KLA20237 Multiple vulnerabilities in Mozilla Firefox

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, cause denial of service, execute arbitrary code, spoof user interface, obtain sensitive information. Below is a complete list of vulnerabilities: 1. Security...

tokyo.mochikaeri.info Cross Site Scripting vulnerability OBB-3193769

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2023-4730 · Lg · Lg Simple Editor

Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: The issue is related to the readVideoInfo method of LG Simple Editor, which lacks proper validation of user-supplied strings before executing system calls. This allows remote...

CVE-2023-22360

CVE-2023-22360 affects JTEKT ELECTRONICS Screen Creator Advance 2: Use-after-free due to missing error handling when an error is detected in Ver.0.1.1.4 Build01 and earlier. Impact per sources: information disclosure and/or arbitrary code execution if a user opens a specially crafted project file...

PT-2023-35283

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.231 Description The issue is related to the EDAC/qcom driver in the Linux Kernel, where llcc driv data is passed as edac device ctl info's pvt info. The actual impact and attack plausibility have not yet bee...

PT-2023-35221

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.166 Description The issue is related to the EDAC/qcom driver in the Linux Kernel, where the llcc driv data is passed as edac device ctl info's pvt info. The actual impact and attack plausibility have not ye...

Information disclosure

In wlan driver, there is a possible missing permission check. This could lead to local information disclosure...

racerforms.scholarsportal.info Cross Site Scripting vulnerability OBB-3190675

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

LOLDrivers

LOLDrivers - Living Off The Land Drivers 🚗💨 !CI buildhttps...

map.karpaty.info Cross Site Scripting vulnerability OBB-3190467

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

New ESXiArgs Ransomware Variant Emerges After CISA Releases Decryptor Tool

After the U.S. Cybersecurity and Infrastructure Security Agency CISA released a decryptor for affected victims to recover from ESXiArgs ransomware attacks, the threat actors have bounced back with an updated version that encrypts more data. The emergence of the new variant was reported by a syste...

Powershell-Backdoor-Generator - Obfuscated Powershell Reverse Backdoor With Flipper Zero And USB Rubber Ducky Payloads

Reverse backdoor written in Powershell and obfuscated with Python. Allowing the backdoor to have a new signature after every run. Also can generate auto run scripts for Flipper Zero and USB Rubber Ducky. usage: listen.py -h --ip-address IPADDRESS --port PORT --random --out OUT --verbose --delay...

Design/Logic Flaw

Dell PowerScale OneFS, versions 9.2.0.x through 9.4.0.x contain an information vulnerability. A remote unauthenticated attacker may potentially exploit this vulnerability to cause data leak...

almos-kit (1.0.0), alphamed-federated (>=0.1.2, <=0.3.8) +7 more potentially affected by CVE-2023-24816 via ipython (7.29.0)

ipython PYPI version 7.29.0 is affected by a known vulnerability. The following packages have a transitive dependency on ipython and may be impacted: - almos-kit 1.0.0 - alphamed-federated =0.1.2, =0.1.2, =0.0.1, =7.0.0, =4.0.0, =1.0.0, =0.0.0, =2.1.0, =2.2.0 Source cves: CVE-2023-24816 Source...

Malicious Package

Overview awsclie is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass impo...

Malicious Package

Overview certtifi is a malicious package. It attempts typosquatting popular packages. The malicious script is base64 obfuscated located in init.py file and tries to steal the current username, platform and IP information and send them to a remote host. Malicious behavior python import getpass...

PT-2025-49666

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An out-of-bounds array access exists in the AMD display driver within the dc dmub setup subvp dmub command function of the drivers/gpu/drm/amd/display/dc/dc dmub srv.c module. The issue...

USN-5861-1: Linux kernel (Dell300x) vulnerabilities

It was discovered that the NFSD implementation in the Linux kernel did not properly handle some RPC messages, leading to a buffer overflow. A remote attacker could use this to cause a denial of service system crash or possibly execute arbitrary code. CVE-2022-43945 Tamás Koczka discovered that th...

CVE-2023-24687

Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting XSS vulnerability in the Company Info Settings component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtCompanyName parameter...

Cross site scripting

Mojoportal v2.7.0.0 was discovered to contain a stored cross-site scripting XSS vulnerability in the Company Info Settings component. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the txtCompanyName parameter...