CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

CVE-2023-33568: Files or Directories Accessible to External Parties

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

PT-2023-24393 · Dolibarr · Dolibarr

Name of the Vulnerable Software and Affected Versions: Dolibarr versions 16.0.0 through 16.0.4 Description: An issue in Dolibarr allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact fil...

CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

CVE-2023-33568

An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists...

Dolibarr 安全漏洞

Dolibarr is a software application. A modern software package that helps manage your organization's activities. A security vulnerability exists in Dolibarr versions v16.0.0 through v16.0.5, which stems from a vulnerability that allows an unauthenticated attacker to perform a database dump and...

CVE-2023-33568

Dolibarr 16.x before 16.0.5 is affected. An unauthenticated remote attacker can trigger a database dump and access the company’s entire contacts data (customers, prospects, suppliers, and employees) if a contact file exists. Root cause is insufficient access control leading to pre-auth data expos...

Metasploit Weekly Wrap-Up

Cloud Fun With EC2 New ground was broken today with the addition of two PRs from community contributor sempervictus, also known as RageLtMan, who added the ability for Metasploit to establish sessions to EC2 instances using Amazon's SSM interface, which provides a public API to execute commands o...

CVE-2022-48438

In cpdump driver, there is a possible out of bounds write due to a missing bounds check. This could lead to local denial of service with System execution privileges needed...

PT-2023-15781 · Unknown · Cp Dump Driver

Name of the Vulnerable Software and Affected Versions: cp dump driver affected versions not specified Description: The issue is related to a missing bounds check in the cp dump driver, which could lead to a possible out of bounds write. This may result in a local denial of service and requires...

PT-2023-15780 · Unknown · Cp Dump Driver

Name of the Vulnerable Software and Affected Versions: cp dump driver affected versions not specified Description: The issue is related to a missing bounds check in the cp dump driver, which could lead to a possible out of bounds write. This might result in a local denial of service and requires...

CVE-2023-32716

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the dump SPL command to cause a denial of service by crashing the Splunk daemon...

CVE-2023-32716 Denial of Service via the 'dump' SPL command

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the dump SPL command to cause a denial of service by crashing the Splunk daemon...

CVE-2023-32716: Improper Check for Unusual or Exceptional Conditions

In Splunk Enterprise versions below 9.0.5, 8.2.11, and 8.1.14, and Splunk Cloud Platform versions below 9.0.2303.100, an attacker can exploit a vulnerability in the dump SPL command to cause a denial of service by crashing the Splunk daemon...

Splunk 代码问题漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze data and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A...

CVE-2023-33568

creationtimestamp| type| source ---|---|--- 2023-05-30 15:27:30+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/dolibarr16contactdump.rb 2023-06-13 18:15:40+00:00| seen| https://t.me/cibsecurity/65161 2023-06-20 08:10:54+00:00|...

Platbox - UEFI And SMM Assessment Tool

UEFI and SMM Assessment Tool Features Platbox is a tool that helps assessing the security of the platform: Dumps the platform registers that are interesting security-wise Flash Locks MMIO and Remapping Locks SMM Base and Locks MSRs RW access to the PCI configuration space of devices. RW to physic...

mod_auth_openidc core dump when OIDCStripCookies is set and an empty Cookie header is supplied

...

CVE-2023-32349

Version 00.07.03.4 and prior of Teltonika’s RUT router firmware contain a packet dump utility that contains proper validation for filter parameters. However, variables for validation checks are stored in an external configuration file. An authenticated attacker could use an exposed UCI...