CVE-2023-42907

creationtimestamp| type| source ---|---|--- 2024-01-02 08:36:29+00:00| seen| https://t.me/ctinow/161569...

GHSA-8V8W-V8XG-79RF

creationtimestamp| type| source ---|---|--- 2023-12-23 12:41:37+00:00| seen| https://t.me/ctinow/158804...

CVE-2023-50477

creationtimestamp| type| source ---|---|--- 2023-12-21 12:24:05+00:00| seen| https://t.me/ctinow/157648 2024-01-14 10:11:43+00:00| seen| https://t.me/ctinow/167987...

The vulnerability of the virtio_crypto_handle_sym_req function in the QEMU hardware emulation software allows a attacker to trigger a service failure.

The vulnerability of the virtiocryptohandlesymreq function in the QEMU hardware emulation software is related to writing beyond the buffer boundaries. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-6901 codelyfe Stupid Simple CMS HTTP POST Request handle-command.php os command injection

A vulnerability, which was classified as critical, was found in codelyfe Stupid Simple CMS up to 1.2.3. This affects an unknown part of the file /terminal/handle-command.php of the component HTTP POST Request Handler. The manipulation of the argument command with the input whoami leads to os...

Stupid Simple CMS Operating System Command Injection Vulnerability

Stupid Simple CMS is a content management system by codelyfe individual developer. Stupid Simple CMS 1.2.3 and earlier versions have an operating system command injection vulnerability, which stems from an operating system command injection vulnerability in the file /terminal/handle-command.php...

PT-2023-32810 · Codelyfe · Codelyfe Stupid Simple Cms

Name of the Vulnerable Software and Affected Versions: codelyfe Stupid Simple CMS versions up to 1.2.3 Description: A critical issue was found in the HTTP POST Request Handler component, specifically affecting the file /terminal/handle-command.php. The manipulation of the command argument with th...

CVE-2023-49804 Uptime Kuma Password Change Vulnerability

Uptime Kuma is an easy-to-use self-hosted monitoring tool. Prior to version 1.23.9, when a user changes their login password in Uptime Kuma, a previously logged-in user retains access without being logged out. This behavior persists consistently, even after system restarts or browser restarts. Th...

Security Bulletin: Multiple publicly disclosed libcurl vulnerabilities affect IBM Safer Payments

Summary Libcurl is used by IBM Safer Payments as part of the AVRO support for Kafka. These vulnerabilities have been addressed. Vulnerability Details CVEID:CVE-2023-32001 DESCRIPTION: cURL libcurl could allow a remote authenticated attacker to bypass security restrictions, caused by a race...

PT-2023-30841 · Arm · Mali Gpu Kernel Module

Name of the Vulnerable Software and Affected Versions: Mali GPU kernel module affected versions not specified Description: The issue is related to a possible out of bounds write due to improper input validation in the gpu pixel handle buffer liveness update ioctl function of the Mali GPU kernel...

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

Design/Logic Flaw

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

CVE-2023-46916

Maxima Max Pro Power 1.0 486A devices allow BLE traffic replay. An attacker can use GATT characteristic handle 0x0012 to perform potentially disruptive actions such as starting a Heart Rate monitor...

PT-2023-30260 · Unknown · Maxima Max Pro Power

Name of the Vulnerable Software and Affected Versions: Maxima Max Pro Power version 1.0 486A Description: The issue allows BLE traffic replay, enabling an attacker to perform potentially disruptive actions. This can be achieved by using the GATT characteristic handle 0x0012, for example, to start...

PT-2023-35621 · Git +1 · Wolfmqtt

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: The issue is related to a crash type of UNKNOWN READ. The crash state involves several functions: MqttProps Free, Handle Props, and MqttClient...

CVE-2023-36434

creationtimestamp| type| source ---|---|--- 2023-11-17 04:29:12+00:00| seen| https://t.me/arpsyndicate/199 2026-07-26 02:02:19+00:00| seen| https://t.me/EchelonEyes/2057 2026-07-27 00:00:56+00:00| seen| https://t.me/EchelonEyes/2057...

kernel: usb: typec: tcpci: fix of node refcount leak in tcpci_register_port()

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpci: fix of node refcount leak in tcpciregisterport I got the following report while doing devicemt6370-tcpc load test with CONFIGOFUNITTEST and CONFIGOFDYNAMIC enabled: OF: ERROR: memory leak, expected refcount 1...

PT-2023-8712 · Elfutils +3 · Elfutils +3

Name of the Vulnerable Software and Affected Versions: elfutils version 0.189 Description: The issue is related to a NULL pointer dereference via the handle verdef function at readelf.c in the elfutils utility. This could allow an attacker to cause a denial of service. Recommendations: For elfuti...

The vulnerability of the handle_symtab function in the readelf.c component of the ELF modification and analysis utility Elfutils allows a attacker to cause a service failure.

The vulnerability in the handlesymtab function of the readelf.c component of the ELF modification and analysis tool Elfutils involves executing a loop with an unreachable exit condition. Exploiting this vulnerability could allow an attacker to cause a service failure using a specially created fil...