The vulnerability of the kernel of MacOS systems, which allows attackers to disclose sensitive information

The vulnerability of the kernel of MacOS is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to disclose protected information...

The vulnerability of Trend Micro Apex One and Apex One as a Service, web-based antivirus software consoles, allows attackers to gain unauthorized access to protected information.

The vulnerability of Trend Micro Apex One and Apex One as a Service web antivirus software programs is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information by connecting to port 434...

Predator Android Spyware: Researchers Uncover New Data Theft Capabilities

Security researchers have detailed the inner workings of the commercial Android spyware called Predator, which is marketed by the Israeli company Intellexapreviously Cytrox. Predator was first documented by Google's Threat Analysis Group TAG in May 2022 as part of attacks leveraging five differen...

The vulnerabilities of the ObjectManager plugin and ProfileInformation.ProfileData components of the PLACODESYS Development System application programming interface allow attackers to execute arbitrary commands.

The vulnerability of the ObjectManager plugin and ProfileInformation.FileData components of the PLCODESYS Development System application programming interface is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability can allow an attacker to execute arbitrary...

AlmaLinux 8 : container-tools:rhel8 (ALSA-2023:2758)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2023:2758 advisory. golang: net/http: improper sanitization of Transfer-Encoding header CVE-2022-1705 golang: go/parser: stack exhaustion in all Parse functions CVE-2022-1962...

WebKit Under Attack: Apple Issues Emergency Patches for 3 New Zero-Day Vulnerabilities

Apple on Thursday rolled out security updates to iOS, iPadOS, macOS, tvOS, watchOS, and the Safari web browser to address dozens of flaws, including three new zero-days that it said are being actively exploited in the wild. The three security shortcomings are listed below - CVE-2023-32409 - A...

Critical Flaws in Cisco Small Business Switches Could Allow Remote Attacks

Cisco has released updates to address a set of nine security flaws in its Small Business Series Switches that could be exploited by an unauthenticated, remote attacker to run arbitrary code or cause a denial-of-service DoS condition. "These vulnerabilities are due to improper validation of reques...

CVE-2023-20167

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated attacker to perform path traversal attacks on the underlying operating system to either elevate privileges to root or read arbitrary files. To exploit these vulnerabilities, an attacker must have valid...

Cisco DNA Center 安全漏洞

Cisco DNA Center is a network management and command center service from Cisco USA. An information disclosure vulnerability exists in Cisco DNA Center. The vulnerability stems from improper authorization of API requests and can be exploited by an authenticated, remote attacker to read information...

CVE-2023-20077

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to download arbitrary files from the filesystem of an affected device. These vulnerabilities are due to insufficient input validation. An attacker cou...

The vulnerability in the web interface for managing D-Link DIR-2640-US microprogramming software allows a hacker to bypass security restrictions.

The vulnerability of the web interface for managing D-Link DIR-2640-US microprogramming devices is related to deficiencies in the authentication process when processing requests containing XML elements. Exploiting this vulnerability can allow a malicious actor to circumvent security restrictions...

The vulnerability of the Keepalived network traffic balancing system, related to deficiencies in access control, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the Keepalived system for balancing network traffic is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to gain access to confidential data and compromise its integrity...

PT-2023-2805 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE, which could allow an authenticated,...

PT-2023-3389 · Aruba · Aruba Edgeconnect Enterprise

Name of the Vulnerable Software and Affected Versions: Aruba EdgeConnect Enterprise affected versions not specified Description: The issue is related to multiple authenticated path traversal vulnerabilities in the command line interface of the Aruba EdgeConnect Enterprise platform. These...

CVE-2023-20722

In m4u, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07771518; Issue ID: ALPS07680084...

The vulnerability of the Win32k.sys component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Win32k.sys component of the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Bluetooth Driver of the Windows operating system allows a hacker to gain increased privileges.

The vulnerability of the Windows Bluetooth Driver in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

Netgear Routers' Flaws Expose Users to Malware, Remote Attacks, and Surveillance

As many as five security flaws have been disclosed in Netgear RAX30 routers that could be chained to bypass authentication and achieve remote code execution. "Successful exploits could allow attackers to monitor users' internet activity, hijack internet connections, and redirect traffic to...

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing allows a malicious individual to cause service failures or gain access to read, modify, add, or delete data.

The vulnerability of the Core component of the Oracle Health Sciences InForm software for clinical testing is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to cause service failures or gain access to read, modify, add, or delete data...

Vulnerability of the Server component: The MySQL Server database management system’s DDL functions allow attackers to gain privileged access or cause service interruptions.

Vulnerability of the MySQL Server component: The MySQL Server database management system has vulnerabilities due to insufficient validation of input data. Exploitation of these vulnerabilities can allow attackers to gain privileged access or cause service interruptions from a remote location...