Design/Logic Flaw

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass.This issue affects Digital Yepas: before 1.0.1...

CVE-2023-4972 Information Disclosure in Digital Yepas

Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users. This issue affects Digital Yepas: before 1.0.1...

CVE-2023-4972

CVE-2023-4972 pertains to Digital Yepas where Incorrect Use of Privileged APIs allows collecting data supplied by users. The vulnerability affects Digital Yepas up to version 1.0.0 (fixed in 1.0.1). The root cause is improper privilege management in privileged API usage, enabling data collection ...

CVE-2023-4702

CVE-2023-4702 affects Digital Yepas (Yepas Digital Yepas) prior to version 1.0.1. The issue is described as an Authentication Bypass via an Alternate Path or Channel, enabling bypass of authentication. The CVE is documented across multiple sources (NVD, CVE list, PRION/PT-Security entries, CNNVD,...

CVE-2023-4702 Authentication Bypass in Digital Yepas

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1...

CVE-2023-4702 Authentication Bypass in Digital Yepas

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1...

PT-2023-31310

Name of the Vulnerable Software and Affected Versions Digital Yepas version 1.0.0 Description The issue is related to an Improper Privilege Management vulnerability, allowing the collection of data as provided by users. This can be exploited due to the incorrect use of privileged APIs...

CVE-2023-4702: Authentication Bypass Using an Alternate Path or Channel

Authentication Bypass Using an Alternate Path or Channel vulnerability in Yepas Digital Yepas allows Authentication Bypass. This issue affects Digital Yepas: before 1.0.1...

App Layering | The digital signature on wfica32.exe is invalid

When opening a Citrix application from the store, the .ica is downloaded to the computer. When that .ica file is opened, an error message appears: "The digital signature on wfica32.exe is invalid."...

CVE-2023-4972: Incorrect Use of Privileged APIs

Incorrect Use of Privileged APIs vulnerability in Yepas Digital Yepas allows Collect Data as Provided by Users. This issue affects Digital Yepas: before 1.0.1...

PT-2023-30292

Name of the Vulnerable Software and Affected Versions Digital Yepas versions prior to 1.0.1 Description The issue is related to an Authentication Bypass Using an Alternate Path or Channel vulnerability in Digital Yepas, allowing authentication bypass. Recommendations For versions prior to 1.0.1,...

Yepas Digital Yepas Access Control Error Vulnerability

Yepas Digital Yepas is an online trading portal from Yepas Digital. A security vulnerability exists in versions of Yepas Digital Yepas prior to 1.0.1, which stems from a vulnerability that allows an attacker to bypass authentication using an alternate path or channel...

CVE-2023-41892

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15...

CVE-2023-41892

CVE-2023-41892 affects Craft CMS Versions 4.0.0-RC1 through 4.4.14. The vulnerability is an unauthenticated remote code execution (RCE) caused by a PHP object creation in the craft\controllers\ConditionsController that can escalate to arbitrary PHP code execution (context involves GuzzleHttp\Psr7...

CVE-2023-41892 Craft CMS Remote Code Execution vulnerability

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15...

CVE-2023-41892 Craft CMS Remote Code Execution vulnerability

Craft CMS is a platform for creating digital experiences. This is a high-impact, low-complexity attack vector. Users running Craft installations before 4.4.15 are encouraged to update to at least that version to mitigate the issue. This issue has been fixed in Craft CMS 4.4.15...

Webinar: Identity Threat Detection & Response (ITDR) – Rips in Your Identity Fabric

In today's digital age, SaaS applications have become the backbone of modern businesses. They streamline operations, enhance productivity, and foster innovation. But with great power comes great responsibility. As organizations integrate more SaaS applications into their workflows, they...

USN-6339-3 linux-azure, linux-azure-5.15, linux-azure-fde, linux-azure-fde-5.15, linux-raspi vulnerabilities

It was discovered that the NTFS file system implementation in the Linux kernel did not properly validate MFT flags in certain situations. An attacker could use this to construct a malicious NTFS image that, when mounted and operated on, could cause a denial of service system crash. CVE-2022-48425...

LLMs and Tool Use

Last March, just two weeks after GPT-4 was released, researchers at Microsoft quietly announced a plan to compile millions of APIs--tools that can do everything from ordering a pizza to solving physics equations to controlling the TV in your living room--into a compendium that would be made...

digital-assets.fao.org Cross Site Scripting vulnerability OBB-3655690

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...