CVE-2023-21925

Vulnerability in the Oracle Health Sciences InForm product of Oracle Health Sciences Applications component: Core. Supported versions that are affected are Prior to 6.3.1.3 and Prior to 7.0.0.1. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to...

utxo-workshop 安全漏洞

utxo-workshop is a UTXO chain implementation on Substrate. utxo-workshop suffers from a security vulnerability that stems from the fact that an attacker can craft consensus messages, send them to various nodes and take them offline, and an attacker can use getaddr messages to crawl network peers...

SonicWall SonicWave Secure Wireless Access Points 安全漏洞

SonicWall SonicWave Secure Wireless Access Points are a line of wireless access devices from SonicWall. A security vulnerability exists in SonicWall SonicWave Secure Wireless Access Points that originated from allowing a physically proximate attacker to intercept target frames by spoofing the...

The vulnerability of Siemens SCALANCE X industrial switches’ web server allows a hacker to trigger a service failure or execute arbitrary code.

The vulnerability of Siemens SCALANCE X industrial switches’ web servers is related to incorrect processing of POST requests sent to the web server. Exploiting this vulnerability allows a malicious actor to trigger service failures or execute arbitrary code...

The vulnerability in the web administration interface of the Local Status Page (LSP) of Cisco Meraki software for network devices allows a hacker to trigger a service failure or gain unauthorized access to protected information.

The vulnerability of the administration web interface for Local Status Pages LSP in Cisco Meraki network devices stems from the low entropy of default account credentials. Exploiting this vulnerability could allow an attacker to cause service interruptions or gain unauthorized access to protected...

AZL-26216 CVE-2023-24626 affecting package screen for versions less than 4.9.1-1

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process...

CVE-2023-24626

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process...

Design/Logic Flaw

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process...

CVE-2023-24626

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process...

CVE-2023-24626

socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users to send a privileged SIGHUP signal to any PID, causing a denial of service or disruption of the target process...

CVE-2023-24626

CVE-2023-24626 affects GNU Screen up to version 4.9.0. When screen is installed setuid/setgid, local attackers can send a privileged SIGHUP to any PID, causing DoS or disruption. Affected product: GNU Screen (socket.c). Root cause: privileged signal handling via setuid/setgid path. Impact: local ...

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

Microsoft said it teamed up with Fortra and Health Information Sharing and Analysis Center Health-ISAC to tackle the abuse of Cobalt Strike by cybercriminals to distribute malware, including ransomware. To that end, the tech giant's Digital Crimes Unit DCU revealed that it secured a court order i...

CVE-2023-20030

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access sensitive information, conduct a server-side request forgery SSRF attack through an affected device, or negatively impact the responsiveness of the...

CVE-2023-0977

A heap-based overflow vulnerability in Trellix Agent Windows and Linux version 5.7.8 and earlier, allows a remote user to alter the page heap in the macmnsvc process memory block resulting in the service becoming unavailable...

GNU Binutils 缓冲区错误漏洞

GNU Binutils is a set of binary tools developed by the GNU Project, mainly used to deal with target files e.g., executables, libraries, etc., covering compilation, linking, debugging, and other phases of the function. GNU Binutils suffers from a buffer overflow vulnerability that originates from ...

The vulnerability of the DHCP implementation in the software-based quadcopter DJI Spark protocol allows a perpetrator to cause service failure.

The vulnerability of the DHCP implementation in DJI Spark quadrocopters’ software lies in the exhaustion of the IP address pool due to changes in the security-critical protection mechanism. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafte...

SUSE CVE-2023-28427

matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 24.0.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...

CVE-2022-47189

Generex UPS CS141 vulnerability CVE-2022-47189 affects CS141 devices before firmware 2.06. The root cause is improper handling of a firmware file upload that can carry an incorrect configuration, leading to Denial of Service and disruption of normal device functionality. Public details in connect...

PT-2023-2484 · Moxa · Miineport E1

Name of the Vulnerable Software and Affected Versions: Moxa MiiNePort E1 affected versions not specified Description: The issue is related to insufficient access control, allowing an unauthenticated remote user to exploit the vulnerability and perform arbitrary system operations or disrupt servic...

PT-2023-15229 · Generex · Generex Ups Cs141

Name of the Vulnerable Software and Affected Versions: Generex UPS CS141 versions prior to 2.06 Description: The issue allows an attacker to upload a firmware file containing an incorrect configuration, disrupting the normal functionality of the device. Recommendations: For versions prior to 2.06...