Minecraft 后置链接漏洞

Minecraft My World is a Swedish sandbox game by Mojang. A security vulnerability exists in Minecraft version 1.19, versions prior to 1.20 pre-releases 7. An attacker exploited the vulnerability to overwrite arbitrary files with specially crafted world data containing symbolic links and potentiall...

AZL-26939 CVE-2023-32067 affecting package nodejs18 for versions less than 18.17.1-2

c-ares is an asynchronous resolver library. c-ares is vulnerable to denial of service. If a target resolver sends a query, the attacker forges a malformed UDP packet with a length of 0 and returns them to the target resolver. The target resolver erroneously interprets the 0 length as a graceful...

PT-2023-36182 · Google · Go

Name of the Vulnerable Software and Affected Versions: golang-github-vpenso-prometheus slurm exporter affected versions not specified Description: The issue is related to a security release in go 1.19. The package golang-github-vpenso-prometheus slurm exporter has been rebuilt with this security...

PT-2023-36181 · Go +1 · Go +1

Name of the Vulnerable Software and Affected Versions: kubernetes1.18 version 1.18 Description: The issue is related to a security release in the go 1.19 package, which is used by kubernetes1.18. The package has been rebuilt with the go 1.19 security release to address the issue. Recommendations:...

CVE-2023-29838

Insecure Permission vulnerability found in Botkind/Siber Systems SyncApp v.19.0.3.0 allows a local attacker toe escalate privileges via the SyncService.exe file...

Siber Systems GoodSync 安全漏洞

Siber Systems GoodSync is reliable and powerful automatic file synchronization software from Siber Systems. A security vulnerability exists in Siber Systems GoodSync version v.19.0.3.0. An attacker exploits the vulnerability to escalate privileges via the SyncService.exe file...

PT-2023-23996 · Mitel · Mitel Mivoice Connect

Name of the Vulnerable Software and Affected Versions: Mitel MiVoice Connect versions through 19.3 SP2 22.24.1500.0 Description: The Linux DVS server component could allow an unauthenticated attacker with internal network access to execute arbitrary scripts due to improper access control...

CVE-2023-2677

A vulnerability, which was classified as critical, was found in SourceCodester Covid-19 Contact Tracing System 1.0. This affects an unknown part of the file admin/establishment/manage.php. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely...

PT-2023-20787 · Sourcecodester · Sourcecodester Covid-19 Contact Tracing System

Name of the Vulnerable Software and Affected Versions: SourceCodester Covid-19 Contact Tracing System version 1.0 Description: A critical issue was found in the SourceCodester Covid-19 Contact Tracing System, affecting the file admin/establishment/manage.php. The manipulation of the id argument...

Covid-19 Contact Tracing System SQL注入漏洞

Covid-19 Contact Tracing System is a new Crown Pneumonia Contact Tracing System by Carlo Montero Individual Developer. A SQL injection vulnerability exists in Covid-19 Contact Tracing System version 1.0, which stems from an incorrect manipulation of the parameter id resulting in sql injection...

SUSE-SU-2023:2177-1 Security update for buildah

This update of buildah fixes the following issues: - rebuild the package with the go 19.9 secure release bsc1200441...

Node.js: Regular Expression Denial of Service in Headers fetch API

Undici is an HTTP/1.1 client for Node.js. Prior to version 5.19.1, the Headers.set and Headers.append methods are vulnerable to Regular Expression Denial of Service ReDoS attacks when untrusted values are passed into the functions. This is due to the inefficient regular expression used to normali...

Microsoft Office Access 安全漏洞

Microsoft Office is an office software suite of products from the U.S. company Microsoft Microsoft. Commonly used components of this product include Word, Excel, Access, Powerpoint, FrontPage, and so on. A security vulnerability exists in Microsoft Office Access. The following products and editio...

PT-2023-22327 · Byronknoll · Byronknoll Cmix

Name of the Vulnerable Software and Affected Versions: ByronKnoll Cmix version 19 Description: A Buffer Overflow issue allows an attacker to execute arbitrary code and cause a denial of service via the paq8 function. Recommendations: For ByronKnoll Cmix version 19, consider disabling the paq8...

Cmix 安全漏洞

cmix is a lossless data compression program by Byron Knoll, a personal developer in the United States. It is designed to optimize the compression ratio at the cost of high CPU / memory usage. A security vulnerability exists in version v.19 of Cmix. An attacker could exploit this vulnerability to...

CVE-2023-21971

creationtimestamp| type| source ---|---|--- 2023-04-19 00:29:40+00:00| seen| https://t.me/cibsecurity/62396 2023-06-08 03:14:25+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4513...

CVE-2023-21934

Vulnerability in the Java VM component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Difficult to exploit vulnerability allows low privileged attacker having User Account privilege with network access via TLS to compromise Java VM. Successful attacks of this...

CVE-2023-21918

Vulnerability in the Oracle Database Recovery Manager component of Oracle Database Server. Supported versions that are affected are 19c and 21c. Easily exploitable vulnerability allows high privileged attacker having Local SYSDBA privilege with network access via Oracle Net to compromise Oracle...

Oracle Database Server 安全漏洞

Oracle Database Server is a set of relational database management system of the United States Oracle Oracle. The database management system provides data management, distributed processing and other functions. A security vulnerability exists in Oracle Database Server version 19c, version 21c. An...

PT-2023-2642 · Oracle · Oracle Database Server

Name of the Vulnerable Software and Affected Versions: Oracle Database Server versions 19c through 21c Description: The issue exists due to insufficient input validation in the Oracle Database Recovery Manager component of Oracle Database Server. This can be exploited by a remote attacker to caus...