CVE-2023-33664

ai-dev aicombinationsonfly before v0.3.1 was discovered to contain a SQL injection vulnerability via the component /includes/ajax.php...

CVE-2023-35934

CVE-2023-35934 affects yt-dlp prior to 2023.07.06 and nightly 2023.07.06.185519. The issue: during file downloads, yt-dlp or its external downloaders may leak cookies by sending them as a Cookie header, including in the info JSON, causing cookies to be sent to domains/paths not scoped. All native...

CVE-2023-25124

CVE-2023-25124 (Milesight UR32L v32.3.0.5) is a set of buffer overflow vulnerabilities in the vtysh_ubus binary and related OpenVPN client handling. Talos documents a pre-authentication remote risk path via crafted requests that can trigger stack-based buffer overflows in functions such as set_op...

amediplast.com Cross Site Scripting vulnerability OBB-3480364

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

CVE-2023-30651

CVE-2023-30651 affects Samsung Mobile devices, due to an out-of-bounds read/write in the sysinput HAL service (callgetTspsysfs). The root cause is a buffer overrun in the HAL that handles system input; this enables local attackers to execute arbitrary code with high impact (confidentiality, integ...

CVE-2023-30647

CVE-2023-30647 is a heap out-of-bounds write vulnerability in the RILD component, specifically in the IpcRxUsimPhoneBookCapa path. It affects RILD prior to SMR Jul-2023 Release 1 and is described as allowing attackers to execute arbitrary code. Remediation per PT-2023-22841 is to update to SMR Ju...

CVE-2023-30323

Payatu ChatEngine v1.0 is affected by CVE-2023-30323 due to a SQL injection in the username field of /src/chatbotapp/chatWindow.java, enabling exposure of sensitive information. The root cause is a SQL injection vulnerability in the username input path; no detailed exploit specifics are provided ...

Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to libexpat denial of service( CVE-2022-43680)

Summary Potential libexpat denial of service vulnerability CVE-2022-43680 has been identified that may affect IBM Watson Assistant for IBM Cloud Pak for Data. Refer to details for additional information. Vulnerability Details CVEID:CVE-2022-43680 DESCRIPTION: libexpat is vulnerable to a denial of...

Summary of Vulnerabilities & Threats: June 2023

...

CVE-2023-37206

CVE-2023-37206 affects Mozilla Firefox: uploading files that contain symlinks could trick users into submitting data to a malicious site. The issue targets Firefox versions earlier than 115 and stems from insufficient validation of symbolic links in the file-system API. Public advisories and vend...

CVE-2023-34150 Apache Any23: Possible excessive allocation of resources reading input.

UNSUPPORTED WHEN ASSIGNED Use of TikaEncodingDetector in Apache Any23 can cause excessive memory usage...

CVE-2023-34150

CVE-2023-34150 affects Apache Any23 due to a flaw in TikaEncodingDetector that can cause excessive memory usage, potentially leading to denial of service. The vulnerability is documented across multiple sources (CVE records and related advisories), describing memory overuse as the primary impact....

_normalizeDecimals() Wrong calculation formula

Lines of code Vulnerability details Impact Wrong decimal place conversion, resulting in wrong quantity Proof of Concept in callOutSignedAndBridge The number of tokens will be converted to 18 decimal when packedData is performed. function callOutSignedAndBridgebytes calldata params, DepositInput...

Daimler Truck: CSRF + XSS REFLECT

Hello Daimler Truck Team! I found a reflected XSS at https://www.truck-privilege.daimlertruck.com/auth/lostLogin To make it reflected, CSRF - Cross-Site request Forgery was used together. An attacker can create a malicious website and trick the user into opening it, when the user opens it, he is...

CVE-2023-3493

Summary: CVE-2023-3493 affects Fossbilling’s fossbilling/fossbilling prior to 0.5.3, caused by improper neutralization of formula elements in CSV exports (CSV injection). Affected software: fossbilling/fossbilling (GitHub) before version 0.5.3; affected artifact is the CSV export/handling functio...

CVE-2023-36539

CVE-2023-36539 — Zoom Client for Meetings information disclosure . The connected OpenVAS/Nessus entries confirm a vulnerability in Zoom Client for Meetings affecting Windows, macOS, and Linux, where unintended exposure of data “intended to be encrypted” could disclose sensitive information. Affec...

CVE-2023-37365

CVE-2023-37365 affects hnswlib 0.7.0 and involves a double free in the function init_index when the M argument is a large integer. The available connected sources consistently state this as a double-free vulnerability in hnswlib’s init_index, with no detailed vendor/patch/version information prov...

CVE-2023-36471

CVE-2023-36471 affects XWiki Commons HTML sanitizer (XWiki Commons) where allowed tags include form/input elements. The underlying issue is that the HTML sanitizer allowed form-related tags since 14.6RC1, enabling an attacker without scripting rights to craft a form that could trigger remote code...

CVE-2023-3447

Summary (CVE-2023-3447): The WordPress plugin “Active Directory Integration / LDAP Integration” is vulnerable to LDAP Injection due to insufficient escaping of the supplied username in versions up to and including 4.1.5. This can allow unauthenticated attackers to extract potentially sensitive in...

Schneider Electric Quantum Ethernet Network Module Improper Check for Unusual or Exceptional Conditions (CVE-2020-7477)

A CWE-754: Improper Check for Unusual or Exceptional Conditions vulnerability exists in Quantum Ethernet Network module 140NOE771x1 Versions 7.0 and prior, Quantum processors with integrated Ethernet 140CPU65xxxxx all Versions, and Premium processors with integrated Ethernet all Versions, which...