CVE-2023-4093

CVE-2023-4093 : Reflected and persistent XSS in Fujitsu Arconte Áurea, version 1.5.0.0. Exploitation could inject malicious JavaScript, compromise the victim’s browser, redirect to malicious domains, or access information being viewed. Technical details present in multiple sources confirm the vul...

GHSA-6QJF-7G3J-QX25 Neos CMS Cross Site Scripting vulnerability

Cross Site Scripting XSS vulnerability in Neos CMS 8.3.3 allows a remote authenticated attacker to execute arbitrary code via a crafted SVG file uploaded to the neos/management/media component. To make use of this attack vector, the attacker must either be able to upload a maliciously crafted fil...

PT-2023-7788 · Nagios Xi · Nagios Xi

Name of the Vulnerable Software and Affected Versions: Nagios XI affected versions not specified Description: The issue is related to the Inbound/Outbound Transfer function of the Nagios XI monitoring tool. It involves the unencrypted storage of critical information in the xi options database...

CVE-2023-39446

The CVE-2023-39446 CSRF issue affects the Socomec MODULYS GP family web firmware (MOD3GP-SY-120K). Root cause: weaknesses in the web app’s user management allow an attacker to obtain header information to craft specially designed URLs and trigger actions when a legitimate user is logged in. Impac...

CVE-2023-41965

CVE-2023-41965 affects Socomec MODULYS GP (MOD3GP-SY-120K) Web firmware v01.12.10. The issue is insecure storage of sensitive information due to lack of authentication security, enabling information disclosure via web requests. Public exploitation details are not provided in the documents. PT-202...

Rust Implant Used in New Malware Campaign Against Azerbaijan

By Waqas KEY FINDINGS Organizations should take steps to protect themselves from this campaign by keeping software up to date,… This is a post from HackRead.com Read the original post: Rust Implant Used in New Malware Campaign Against Azerbaijan...

CVE-2023-39046

CVE-2023-39046 concerns TonTon-Tei_waiting Line v13.6.1. The documentation describes an information leak that enables an attacker to obtain the channel access token and send crafted messages. No root cause details or patch/fix information are provided in the connected documents. CVSS-like metrics...

CVE-2023-4988

CVE-2023-4988 affects Bettershop LaikeTui. The vulnerability is in the file index.php?module=system&action=uploadImg, where manipulating the imgFile argument enables unrestricted file upload. Attacks can be initiated remotely; the product does not use versioning, and the specific affected/unaffec...

CVE-2023-36658

creationtimestamp| type| source ---|---|--- 2023-09-15 12:25:15+00:00| seen| https://t.me/cibsecurity/70589...

Microsoft SharePoint Server Elevation of Privilege Vulnerability (CNVD-2023-72193)

Microsoft SharePoint Server is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An elevation o...

CVE-2019-8865

creationtimestamp| type| source ---|---|--- 2023-09-14 22:34:59+00:00| seen| https://t.me/cibsecurity/70517...

CVE-2019-8893

Rejected reason: This candidate is unused by its CNA...

CVE-2018-4761

Rejected reason: This candidate is unused by its CNA...

CVE-2018-4664

Rejected reason: This candidate is unused by its CNA...

CVE-2018-4637

Rejected reason: This candidate is unused by its CNA...

CVE-2017-13944

Rejected reason: This candidate is unused by its CNA...

CVE-2023-4832

CVE-2023-4832 affects Aceka Company Management. The issue is an SQL Injection due to improper neutralization of special elements in SQL commands, affecting versions prior to 3072. The root cause is improper input handling within the software’s SQL query construction, enabling injection payloads. ...

CVE-2012-2098

creationtimestamp| type| source ---|---|--- 2023-09-14 12:24:22+00:00| seen| https://t.me/cibsecurity/70433...

CVE-2023-4701

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

CVE-2023-21521

CVE-2023-21521 describes an SQL Injection in the BlackBerry AtHoc 7.15 Management Console (Operator Audit Trail). The affected component is the Management Console’s operator audit trail feature, where user-supplied input can be interpreted as SQL, enabling an attacker to read data from the databa...