CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

CVE-2023-33568

Dolibarr 16.x before 16.0.5 is affected. An unauthenticated remote attacker can trigger a database dump and access the company’s entire contacts data (customers, prospects, suppliers, and employees) if a contact file exists. Root cause is insufficient access control leading to pre-auth data expos...

PT-2023-24393 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 16.0.0 through 16.0.4 Description: An issue in Dolibarr allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact fil...

Metasploit Weekly Wrap-Up

Cloud Fun With EC2 New ground was broken today with the addition of two PRs from community contributor sempervictus, also known as RageLtMan, who added the ability for Metasploit to establish sessions to EC2 instances using Amazon's SSM interface, which provides a public API to execute commands o...

CVE-2022-48438

In cpdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

PT-2023-15781 · Unknown · Cp Dump Driver

Name of the Vulnerable Software and Affected Versions: cp dump driver affected versions not specified Description: The issue is related to a missing bounds check in the cp dump driver, which could lead to a possible out of bounds write. This may result in a local denial of service and requires...

PT-2023-15780 · Unknown · Cp Dump Driver

Name of the Vulnerable Software and Affected Versions: cp dump driver affected versions not specified Description: The issue is related to a missing bounds check in the cp dump driver, which could lead to a possible out of bounds write. This might result in a local denial of service and requires...

CVE-2023-32716

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the dump SPL command to cause a denial of service by crashing the Splunk daemon...

CVE-2023-32716 Denial of Service via the 'dump' SPL command

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the dump SPL command to cause a denial of service by crashing the Splunk daemon...

Splunk 代码问题漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze data and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

CVE-2023-33568

creationtimestamp| type| source ---|---|--- 2023-05-30 15:27:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dolibarr16contactdump.rb 2023-06-13 18:15:40+00:00| seen| https://t.me/cibsecurity/65161 2023-06-20 08:10:54+00:00|...

Platbox - UEFI And SMM Assessment Tool

UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW to physic...

mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied

...

CVE-2023-32349

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI...

CVE-2023-32349

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI...

Xxe

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI...

CVE-2023-32349

CVE-2023-32349 affects Teltonika RUT router firmware versions 00.07.03.4 and earlier. The packet dump utility validates filters, but the validation parameters are stored in an external configuration file. An authenticated attacker could misuse an exposed UCI configuration utility to modify these ...

CVE-2023-32349

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI...

PT-2023-23742 · Teltonika · Teltonika Rut

Name of the Vulnerable Software and Affected Versions: Teltonika RUT router firmware versions 00.07.00 through 00.07.03.4 Description: The packet dump utility in the firmware contains proper validation for filter parameters, but the variables for validation checks are stored in an external...

rpm-ostree bug fix and enhancement update

An update is available for rpm-ostree. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The rpm-ostree tool binds together the RPM packaging model with the OSTree...