Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution

Exploit Title: Hikvision Hybrid SAN Ds-a71024 Firmware - Multiple Remote Code Execution Date: 16 July 2023 Exploit Author: Thurein Soe CVE : CVE-2022-28171 Vendor Homepage: https://www.hikvision.com Software Link: N/A Refence Link: https://cve.report/CVE-2022-28171 Version: Filmora 12: Ds-a71024...

CVE-2023-3319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iDisplay PlatPlay DS allows Stored XSS.This issue affects PlatPlay DS: before 3.14...

CVE-2023-3319

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iDisplay PlatPlay DS allows Stored XSS. This issue affects PlatPlay DS: before 3.14...

Cross site scripting

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iDisplay PlatPlay DS allows Stored XSS.This issue affects PlatPlay DS: before 3.14...

CVE-2023-3319 XSS in iDisplays PlatPlay DS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iDisplay PlatPlay DS allows Stored XSS. This issue affects PlatPlay DS: before 3.14...

CVE-2023-3319 XSS in iDisplays PlatPlay DS

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in iDisplay PlatPlay DS allows Stored XSS. This issue affects PlatPlay DS: before 3.14...

Autodesk 多款产品资源管理错误漏洞

Autodesk Navisworks and others are products of Autodesk, Inc.Autodesk Navisworks is Autodesk 3ds Max is a full-featured 3D computer graphics software.Autodesk SKP is a product component. A security vulnerability exists in a number of Autodesk products, which stems from a vulnerability that allows...

Hikvision Access Control Products 授权问题漏洞

The Hikvision DS-K1T and Hikvision DS-KH are both a series of access control systems from Hikvision China. A security vulnerability exists in Hikvision Access Control Products, which stems from the fact that the session ID is not updated after a user has successfully logged in, making them...

[SECURITY] [DLA 3426-2] netatalk regression update

Debian LTS Advisory DLA-3426-2 [email protected] https://www.debian.org/lts/security/ Markus Koschany June 01, 2023 https://wiki.debian.org/LTS Package : netatalk Version : 3.1.12ds-3+deb10u2 CVE ID : CVE-2022-23121 Debian Bug : 1036740 The security update of netatalk, the Apple Filing...

ds-360.com Cross Site Scripting vulnerability OBB-3332134

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Autodesk 3ds Max 缓冲区错误漏洞

Autodesk 3ds Max is a full-featured, three-dimensional computer graphics software from the American company Autodesk. A security vulnerability exists in Autodesk 3ds Max USD plugin version 0.4, which originates from the possibility that an attacker could trick a user into opening a malicious USD...

ds-lapaz.edu.bo Cross Site Scripting vulnerability OBB-3298142

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ds-em.com Cross Site Scripting vulnerability OBB-3283441

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

ds-style.net Cross Site Scripting vulnerability OBB-3280334

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

length OF THE BYTES ARRAY IS NOT CHECKED BEFORE SUBSTRING IS EXTRACTED FROM IT, WHICH COULD LEAD TO SUBSTRING OF bytes(0)

Lines of code Vulnerability details Impact In RRUtils.readDNSKEY function, if the length == 4 then the self.publicKey will be an empty bytes array. No check is performed to validata the length variable. This will return the public key of the DNSKEY as an empty bytes array. Check should be perform...

Debian dla-3399 : 389-ds - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3399 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3399-1 [email protected]...

Debian: Security Advisory (DLA-3399-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3399-1] 389-ds-base security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3399-1 [email protected] https://www.debian.org/lts/security/ Anton Gladky April 24, 2023 https://wiki.debian.org/LTS -...

DLA-3399-1 389-ds-base - security update

Bulletin has no description...

ROS-20230414-02

DNS server BIND vulnerability is related to reachable assertion in DNS query processing. Exploitation The vulnerability allows an attacker acting remotely to send repeated patterns of specific requests to servers with DNSSEC-Validated Cache synth-from-rom enabled. queries to servers with the...