subscription-manager: inadequate authorization of com.redhat.RHSM1 D-Bus interface allows local users to modify configuration

A vulnerability was found in subscription-manager that allows local privilege escalation due to inadequate authorization. The D-Bus interface com.redhat.RHSM1 exposes a significant number of methods to all users that could change the state of the registration. By using the...

DPIIC buffer error vulnerability

dpic is an implementation of the pic language. A security vulnerability exists in dpic version 2021.01.01, which stems from a buffer overflow vulnerability in thestorestring method of the dpic.y file...

FreeImage buffer error vulnerability

FreeImage is a cross-platform open source library for supporting popular graphic image formats. A denial of service vulnerability exists in FreeImage, which stems from a stack exhaustion issue in the Validate method of the PluginRAW.cpp file. An attacker could exploit this vulnerability to cause ...

radare2 buffer error vulnerability

radare2 is a set of libraries and tools for working with binary files. A security vulnerability exists in radare2 versions 5.4.2 and 5.4.0, which stems from a heap buffer overflow in the rsleb128 method...

DPIIC buffer error vulnerability

dpic is an implementation of the pic language. A security vulnerability exists in dpic version 2021.04.10, which stems from a buffer overflow vulnerability in the themakevar method of the dpic.y file...

dpic security vulnerabilities

dpic is an implementation of the pic language. A security vulnerability exists in dpic version 2021.01.01, which stems from a buffer overflow vulnerability in the theyylex method of the main.c file...

Dpic resource management error vulnerability

dpic is an implementation of the pic language. A security vulnerability exists in dpic version 2021.01.01, which stems from a post-release reuse vulnerability in thedeletestringbox method of the dpic.y file...

Debian: Security Advisory (DLA-3538-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2023-4483 · Red Hat +5 · Subscription-Manager +6

Name of the Vulnerable Software and Affected Versions: subscription-manager affected versions not specified Description: A flaw in the authorization procedure of the D-Bus interface com.redhat.RHSM1 allows local privilege escalation. The interface exposes several methods to all users, which can...

GHSA-P8GP-899C-JVQ9 Wallabag user can reset data unintentionally

Description wallabag was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily reset annotations, entries and tags, by the GET request to /reset/annotations, /reset/entries, /reset/tags, /reset/archived. This vulnerability has a CVSSv3.1 score of 4.3. You...

Wallabag user can reset data unintentionally

Description wallabag was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily reset annotations, entries and tags, by the GET request to /reset/annotations, /reset/entries, /reset/tags, /reset/archived. This vulnerability has a CVSSv3.1 score of 4.3. You...

OSV-2023-716 Security exception in org.springframework.expression.spel.ast.OpPlus.getValueInternal

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=61603 Crash type: Security exception Crash state: org.springframework.expression.spel.ast.OpPlus.getValueInternal org.springframework.core.convert.support.GenericConversionService$ConverterCache...

Color Prediction Game v1.0 - SQL Injection Vulnerability

Exploit Title: Color Prediction Game v1.0 - SQL Injection Exploit Author: Ahmet Ümit BAYRAM Vendor: https://www.codester.com/items/44411/color-prediction-game-php-script Tested on: Kali Linux & MacOS CVE: N/A Request POST /loginNow.php HTTP/1.1 Host: localhost Cookie:...

Attackers demand ransoms for stolen LinkedIn accounts

An ongoing campaign targeting LinkedIn accounts has led to victims losing control of their accounts, or being locked out following repeated login attempts. Whether the attackers are using brute force methods or credential stuffing isn't known, but because some victims are being being locked out...

PDF-XChange Editor Net.HTTP.requests Exposed Dangerous Function Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PDF-XChange Editor exportAsText Exposed Dangerous Method Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of PDF-XChange Editor. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the exportAsTex...

vim Denial of Service Vulnerability (CNVD-2023-64114)

Vim is a cross-platform text editor. A denial of service vulnerability exists in vim version 8.2.2348, which stems from a null pointer dereference issue that can be exploited by an attacker to cause a denial of service DoS via the exbufferall method...

Eliminate Advanced Endpoint Analysis scans on Mobile devices/iOS.

We have a pre-epa + ldap as the authentication method. Since we have EPA as pre-authentication when we try to access via the mobile devices such as Android/iPhone or iOS and other devices we won’t be able to access. As we know that EPA scan is not supported on mobile devices or iOS, therefore we...

How to migrate ns.conf from one appliance to another using Batch Configuration

Demystifying how to migrate the configuration of an existing NetScaler appliance to another NetScaler appliance...

Ivanti Avalanche dumpHeap Incorrect Permission Assignment Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Ivanti Avalanche. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dumpHeap method. The issue results from an incorrect permission assignment. An...