CVE-2023-42320

Buffer Overflow vulnerability in Tenda AC10V4 v.USAC10V4.0siV16.03.10.13cnTDC01 allows a remote attacker to cause a denial of service via the mac parameter in the GetParentControlInfo function...

CVE-2023-42387

An issue in TDSQL Chitu management platform v.10.3.19.5.0 allows a remote attacker to obtain sensitive information via getdbinfo function in install.php...

Tencent TDSQL Chitu management platform Cross-Site Scripting Vulnerability

Tencent TDSQL Chitu management platform is a tdsql chitu management platform from China's Tencent Tencent. A cross-site scripting vulnerability exists in Tencent TDSQL Chitu management platform version v.10.3.19.5.0, which originated from a vulnerability that allows remote attackers to obtain...

Tenda AC10 Security Vulnerability

Tenda AC10 is a wireless router from Tenda China. A security vulnerability exists in the Tenda AC10V4 v.USAC10V4.0siV16.03.10.13cnTDC01 version, which originates from a vulnerability that allows remote attackers to cause a denial of service via the mac parameter in the GetParentControlInfo functi...

PT-2023-28326 · Unknown · Tdsql Chitu Management Platform

Name of the Vulnerable Software and Affected Versions: TDSQL Chitu management platform version 10.3.19.5.0 Description: An issue in the TDSQL Chitu management platform allows a remote attacker to obtain sensitive information via the get db info function in the install.php file. Recommendations: F...

koh.phangan.info Cross Site Scripting vulnerability OBB-3690573

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-41267 Apache HDFS Provider error message suggested installation of incorrect pip package

In the Apache Airflow HDFS Provider, versions prior to 4.1.1, a documentation info pointed users to an install incorrect pip package. As this package name was unclaimed, in theory, an attacker could claim this package and provide code that would be executed when this package was installed. The...

CVE-2023-4945

creationtimestamp| type| source ---|---|--- 2023-09-14 07:24:10+00:00| seen| https://t.me/cibsecurity/70425...

CVE-2022-48566

A constant-time-defeating optimization issue was found in python. This issue occurs when sending a specially crafted request, which could allow an attacker to obtain sensitive information. Mitigation As per upstream, either make the accumulator variable result a volatile unsigned char instead of...

GHSA-3QF9-QXFJ-4WHC Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability

Microsoft Security Advisory CVE-2023-36792: .NET Remote Code Execution Vulnerability Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 7.0 and .NET 6.0. This advisory also provides guidance on what developers can do to update thei...

CVE-2023-38152

Technical details about CVE-2023-38152 (affected product, vulnerable component, impact, or fixes) are not publicly provided in the connected documents; monitor for updates.

PT-2023-5001 · Microsoft · Visual Studio

Name of the Vulnerable Software and Affected Versions: Microsoft Visual Studio affected versions not specified Description: The issue is related to insufficient access control in Microsoft Visual Studio, which can be exploited to elevate privileges. Recommendations: At the moment, there is no...

Out-of-bounds

In MtpPropertyValue of MtpProperty.h, there is a possible out of bounds read due to uninitialized data. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2023-35683

In bindSelection of DatabaseUtils.java, there is a possible way to access files from other applications due to SQL injection. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

CVE-2023-28010 HCL Domino is susceptible to a sensitive information disclosure vulnerability

In some configuration scenarios, the Domino server host name can be exposed. This information could be used to target future attacks...

CVE-2023-40029

Argo CD is a declarative continuous deployment for Kubernetes. Argo CD Cluster secrets might be managed declaratively using Argo CD / kubectl apply. As a result, the full secret body is stored inkubectl.kubernetes.io/last-applied-configuration annotation. pull request 7139 introduced the ability ...

CVE-2023-41646

Buttercup v2.20.3 allows attackers to obtain the hash of the master password for the password manager via accessing the file /vaults.json/...

Oracle Linux 8 : kernel (ELSA-2020-1769)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1769 advisory. 4.18.0-193.el8.OL8 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was added to the kernel trusted keys list...

PT-2023-28372 · Zavio · Zavio Cf7500 +10

Name of the Vulnerable Software and Affected Versions: Zavio CF7500, CF7300, CF7201, CF7501, CB3211, CB3212, CB5220, CB6231, B8520, B8220, and CD321 with firmware version M2.1.6.05 Description: The issue is related to a command injection vulnerability in the implementation of binaries and handlin...

Oracle Linux 6 / 7 : Unbreakable Enterprise kernel (ELSA-2020-5753)

The remote Oracle Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-5753 advisory. - media: ttusb-dec: Fix info-leak in ttusbdecsendcommand Tomas Bortoli Orabug: 31351121 CVE-2019-19533 - can: peakusb: fix slab info leak Johan...