20110 matches found
GHSA-9W97-9RQX-8V4J Mattermost allows demoted guests to change group names
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...
CVE-2023-50333
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...
Design/Logic Flaw
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...
CVE-2023-50333 Lack of restriction to manage group names for freshly demoted guests
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...
CVE-2023-50333 Lack of restriction to manage group names for freshly demoted guests
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...
CVE-2023-50333 Lack of restriction to manage group names for freshly demoted guests
Mattermost fails to update the permissions of the current session for a user who was just demoted to guest, allowing freshly demoted guests to change group names...
PT-2024-15155 · WordPress · Wp Sms
Name of the Vulnerable Software and Affected Versions: WP SMS – Messaging & SMS Notification for WordPress versions up to, and including, 6.5 Description: The issue allows authenticated attackers, with contributor-level access and above, to append additional SQL queries into already existing...
Mattermost Security Vulnerabilities
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from an inability to update permissions for the current session for a user who has just been downgraded to a guest, allowing the newly...
Albanian Parliament and One Albania Telecom Hit by Cyber Attacks
The Assembly of the Republic of Albania and telecom company One Albania have been targeted by cyber attacks, the country's National Authority for Electronic Certification and Cyber Security AKCESK revealed this week. "These infrastructures, under the legislation in force, are not currently...
CERT-UA Uncovers New Malware Wave Distributing OCEANMAP, MASEPIE, STEELHOOK
The Computer Emergency Response Team of Ukraine CERT-UA has warned of a new phishing campaign orchestrated by the Russia-linked APT28 group to deploy previously undocumented malware such as OCEANMAP, MASEPIE, and STEELHOOK to harvest sensitive information. The activity, which was detected by the...
Use-after-free in Linux kernel's ipv4: igmp component
...
PT-2023-29965
Name of the Vulnerable Software and Affected Versions Solar-Log Base 15 Firmware version 6.0.1 Build 161 Description A stored cross-site scripting XSS vulnerability in the switch group function under the /ilang=DE&b=c smartenergy swgroups endpoint in the web portal allows an attacker to escalate...
Vietnamese Group Hacks and Sells Bedroom Camera Footage
By Waqas Cheap Security, Costly Privacy: Vietnamese Group Profits from Hacked Home Cameras by Selling Bedroom Camera Footage- Change Your Passwords Now! This is a post from HackRead.com Read the original post: Vietnamese Group Hacks and Sells Bedroom Camera Footage...
enmongroup.com Cross Site Scripting vulnerability OBB-3819808
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
DEBIAN-CVE-2023-51704
An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group--member messages can result in XSS on Special:log/rights...
UBUNTU-CVE-2023-51704
An issue was discovered in MediaWiki before 1.35.14, 1.36.x through 1.39.x before 1.39.6, and 1.40.x before 1.40.2. In includes/logging/RightsLogFormatter.php, group--member messages can result in XSS on Special:log/rights...
UPM : User profile do not load on VDI or Application launch
User profile does not load on logon andCitrix User Profile Management logs following error. UserIsMemberOfGroup: Group name was not found! Please correct the misconfiguration...
The vulnerability of the igmp_start_timer() function in the net/ipv4/igmp.c module of the Linux operating system’s IGMP protocol implementation allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information, thereby increasing their privileges within the system.
The vulnerability of the igmpstarttimer function in the net/ipv4/igmp.c module, which is part of the IGMP protocol implementation in Linux kernel, relates to the reutilization of previously freed memory due to competitive access to resources i.e., during a “race condition”. Exploiting this...
SUSE CVE-2023-6931
A heap out-of-bounds write vulnerability in the Linux kernel's Performance Events system component can be exploited to achieve local privilege escalation. A perfevent's readsize can overflow, leading to an heap out-of-bounds increment or write in perfreadgroup. We recommend upgrading past commit...