SUSE CVE-2022-47942

An issue was discovered in ksmbd in the Linux kernel 5.15 through 5.19 before 5.19.2. There is a heap-based buffer overflow in setntacldacl, related to use of SMB2QUERYINFOHE after a malformed SMB2SETINFOHE command...

SUSE SLES12 Security Update : python-py (SUSE-SU-2023:0395-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:0395-1 advisory. - CVE-2022-42969: Fixed an excessive resource consumption that could be triggered when interacting with a Subversion repository containing...

CVE-2023-21706

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2023-21529

Microsoft Exchange Server Remote Code Execution Vulnerability...

CVE-2023-21699

Technical details for CVE-2023-21699 are not provided in the connected documents. The initial description only notes an iSNS information disclosure vulnerability. Monitor for updates as more details become available.

Security feature bypass

SonicWall Email Security contains a vulnerability that could permit a remote unauthenticated attacker access to an error page that includes sensitive information about users email addresses...

KLA20237 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security...

tokyo.mochikaeri.info Cross Site Scripting vulnerability OBB-3193769

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-22360

CVE-2023-22360 affects JTEKT ELECTRONICS Screen Creator Advance 2: Use-after-free due to missing error handling when an error is detected in Ver.0.1.1.4 Build01 and earlier. Impact per sources: information disclosure and/or arbitrary code execution if a user opens a specially crafted project file...

PT-2023-35221

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description The issue is related to the EDAC/qcom driver in the Linux Kernel, where the llcc driv data is passed as edac device ctl info's pvt info. The actual impact and attack plausibility have not ye...

PT-2023-35283

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description The issue is related to the EDAC/qcom driver in the Linux Kernel, where llcc driv data is passed as edac device ctl info's pvt info. The actual impact and attack plausibility have not yet bee...

PT-2023-4730 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: The issue is related to the readVideoInfo method of LG Simple Editor, which lacks proper validation of user-supplied strings before executing system calls. This allows remote...

Information disclosure

In wlan driver, there is a possible missing permission check. This could lead to local information disclosure...

racerforms.scholarsportal.info Cross Site Scripting vulnerability OBB-3190675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

LOLDrivers

LOLDrivers - Living Off The Land Drivers 🚗💨 !CI buildhttps...

map.karpaty.info Cross Site Scripting vulnerability OBB-3190467

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New ESXiArgs Ransomware Variant Emerges After CISA Releases Decryptor Tool

After the U.S. Cybersecurity and Infrastructure Security Agency CISA released a decryptor for affected victims to recover from ESXiArgs ransomware attacks, the threat actors have bounced back with an updated version that encrypts more data. The emergence of the new variant was reported by a syste...

Powershell-Backdoor-Generator - Obfuscated Powershell Reverse Backdoor With Flipper Zero And USB Rubber Ducky Payloads

Reverse backdoor written in Powershell and obfuscated with Python. Allowing the backdoor to have a new signature after every run. Also can generate auto run scripts for Flipper Zero and USB Rubber Ducky. usage: listen.py -h --ip-address IPADDRESS --port PORT --random --out OUT --verbose --delay...

Design/Logic Flaw

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak...

almos-kit (1.0.0), alphamed-federated (>=0.1.2, <=0.3.8) +7 more potentially affected by CVE-2023-24816 via ipython (7.29.0)

ipython PYPI version 7.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - almos-kit 1.0.0 - alphamed-federated =0.1.2, =0.1.2, =0.0.1, =7.0.0, =4.0.0, =1.0.0, =0.0.0, =2.1.0, =2.2.0 Source cves: CVE-2023-24816 Source...