Cybercrime (and Security) Predictions for 2023

Threat actors continue to adapt to the latest technologies, practices, and even data privacy laws—and it's up to organizations to stay one step ahead by implementing strong cybersecurity measures and programs. Here's a look at how cybercrime will evolve in 2023 and what you can do to secure and...

CVE-2022-38653

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38662

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38653

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

Cross site scripting

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

Code injection

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

HCL Technologies HCL Digital Experience 跨站脚本漏洞

HCL Technologies HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies, USA. HCL Technologies HCL Digital Experience suffers from a security vulnerability that originates from an attacker being able to construct customized cross-site...

HCL Digital Experience 输入验证错误漏洞

HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL India. HCL Digital Experience suffers from an input validation error vulnerability that stems from an attacker being able to construct URLs to redirect users to untrusted sites...

Western Digital My Cloud Multiple Products 5.x < 5.25.124 Multiple Vulnerabilities (WDC-22019)

Multiple Western Digital My Cloud products are prone to multiple vulnerabilities. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progr...

Sharp Digital Full-color Multifunctional System 命令注入漏洞

The Sharp Digital Full-color Multifunctional System is a series of digital full-color multifunctional printers from Sharp, Japan. A command injection vulnerability exists in the Sharp Digital Full-color Multifunctional System, which is not properly protected with a strong administrator password a...

CVE-2022-45796: Improper Neutralization of Special Elements used in a Command

Command injection vulnerability in nwinterface.html in SHARP multifunction printers MFPs's Digital Full-color Multifunctional System 202 or earlier, 120 or earlier, 600 or earlier, 121 or earlier, 500 or earlier, 402 or earlier, 790 or earlier, and Digital Multifunctional System Monochrome 200 or...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38653

HCL Digital Experience is reported vulnerable to a cross-site scripting (XSS) issue where a customized payload can be served unencoded in the application. The CVE-2022-38653 entry lists a CVSS v3.1 base score of 5.4 (MEDIUM) with NETWORK attack vector, LOW impact on confidentiality/integrity and ...

CVE-2022-38653 HCL Digital Experience is susceptible to cross-site scripting (XSS)

In HCL Digital Experience, customized XSS payload can be constructed such that it is served in the application unencoded...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662 HCL Digital Experience is susceptible to open redirects

In HCL Digital Experience, URLs can be constructed to redirect users to untrusted sites...

CVE-2022-38662

In HCL Digital Experience, the CVE-2022-38662 issue is an open redirect vulnerability caused by URL construction that can redirect users to untrusted sites. Affected product: HCL Digital Experience (web/DX URL handling). Impact: potential user redirection to attacker-controlled or untrusted desti...

Is Apple about to embrace third-party app stores?

On Tuesday, Bloomberg reported that Apple is preparing to allow access to third-party app stores on all iPhone and iPad devices owned by EU users, in anticipation of a new EU competition law coming into force in mid-2024. If the reporting is correct, then in future users in the EU will no longer ...

PT-2022-24503 · Hcl · Hcl Digital Experience

Name of the Vulnerable Software and Affected Versions: HCL Digital Experience affected versions not specified Description: The issue allows a customized XSS payload to be constructed and served in the application unencoded. Recommendations: At the moment, there is no information about a newer...