CVE-2023-29203 Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm

XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable from subwiki by requesting users on a subwiki which allows only global users with uorgsuggest.vm. This issue only concerns hidden users from main...

CVE-2023-29203 Unauthenticated user can have information about hidden users on subwikis through uorgsuggest.vm

XWiki Commons are technical libraries common to several other top level XWiki projects. It's possible to list some users who are normally not viewable from subwiki by requesting users on a subwiki which allows only global users with uorgsuggest.vm. This issue only concerns hidden users from main...

Security Bulletin: OpenSSL vulnerabilities affect IBM Integrated Management Module II (IMM2) for System x, Flex and BladeCenter systems

Summary OpenSSL vulnerabilities affect IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems. Vulnerability Details Summary OpenSSL vulnerabilities affect IBM Integrated Management Module II IMM2 for System x, Flex and BladeCenter systems. Vulnerability Details CVE-I...

CVE-2023-29850

SENAYAN Library Management System SLiMS Bulian v9.5.2 does not strip exif data from uploaded images. This allows attackers to obtain information such as the user's geolocation and device information...

CVE-2023-27651

An issue found in Ego Studio SuperClean v.1.1.9 and v.1.1.5 allows an attacker to gain privileges via the updateinfo field of the default.xml file...

CVE-2023-26918

creationtimestamp| type| source ---|---|--- 2023-04-14 07:30:39+00:00| seen| https://t.me/cibsecurity/62107...

PT-2023-21285

Name of the Vulnerable Software and Affected Versions Ego Studio SuperClean versions 1.1.5 through 1.1.9 Description An issue in Ego Studio SuperClean allows an attacker to gain privileges via the update info field of the default .xml file. Recommendations For versions 1.1.5 through 1.1.9, consid...

Ego Studio SuperClean 安全漏洞

Ego Studio SuperClean is a versatile, powerful phone cleaner and reliable optimizer for Android from Ego Studio, Inc. A security vulnerability exists in Ego Studio SuperClean version 1.1.9 and 1.1.5 that originates from a vulnerability that allows an attacker to gain privileges via the updateinfo...

FreeBSD : py39-py -- Regular expression Denial of Service vulnerability (28a37df6-ba1a-4eed-bb64-623fc8e8dfd0)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 28a37df6-ba1a-4eed-bb64-623fc8e8dfd0 advisory. - The py library through 1.11.0 for Python allows remote attackers to conduct a ReDoS Regular expressio...

Information disclosure

The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface...

PT-2023-19682 · Arista · Arista Cloudeos

Name of the Vulnerable Software and Affected Versions: Arista CloudEOS affected versions not specified Description: The issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch, causing a leak of packet buffers. If...

CVE-2023-21729 Remote Procedure Call Runtime Information Disclosure Vulnerability

...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2023-26773

creationtimestamp| type| source ---|---|--- 2023-04-11 00:22:55+00:00| seen| https://t.me/cibsecurity/61807...

PT-2023-11536 · Milken · Doyocms

Name of the Vulnerable Software and Affected Versions: Milken DoyoCMS version 2.3 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the background system settings. Recommendations: For Milken DoyoCMS version 2.3, update to a version that includ...

NewStart CGSL CORE 5.05 / MAIN 5.05 : shared-mime-info Vulnerability (NS-SA-2023-0007)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has shared-mime-info packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physica...

CVE-2023-1122

creationtimestamp| type| source ---|---|--- 2023-04-10 18:36:04+00:00| seen| https://t.me/cibsecurity/61762 2025-02-14 10:03:09+00:00| seen| Telegram/ff0a7uaIJ8siUZt3MNdeVpOYgZ0atFbnIUcN278zNWUUXJ...

CVE-2023-24709

creationtimestamp| type| source ---|---|--- 2023-04-09 12:35:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4136 2023-05-01 05:07:10+00:00| published-proof-of-concept| https://t.me/malwar3s/44 2025-02-28 22:27:40+00:00| published-proof-of-concept|...

eisenberg-info.de Cross Site Scripting vulnerability OBB-3254878

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1961

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=systeminfo. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the...