CVE-2023-45752 WordPress Post Gallery Plugin <= 2.3.12 is vulnerable to Cross Site Request Forgery (CSRF)

Cross-Site Request Forgery CSRF vulnerability in 10 Quality Post Gallery plugin = 2.3.12 versions...

CVE-2023-45752

CVE-2023-45752 is a CSRF vulnerability in the WordPress Post Gallery (aka Simple Post Gallery / Post Gallery) plugin, present in versions up to and including 2.3.12. The connected documents confirm the issue is CSRF and affects the plugin’s earlier releases; there is no explicit exploitation stat...

PT-2023-29668 · WordPress · 10 Quality Post Gallery

Name of the Vulnerable Software and Affected Versions: 10 Quality Post Gallery plugin versions prior to 2.3.12 Description: The issue is related to a Cross-Site Request Forgery CSRF vulnerability. This type of vulnerability allows an attacker to trick a user into performing unintended actions on ...

Siemens SICAM PAS/PQS Incorrect Privilege Assignment Vulnerability

Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. Siemens SICAM PAS/PQS suffers from an incorrect privilege assignment vulnerability that can be exploited by an attacker to read and modify configuration data in the context of an...

Siemens SICAM PAS/PQS Incorrect Privilege Assignment Vulnerability (CNVD-2023-75593)

Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. Siemens SICAM PAS/PQS suffers from an incorrect privilege assignment vulnerability that can be exploited to inject arbitrary code and elevate privileges to NT AUTHORITY/SYSTEM...

October 10, 2023—KB5031356 (OS Builds 19044.3570 and 19045.3570) - EXPIRED

None None...

IoT Secure Development Guide

Introduction This guide deals with threat modelling and early stages of development so that security issues and controls are identified before committing to manufacturing. Current attack methods, and the pitfalls we find in embedded designs, have been highlighted so that a finished product is as...

Siemens SICAM PAS/PQS 安全漏洞

Siemens SICAM PAS/PQS is a software from Siemens with an operating system for energy automation and power quality. Siemens SICAM PAS/PQS suffers from an incorrect privilege assignment vulnerability that can be exploited to inject arbitrary code and elevate privileges to NT AUTHORITY/SYSTEM...

October 10, 2023-KB5031225 Cumulative Update for .NET Framework 3.5, 4.8 and 4.8.1 for Windows 11, version 21H2

None None...

KB5031539: Servicing stack update for Windows 10, version 21H2 and 22H2: October 10, 2023

None None...

The vulnerability of D-Link DIR-846 router’s microprogramming software lies in the lack of protective measures for the website structure, allowing attackers to execute arbitrary code.

The vulnerability of D-Link DIR-846 router’s microprogramming software is related to the lack of measures taken to protect the website structure during the QoS POST process. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

CVE-2023-43284

D-Link Wireless MU-MIMO Gigabit AC1200 Router DIR-846 100A53DBR-Retail devices allow an authenticated remote attacker to execute arbitrary code via an unspecified manipulation of the QoS POST parameter...

The vulnerabilities of the Application Quality of Experience (AppQoE) and Unified Threat Defense (UTD) components of the Cisco IOS XE operating system allow attackers to trigger service interruptions.

The vulnerability of the Application Quality of Experience AppQoE and Unified Threat Defense UTD components of the Cisco IOS XE operating system is related to improper cleaning or release of resources. Exploiting this vulnerability can allow attackers to cause service interruptions...

[SECURITY] Fedora 38 Update: libvpx-1.13.0-5.fc38

libvpx provides the VP8/VP9 SDK, which allows you to integrate your applicati ons with the VP8 and VP9 video codecs, high quality, royalty free, open source co decs deployed on millions of computers and devices worldwide...

CVE-2023-20226

A vulnerability in Application Quality of Experience AppQoE and Unified Threat Defense UTD on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. This vulnerability is due to the...

PT-2023-5641 · Cisco · Cisco Ios Xe

Name of the Vulnerable Software and Affected Versions: Cisco IOS XE Software affected versions not specified Description: A vulnerability in Application Quality of Experience AppQoE and Unified Threat Defense UTD on Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause an...

OESA-2023-1680 mosquitto security update

Mosquitto is an open source message broker that implements the MQ Telemetry Transport protocol version 3.1 and 3.1.1 MQTT provides a lightweight method of carrying out messaging using a publish/subscribe model. This makes it suitable for "machine to machine" messaging such as with low power senso...

[SECURITY] Fedora 37 Update: libpano13-2.9.22-1.fc37

Helmut Dersch's Panorama Tools library. Provides very high quality manipulation, correction and stitching of panoramic photographs...

The vulnerability of the software for quality management systems in the automotive industry, related to the transmission of data in an open format, allows a attacker to perform a “Man-in-the-Middle” attack.

The vulnerability of quality management software for automobile manufacturers is related to the transmission of data in an open manner. Exploiting this vulnerability can allow a remote attacker to carry out a Middleware-In-The-Middle MITM attack...

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers allows a perpetrator to disclose protected information, perform arbitrary functions, or cause service failures.

The vulnerability of the QMS.Mobile module of the quality management software for automobile manufacturers, QMS Automotive, is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to disclose sensitive information, perform arbitrary functions, or...