Information disclosure

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-33892

In fastDial service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-33881

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-32788

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-33898

CVE-2023-33898 concerns a vulnerability in the telephony service where a missing permission check can lead to local information disclosure without requiring privileges or user interaction. Multiple sources (NVD, Red Hat advisory, CVE listing, and related ecosystem data) describe it as a local dis...

CVE-2023-30937

In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-30937

CVE-2023-30937 describes a missing permission check in the telephony service that could allow local information disclosure with no extra privileges. Documents confirm this flaw affects the telephony component (noted in Red Hat/NVD records) and is associated with UNISOC chipsets/telephony implemen...

CVE-2023-30926

In opm service, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-30924

CVE-2023-30924 involves a missing permission check in the messaging service, enabling local information disclosure without extra execution privileges. The NVD entry assigns CVSS v3.1 base score 5.5 (Local, Low attack complexity, Privileges Required: Low, Confidentiality Impact: High) and notes it...

CVE-2023-30921

CVE-2023-30921 affects UNISOC chipsets (SC9863A/SC9832E/SC7731E/T610/T310/T606/T760/T618/T612/T616/T770/T820/S8000). Root cause: missing permission check in the messaging service, enabling local information disclosure with no additional execution privileges. Impact per sources: local confidential...

info-autoglass.ru Cross Site Scripting vulnerability OBB-3506231

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-35326

CVE-2023-35326 (Windows CDP User Components Information Disclosure) affects Windows CDP User Components and is rated CVSS v3.1 base 5.5 (LOCAL, Privileges Low, Confidentiality High). Evidence from NVD shows Information Disclosure vulnerability with Local access and high confidentiality impact; Mi...

CVE-2023-33174

Technical details about CVE-2023-33174 are not publicly provided in the connected documents. The materials mention a Windows cryptographic information disclosure vulnerability but do not specify affected components, root cause, versions, impact, or fixes. Monitor for updates.

PT-2023-3907 · Microsoft · Windows Dns Server +1

Name of the Vulnerable Software and Affected Versions: Windows DNS Server affected versions not specified Description: The issue is related to errors in synchronization when using a shared resource in the Windows DNS Server component. It allows a remote attacker to execute arbitrary code...

KB5028182: Windows 11 version 21H2 Security Update (July 2023)

The remote Windows host is missing security update 5028182. It is, therefore, affected by multiple vulnerabilities - Windows Routing and Remote Access Service RRAS Remote Code Execution Vulnerability CVE-2023-35365, CVE-2023-35366, CVE-2023-35367 - Windows Netlogon Information Disclosure...

Linux IPv6 kernel module Heap Buffer Overflow DoS

The vulnerability of the fibruleslookup function in the Linux IPv6 kernel module is related to access to resources through incompatible types when processing the values of rt6info and fib6info in the arg.result parameter. Exploiting this vulnerability could allow an attacker to cause a service...

PT-2023-3862 · Microsoft · Windows Transaction Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Transaction Manager affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Transaction Manager, allowing an attacker to elevate their privileges. This can affect the system...

guide2.info Cross Site Scripting vulnerability OBB-3494903

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SUSE CVE-2023-35934

yt-dlp is a command-line program to download videos from video sites. During file downloads, yt-dlp or the external downloaders that yt-dlp employs may leak cookies on HTTP redirects to a different host, or leak them when the host for download fragments differs from their parent manifest's host...

Nickelodeon Data Leak Labeled ‘Old’: Interview with @GhostyTongue Reveals Inside Info

By Waqas @GhostyTongue is a Twitter handle with inside information about the latest Nickelodeon data leak and has been posting clips and screenshots from the leaked data for the past couple of days. This is a post from HackRead.com Read the original post: Nickelodeon Data Leak Labeled Old:...