13483 matches found
CVE-2023-29372
creationtimestamp| type| source ---|---|--- 2023-06-14 07:30:44+00:00| seen| https://t.me/cibsecurity/65192...
CVE-2023-32011
Windows iSCSI Discovery Service Denial of Service Vulnerability...
CVE-2023-32011
Windows iSCSI Discovery Service Denial of Service Vulnerability...
Denial of service
Windows iSCSI Discovery Service Denial of Service Vulnerability...
CVE-2023-32011
Technical details about CVE-2023-32011 are not publicly provided in the supplied documents. The available sources confirm the vulnerability name and related MS updates but do not disclose affected products, versions, root cause, or fixes.
PT-2023-3182 · Microsoft · Windows Iscsi Discovery Service +1
Name of the Vulnerable Software and Affected Versions: Windows iSCSI Discovery Service affected versions not specified Description: The issue is related to insufficient input validation in the Windows iSCSI Discovery Service, which can be exploited by a remote attacker to cause a denial of servic...
Fortinet FortiSIEM 安全漏洞
Fortinet FortiSIEM is a suite of security information and event management systems from the American company Fiat Fortinet. The system includes features such as asset discovery, workflow automation, and unified management. A security vulnerability exists in Fortinet FortiSIEM that stems from...
ostrowski.ch Cross Site Scripting vulnerability OBB-3418244
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Anevia Flamingo XL/XS 3.6.x Default / Hardcoded Credentials
Anevia Flamingo XL/XS 3.6.x Default/Hard-coded Credentials Vendor: Ateme Product web page: https://www.ateme.com Affected version: 3.6.20, 3.2.9 Hardware revision 1.1, 1.0 SoapLive 2.4.1, 2.0.3 SoapSystem 1.3.1 Summary: Flamingo XL, a new modular and high-density IPTV head-end product for...
Anevia Flamingo XL/XS 3.6.x Default / Hardcoded Credentials Vulnerability
Anevia Flamingo XL/XS versions 3.6.20 and 3.2.9 have a weak set of default and hardcoded administrative credentials that can be easily guessed in remote password attacks and gain full control of the system. Anevia Flamingo XL/XS 3.6.x Default/Hard-coded Credentials Vendor: Ateme Product web page:...
New Critical MOVEit Transfer SQL Injection Vulnerabilities Discovered - Patch Now!
Progress Software, the company behind the MOVEit Transfer application, has released patches to address brand new SQL injection vulnerabilities affecting the file transfer solution that could enable the theft of sensitive information. "Multiple SQL injection vulnerabilities have been identified in...
CVE-2023-34243 Windows user name disclosure in TGstation
TGstation is a toolset to manage production BYOND servers. In affected versions if a Windows user was registered in tgstation-server TGS, an attacker could discover their username by brute-forcing the login endpoint with an invalid password. When a valid Windows logon was found, a distinct respon...
How to Improve Your API Security Posture
APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectivity doesn't come without major risks. Hackers can exploit vulnerabilities in APIs to gain unauthorized access to sensitive data or even ta...
How to Improve Your API Security Posture
APIs, more formally known as application programming interfaces, empower apps and microservices to communicate and share data. However, this level of connectivity doesn't come without major risks. Hackers can exploit vulnerabilities in APIs to gain unauthorized access to sensitive data or even ta...
Nacos Jraft Hessian Deserialization Vulnerability
Nacos is an acronym for Dynamic Naming and Configuration Service, a dynamic service discovery, configuration management and service management platform that makes it easier to build cloud-native applications. A deserialization vulnerability exists in Nacos Jraft Hessian, which can be exploited by...
yukonrealtors.ca Cross Site Scripting vulnerability OBB-3403107
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
The vulnerability of the Cisco Discovery Protocol implementation in NX-OS and Cisco FXOS devices allows a attacker to induce a service failure.
The vulnerability of the Cisco Discovery Protocol implementation in NX-OS and Cisco FXOS devices relates to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
Malicious Package
Overview native-svg is a malicious package. The package's name is based on existing repositories, namespaces, or components used by popular companies in an effort to trick employees into downloading it, also known as 'dependency confusion'. Therefore, you're only vulnerable if this package was...
barwinski.net Cross Site Scripting vulnerability OBB-3381559
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
alojaweb.educastur.es Cross Site Scripting vulnerability OBB-3381034
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...