605 matches found
le-beffroi.be Cross Site Scripting vulnerability OBB-3363351
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
le-roquebrune.com Cross Site Scripting vulnerability OBB-3330229
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Meta Uncovers Massive Social Media Cyber Espionage Operations Across South Asia
Three different threat actors leveraged hundreds of elaborate fictitious personas on Facebook and Instagram to target individuals located in South Asia as part of disparate attacks. "Each of these APTs relied heavily on social engineering to trick people into clicking on malicious links,...
Cross site request forgery (csrf)
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service...
CVE-2023-0775
The CVE-2023-0775 entry concerns Silicon Labs Gecko SDK Bluetooth LE stack. A malformed/invalid prepare write request command can exhaust memory, causing the LE stack to fail to handle subsequent connection requests and triggering a denial of service. Documents consistently tie this to the Gecko ...
CVE-2023-0775 Bluetooth LE Invalid prepare write request command leads to denial of service
An invalid ‘prepare write request’ command can cause the Bluetooth LE stack to run out of memory and fail to be able to handle subsequent connection requests, resulting in a denial-of-service...
CVE-2022-46843
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin = 2.0.4 versions...
CVE-2022-46843
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin = 2.0.4 versions...
Cross site scripting
Unauth. Reflected Cross-Site Scripting XSS vulnerability in Le Van Toan Woocommerce Vietnam Checkout plugin = 2.0.4 versions...
CVE-2022-46843
The CVE-2022-46843 entry concerns the WordPress Woocommerce Vietnam Checkout plugin by Le Van Toan, vulnerable in versions
Heap-based Buffer Overflow
Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow due to the generic pointer 'p' points to an inaccessible address in the getle32 function. The problem is essentially caused in PackLinuxElf32::elflookup at plxelf.cpp:5349. Remediation Upgrade upx to version...
Malicious code in py-controlgrandlib (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx f49120b7bea2c3bb526114a141b9574b185f9a5a21c7f1de6053a5f8d5135e91 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in libpullpywgrand (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx cd788d358574acc58786ac0e7eaf7a214b38ab6f346fa8472616c6bee0f2330e EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
Malicious code in py-intvisa (PyPI)
--- -= Per source details. Do not edit below this line.=- Source: checkmarx b5859dbc61a27f400ef302833b36dc11d33e542358bac23db5f50c4f4bbd4f88 EsqueleSquad group published nearly 6000 malicious PyPi and NPM packages, executing spyware and information-stealing malware...
SUSE CVE-2009-3084
The msnslpprocessmsg function in libpurple/protocols/msn/slpcall.c in the MSN protocol plugin in libpurple 2.6.0 and 2.6.1, as used in Pidgin before 2.6.2, allows remote attackers to cause a denial of service application crash via a handwritten aka Ink message, related to an uninitialized variabl...
SUSE CVE-2020-7065
In PHP versions 7.3.x below 7.3.16 and 7.4.x below 7.4.4, while using mbstrtolower function with UTF-32LE encoding, certain invalid strings could cause PHP to overwrite stack-allocated buffer. This could lead to memory corruption, crashes and potentially code execution...
CVE-2021-35952
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows a Remote attacker to change the time, date, and month via Bluetooth LE Characteristics on handle 0x0017...
Code injection
fastrack Reflex 2.0 W307SREFLEXv90.89 Activity Tracker allows a Remote attacker to change the time, date, and month via Bluetooth LE Characteristics on handle 0x0017...
