PT-2023-4429 · Microsoft · .Net Framework

Name of the Vulnerable Software and Affected Versions: .NET Framework affected versions not specified Description: The issue is related to errors in the representation of information by the user interface, which can be exploited by a remote attacker to conduct spoofing attacks. There is no...

The vulnerability of Blink’s web page display mechanism in Google Chrome browser allows attackers to circumvent existing security restrictions.

The vulnerability of Blink’s web page rendering mechanism in Google Chrome browser relates to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to bypass existing security restrictions...

The vulnerability of the The Message Display Tool (MDT) software component, used for integrating corporate applications in SAP NetWeaver Process Integration, allows a perpetrator to disclose protected information.

The vulnerability of the The Message Display Tool MDT software component, used for integrating corporate applications in SAP NetWeaver Process Integration, is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor to disclose sensitive...

CVE-2023-23764 Incorrect comparison vulnerability in GitHub Enterprise Server leading to commit smuggling

An incorrect comparison vulnerability was identified in GitHub Enterprise Server that allowed commit smuggling by displaying an incorrect diff within the GitHub pull request UI. To do so, an attacker would need write access to the repository. This vulnerability affected GitHub Enterprise Server...

July 26, 2023—KB5028254 (OS Build 22621.2070) Preview

None None...

Huawei EulerOS: Security Advisory for qemu (EulerOS-SA-2023-2446)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

July 25, 2023—KB5028244 (OS Build 19045.3271) Preview

None None...

July 25, 2023—KB5028245 (OS Build 22000.2245) Preview

None None...

Aures Booking & POS Terminal - Local Privilege Escalation Vulnerability

Exploit Title: Aures Booking & POS Terminal - Local Privilege Escalation Common Vulnerability Scoring System: ==================================== 7.2 Vulnerability Class: ==================== Privilege Escalation Current Estimated Price: ======================== 3.000€ - 4.000€ Product & Service...

WordPress Plugin wp-donate SQL注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. WordPress Plugin wp-donate...

PT-2023-10300 · WordPress · Wp-Donate

Name of the Vulnerable Software and Affected Versions: wp-donate Plugin versions up to 1.4 Description: A critical issue has been found in the wp-donate Plugin, affecting an unknown part of the file includes/donate-display.php. This issue leads to sql injection and can be initiated remotely...

The vulnerability of the Microsoft Outlook email client, related to errors in information presentation on the user interface, allows attackers to perform spear-phishing attacks.

The vulnerability of the Microsoft Outlook email client is related to information representation errors in the user interface. Exploiting this vulnerability can allow attackers to perform spear-phishing attacks remotely...

The vulnerability of the AuthenticodeDeformatter class in the Mono application development platform allows attackers to perform spoofing attacks.

The vulnerability of the AuthenticodeDeformatter class in the Mono application development platform is related to errors in the user interface’s information representation during the loading of the Mono.Security.dll library. Exploiting this vulnerability allows a malicious actor to perform spoofi...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from the UI's inability to display updated permissions...

Dell Display Manager Installed (Windows)

Binary data delldisplaymanagerwininstalled.nbin...

Dell Display Manager 2.1.1.17 Privilege Escalation

The version of Dell Display Manager on the remote Windows host is version 2.1.1.17. It is, therefore affected by a privilege escalation vulnerability. A low privilege user can execute malicious code during installation and uninstallation. Note that Nessus has not tested for this issue but has...

CVE-2023-38062

In JetBrains TeamCity before 2023.05.1 parameters of the "password" type could be shown in the UI in certain composite build configurations...

WordPress Plugin Vuukle Comments, Reactions, Share Bar, Revenue 跨站请求伪造漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A cross-site request forgery...

About the security content of Rapid Security Responses for macOS Ventura 13.4.1

About the security content of Rapid Security Responses for macOS Ventura 13.4.1 This document describes the content of Rapid Security Responses. About Rapid Security Responses Rapid Security Responses deliver important security improvements between software updates and are available only for the...

About the security content of Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1

About the security content of Rapid Security Responses for iOS 16.5.1 and iPadOS 16.5.1 This document describes the content of Rapid Security Responses. About Rapid Security Responses Rapid Security Responses deliver important security improvements between software updates and are available only...