PT-2023-21285

Name of the Vulnerable Software and Affected Versions Ego Studio SuperClean versions 1.1.5 through 1.1.9 Description An issue in Ego Studio SuperClean allows an attacker to gain privileges via the update info field of the default .xml file. Recommendations For versions 1.1.5 through 1.1.9, consid...

Ego Studio SuperClean 安全漏洞

Ego Studio SuperClean is a versatile, powerful phone cleaner and reliable optimizer for Android from Ego Studio, Inc. A security vulnerability exists in Ego Studio SuperClean version 1.1.9 and 1.1.5 that originates from a vulnerability that allows an attacker to gain privileges via the updateinfo...

Information disclosure

The Android version of pikpak v1.29.2 was discovered to contain an information leak via the debug interface...

PT-2023-19682 · Arista · Arista Cloudeos

Name of the Vulnerable Software and Affected Versions: Arista CloudEOS affected versions not specified Description: The issue in the Software Forwarding Engine Sfe can lead to a potential denial of service attack by sending malformed packets to the switch, causing a leak of packet buffers. If...

CVE-2023-21729 Remote Procedure Call Runtime Information Disclosure Vulnerability

...

CVE-2022-42477

An improper input validation vulnerability CWE-20 in FortiAnalyzer version 7.2.1 and below, version 7.0.6 and below, 6.4 all versions may allow an authenticated attacker to disclose file system information via custom dataset SQL queries...

CVE-2023-26773

creationtimestamp| type| source ---|---|--- 2023-04-11 00:22:55+00:00| seen| https://t.me/cibsecurity/61807...

NewStart CGSL CORE 5.05 / MAIN 5.05 : shared-mime-info Vulnerability (NS-SA-2023-0007)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has shared-mime-info packages installed that are affected by a vulnerability: - It was discovered that the gnome-shell lock screen since version 3.15.91 did not properly restrict all contextual actions. An attacker with physica...

PT-2023-11536 · Milken · Doyocms

Name of the Vulnerable Software and Affected Versions: Milken DoyoCMS version 2.3 Description: A Cross Site Request Forgery issue allows a remote attacker to execute arbitrary code via the background system settings. Recommendations: For Milken DoyoCMS version 2.3, update to a version that includ...

CVE-2023-1122

creationtimestamp| type| source ---|---|--- 2023-04-10 18:36:04+00:00| seen| https://t.me/cibsecurity/61762 2025-02-14 10:03:09+00:00| seen| Telegram/ff0a7uaIJ8siUZt3MNdeVpOYgZ0atFbnIUcN278zNWUUXJ...

CVE-2023-24709

creationtimestamp| type| source ---|---|--- 2023-04-09 12:35:46+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4136 2023-05-01 05:07:10+00:00| published-proof-of-concept| https://t.me/malwar3s/44 2025-02-28 22:27:40+00:00| published-proof-of-concept|...

eisenberg-info.de Cross Site Scripting vulnerability OBB-3254878

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-1961

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0. It has been classified as problematic. Affected is an unknown function of the file /admin/?page=systeminfo. The manipulation of the argument System Name leads to cross site scripting. It is possible to launch the...

binutils:fuzz_objcopy: Invalid-free in write_stabs_in_sections_debugging_info

Detailed Report: https://oss-fuzz.com/testcase?key=6229049113706496 Project: binutils Fuzzing Engine: centipede Fuzz Target: fuzzobjcopy Job Type: centipedeasanbinutils Platform Id: linux Crash Type: Invalid-free Crash Address: 0x621001368d20 Crash State: writestabsinsectionsdebugginginfo...

Uber data theft: Driver info stolen after law firm breached

Uber, yet again, has become a victim of data theft following a third-party breach. This time, threat actors have aimed at the company's law firm, Genova Burns. Data of Uber's drivers may have been swiped during the security incident. According to the letter sent to affected drivers, the firm beca...

CVE-2023-20675

CVE-2023-20675 concerns MediaTek platforms where the kernel/wlan component is vulnerable to an out-of-bounds read caused by a missing bounds check. The issue can lead to local information disclosure, with potentially full System privileges if exploited, and does not require user interaction. Conn...

PT-2023-20896 · Tenda · Tenda Ac10

Name of the Vulnerable Software and Affected Versions: Tenda AC10 US AC10V4.0si V16.03.10.13 cn Description: The issue is related to a stack overflow via the get parentControl list Info function, allowing attackers to cause a Denial of Service DoS or execute arbitrary code via a crafted payload...

Important: microcode_ctl

Issue Overview: Insufficient granularity of access control in out-of-band management in some IntelR Atom and Intel Xeon Scalable Processors may allow a privileged user to potentially enable escalation of privilege via adjacent network access. CVE-2022-21216 Incorrect default permissions in some...

PT-2025-40771

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The Linux kernel contains a use-after-free condition within the nilfs2 filesystem, specifically in the nilfs segctor thread function. The finalization process of nilfs segctor thread can...

PT-2025-41067

Name of the Vulnerable Software and Affected Versions Linux kernel versions 5.10.y and later Description The Linux kernel contains a flaw in the mm/swap component related to a race condition between swapoff and get swap pages when handling swap info struct. Specifically, the si-lock is not...