw-tf-dev (>=1.83.1, <=1.84.4) potentially affected by CVE-2023-4863 via opencv-python (3.4.16.59)
opencv-python PYPI version 3.4.16.59 is affected by a known vulnerability. The following packages have a transitive dependency on opencv-python and may be impacted: - simba-uw-tf-dev =1.83.1, =1.84.4 Source cves: CVE-2023-4863 Source advisory: OSV:PYSEC-2023-183...
PT-2023-8477 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue exists due to insufficient input validation in a component of the macOS operating system, specifically in the Dev Tools. This could allow an app to gain elevated privileges. The issue was...
CVE-2023-41863
Unauth. Stored Cross-Site Scripting XSS vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin = 1.7.0 versions...
Cross site scripting
Unauth. Stored Cross-Site Scripting XSS vulnerability in Pepro Dev. Group PeproDev CF7 Database plugin = 1.7.0 versions...
CVE-2023-41863
CVE-2023-41863 affects the WordPress plugin PeproDev CF7 Database (≤ 1.7.0). The vulnerability is an unauthenticated Stored Cross-Site Scripting (XSS) via form submission, as detailed in Patchstack and corroborated by Wordfence listings. Impact is XSS execution impacting site visitors; exploitati...
aydin (>=0.1.13, <=0.1.15), openvino-dev (2022.2.0) potentially affected by CVE-2023-4863 +1 more via imagecodecs (2022.2.22)
imagecodecs PYPI version 2022.2.22 is affected by a known vulnerability. The following packages have a transitive dependency on imagecodecs and may be impacted: - aydin =0.1.13, =0.1.15 - openvino-dev 2022.2.0 Source cves: CVE-2023-4863, CVE-2023-5129 Source advisory: OSV:PYSEC-2023-174...
PT-2023-8733
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a null pointer dereference error in the Linux kernel's team component when the team device type is changed from non-ether to ether. This occurs because the header...
PT-2023-8744
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.0-rc1-syzkaller-00236-gad8a69f361b9 Description The vulnerability is related to a data-race condition in the br handle frame finish function, which can run from multiple CPUs without mutual exclusion. This ca...
Debian DSA-5497-1 : libwebp - security update
The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5497 advisory. A buffer overflow in parsing WebP images may result in the execution of arbitrary code. For the stable distribution bookworm, this problem has been fixed in version...
PT-2025-37676
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A use-after-free UAF vulnerability exists in the Linux kernel's drm/tests module. Specifically, when using the drm kunit helper alloc drm device function, the driver may be dereferenced...
CVE-2023-39070
CVE-2023-39070 affects cppcheck (2.12 dev) with a local arbitrary-code execution via removeContradiction in token.cpp:1934, caused by a heap use-after-free. Several advisories confirm a fixed heap use-after-free and reference upgraded packages (e.g., openSUSE SUSE openSUSE-SU-2023:0413-1, patch t...
HTTP-Shell - MultiPlatform HTTP Reverse Shell
HTTP-Shell is Multiplatform Reverse Shell. This tool helps you to obtain a shell-like interface on a reverse connection over HTTP. Unlike other reverse shells, the main goal of the tool is to use it in conjunction with Microsoft Dev Tunnels, in order to get a connection as close as possible to a...
Cookie without Secure flag
Description Access and login to the website. Press F12 on your keyboard or right-click on the website to open dev-tool. At Application tab, choose Cookies and there are some sensitive cookies without Secure flag. Proof of Concept...
WordPress Defender Security Plugin < 4.1.0 is vulnerable to Bypass Vulnerability
Software Defender Security Type Plugin Vulnerable versions 4.1.0 Fixed in 4.1.0 OWASP Top 10 A1: Broken Access Control Classification Bypass Vulnerability CVE CVE-2023-5089 Patch priority Low CVSS severity Low 5.3 Developer WPMU DEV PSID e45ed857552b Credits Juan Pablo Gomez Postigo Required...
Debian dla-3550 : libopendmarc-dev - security update
The remote Debian 10 host has packages installed that are affected by a vulnerability as referenced in the dla-3550 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3550-1 [email protected] https://www.debian.org/lts/security/...
CVE-2023-4778
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4778 Out-of-bounds Read in gpac/gpac
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
CVE-2023-4778 Out-of-bounds Read in gpac/gpac
Out-of-bounds Read in GitHub repository gpac/gpac prior to 2.3-DEV...
