Design/Logic Flaw

An issue was discovered on Bell HomeHub 3000 SG48222070 devices. Remote authenticated users can retrieve the serial number via cgi/json-req - this is an information leak because the serial number is intended to prove an actor's physical access to the device...

CVE-2023-6020

CVE-2023-6020 corresponds to a local file inclusion (LFI) in Ray, allowing unauthenticated readers to traverse the /static/ directory and read arbitrary server files. The Nuclei template and related advisories describe the vulnerability as a path traversal issue in Ray’s static/file serving behav...

CVE-2023-6038

CVE-2023-6038 describes a Local File Inclusion in the h2o-3 REST API (ImportFiles and ParseSetup endpoints). An unauthenticated attacker can read arbitrary files on the server with the h2o-3 process’s user permissions. Affected version identified in sources is 3.40.0.4. The issue is severity high...

CVE-2023-4771

A Cross-Site scripting vulnerability has been found in CKSource CKEditor affecting versions 4.15.1 and earlier. An attacker could send malicious javascript code through the /ckeditor/samples/old/ajax.html file and retrieve an authorized user's information...

CVE-2023-4771

CVE-2023-4771 is a CKEditor XSS vulnerability affecting CKEditor 4.x (notably versions 4.15.1 and earlier) where an attacker could inject JavaScript via the /ckeditor/samples/old/ajax.html sample to access an authorized user’s data. The CVSS base score is 6.1 (CVSSv3.1: AV:N/AC:L/PR:N/UI:R/S:C/C:...

CVE-2023-48134

nagayamacopabowl Line 13.6.1 is vulnerable to Exposure of Sensitive Information to an Unauthorized Actor...

CVE-2023-48134

CVE-2023-48134 affects nagayama_copabowl version 13.6.1. The vulnerability is described as Exposure of Sensitive Information to an Unauthorized Actor. Public documents consistently reference this version and issue, with CVSSv3.1 base score 7.5 (HIGH) and network attack vector, no user interaction...

CVE-2019-2968

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| seen| https://t.me/BABATATASASA/5989 2024-01-15 09:07:13+00:00| seen| https://t.me/ctinow/168228...

CVE-2019-2801

creationtimestamp| type| source ---|---|--- 2023-11-15 16:53:22+00:00| seen| https://t.me/BABATATASASA/5989...

Quarkus does not properly sanitize artifacts created from its use of the Gradle plugin, allowing certain build system information to remain

A flaw was found in Quarkus, where it does not properly sanitize artifacts created using the Gradle plugin, allowing certain build system information to remain. This flaw allows an attacker to access potentially sensitive information from the build system within the application...

Beyond Vulnerabilities: Why API Abuse Is a Critical Challenge

...

CVE-2023-47582

Access of uninitialized pointer vulnerability exists in TELLUS V4.0.17.0 and earlier and TELLUS Lite V4.0.17.0 and earlier. If a user opens a specially crafted file X1, V8, or V9 file, information may be disclosed and/or arbitrary code may be executed...

Siemens COMOS Buffer Overflow Vulnerability (CNVD-2023-86341)

COMOS is a unified data platform for collaborative plant design, operations and management that supports the collection, processing, preservation and distribution of information throughout the plant lifecycle. A buffer overflow vulnerability exists in Siemens COMOS, which can be exploited by an...

CVE-2022-46646

CVE-2022-46646 affects Intel® Unison™ software for Windows (before 20.14.5683.0), Android (before 20.14.4244), and iOS apps (before 20.14.2.3053). The description indicates potential information disclosure to an authenticated/unauthorized actor via local access. The connected sources explicitly p...

CVE-2023-45585

FortiSIEM contains a log file vulnerability (CWE-532) affecting multiple versions (7.0.0; 6.7.6 and below; 6.6.3 and below; 6.5.1 and below; 6.4.2 and below; 6.3.3 and below; 6.2.1 and below; 6.1.2 and below; 5.4.0; 5.3.3 and below) where an authenticated user could view an encrypted ElasticSearc...

Upcoming Speaking Engagements

This is a current list of where and when I am scheduled to speak: Im speaking at the AI Summit New York on December 6, 2023. The list is maintained on this page...

CVE-2023-46098

CVE-2023-46098 affects SIMATIC PCSneo (all versions before V4.1). The issue is a permissive cross-domain policy (CORS) in the Information Server that could let an attacker trick a legitimate user into triggering unwanted behavior. Impact is high (C/H/I/H/A/H) per CVSS; exploitation would require ...

Design/Logic Flaw

An issue in AsyncSSH before 2.14.1 allows attackers to control the extension info message RFC 8308 via a man-in-the-middle attack, aka a "Rogue Extension Negotiation."...

CVE-2023-46025

The CVE-2023-46025 entry affects phpgurukul Teacher Subject Allocation Management System 1.0, specifically the teacher-info.php file. A SQL Injection vulnerability arises from inadequate validation of the editid parameter, enabling attackers to execute arbitrary SQL and potentially exfiltrate sen...

CVE-2023-5037

badmonkey, a Security Researcher has found a flaw that allows for a authenticated command injection on the camera. An attacker could inject malicious into request packets to execute command. The manufacturer has released patch firmware for the flaw, please refer to the manufacturer's report for...