[SECURITY] Fedora 38 Update: roundcubemail-1.6.5-1.fc38

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

[SECURITY] Fedora 37 Update: roundcubemail-1.6.5-1.fc37

RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...

PT-2023-7120 · Cisco · Cisco Secure Endpoint Connector For Windows

Name of the Vulnerable Software and Affected Versions: Cisco Secure Endpoint Connector for Windows affected versions not specified Description: The issue is related to a timing problem between various software components, which can be exploited by an authenticated, local attacker to evade endpoin...

CVE-2023-36396

Windows Compressed Folder Remote Code Execution Vulnerability...

CVE-2023-36396

Windows Compressed Folder Remote Code Execution Vulnerability...

Remote code execution

Windows Compressed Folder Remote Code Execution Vulnerability...

CVE-2023-36396

CVE-2023-36396 describes a Windows Compressed Folder remote code execution via a crafted archive that exploits Windows File Explorer to extract a file to an arbitrary relative path. Public exploitation is reported, with evidence of real-world tooling (e.g., a rootkit-like style exploit suite) and...

CVE-2023-36396 Windows Compressed Folder Remote Code Execution Vulnerability

...

CVE-2023-36396 Windows Compressed Folder Remote Code Execution Vulnerability

...

CVE-2023-31403

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

CVE-2023-31403

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

Authorization

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

CVE-2023-31403 Improper Access Control vulnerability in SAP Business One product installation

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

CVE-2023-31403 Improper Access Control vulnerability in SAP Business One product installation

SAP Business One installation - version 10.0, does not perform proper authentication and authorization checks for SMB shared folder. As a result, any malicious user can read and write to the SMB shared folder. Additionally, the files in the folder can be executed or be used by the installation...

CVE-2023-31403

CVE-2023-31403 – SAP Business One 10.0 improper access control involves insufficient authentication/authorization checks on the SMB shared folder, allowing an attacker to read/write to that folder and potentially execute files via the installation process. Affected software is SAP Business One (1...

GitLens Git Local Configuration Exec

GitKraken GitLens before v.14.0.0 allows an untrusted workspace to execute git commands. A repo may include its own .git folder including a malicious config file to execute arbitrary code. Tested against VSCode 1.87.2 with GitLens 13.6.0 on Ubuntu 22.04 and Windows 10 Module Options msf use...

Microsoft Windows Compressed Folder Security Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Compressed Folder. An attacker could exploit this vulnerability to remotely execute code. The following products and versions are...

PT-2023-23298 · Sap · Sap Business One

Name of the Vulnerable Software and Affected Versions: SAP Business One version 10.0 Description: The SAP Business One installation does not perform proper authentication and authorization checks for SMB shared folders. This allows any malicious user to read and write to the SMB shared folder...

Nextcloud: Can download files by zipping the folder

A vulnerability was identified where files could be downloaded without proper permissions by zipping and downloading a folder, despite not having direct download access. This allowed circumvention of view-only restrictions...

Fedora: Security Advisory (FEDORA-2023-735ee6d4e1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...