CVE-2023-33110 Use of Out-of-range Pointer Offset in Audio

The session index variable in PCM host voice audio driver initialized before PCM open, accessed during event callback from ADSP and reset during PCM close may lead to race condition between event callback - PCM close and reset session index causing memory corruption...

CVE-2023-33033 Use of Out-of-range Pointer Offset in Audio

Memory corruption in Audio during playback with speaker protection...

CVE-2023-33033: Use of Out-of-range Pointer Offset

Memory corruption in Audio during playback with speaker protection...

CVE-2023-52180

creationtimestamp| type| source ---|---|--- 2023-12-31 12:26:29+00:00| seen| https://t.me/ctinow/161069 2024-01-01 01:31:44+00:00| seen| https://t.me/cibsecurity/74064 2024-01-22 10:11:23+00:00| seen| https://t.me/ctinow/171068...

CVE-2023-44088

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Pandora FMS on all allows SQL Injection. Arbitrary SQL queries were allowed to be executed using any account with low privileges. This issue affects Pandora FMS: from 700 through 774...

CVE-2023-32095

creationtimestamp| type| source ---|---|--- 2023-12-29 10:26:35+00:00| seen| https://t.me/ctinow/160400 2023-12-30 01:35:50+00:00| seen| https://t.me/cibsecurity/73915 2024-01-21 07:07:57+00:00| seen| https://t.me/ctinow/170754...

@58860ed6ffd9e897/gold-finger-extension (1.0.2), @airfleet/wordpress-dev (>=2.2.0, <=2.2.4) +271 more potentially affected by CVE-2023-52079 via msgpackr (>=1.2.9, <=1.10.0)

msgpackr NPM version =1.2.9, =2.2.0, =1.2.0, =0.3.0, =2.9.3, =2.3.0, =1.9.13, =0.84.3, =1.0.73, =1.0.73, =4.0.2-cmmn, =3.0.5, =1.0.55, =2.0.10 and more Source cves: CVE-2023-52079 Source advisory: OSV:GHSA-7HPJ-7HHX-2FGX...

CVE-2023-51094

creationtimestamp| type| source ---|---|--- 2023-12-26 19:27:11+00:00| seen| https://t.me/ctinow/159407 2023-12-30 08:16:27+00:00| seen| https://t.me/ctinow/160796 2024-01-19 13:11:54+00:00| seen| https://t.me/ctinow/170183...

Libstb stb_image.h Heap Buffer Overflow DoS

The vulnerability of the stbimage.h component in the C/C++ Libstb library relates to the execution of a loop with an unreachable exit condition. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created HDR file...

CVE-2023-7102

Use of a Third Party library produced a vulnerability in Barracuda Networks Inc. Barracuda ESG Appliance which allowed Parameter Injection.This issue affected Barracuda ESG Appliance, from 5.1.3.001 through 9.2.1.001, until Barracuda removed the vulnerable logic...

TOTOLINK EX1800T security vulnerabilities

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T setNtpCfg interface. The vulnerability stems from the failure of the tz parameter of the setNtpCfg interface of cstecgi .cgi to properly filter...

TOTOLINK EX1800T security vulnerabilities

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. A command execution vulnerability exists in the TOTOLINK EX1800T langType parameter. An attacker can exploit this vulnerability to execute arbitrary commands on the system...

TOTOLINK EX1800T security vulnerabilities

The TOTOLINK EX1800T is a Wi-Fi range extender from China's Gion Electronics TOTOLINK. The TOTOLINK EX1800T suffers from a command execution vulnerability that can be exploited by an attacker to execute arbitrary commands on the system...

PT-2023-32828 · WordPress +1 · Backup Migration +1

Name of the Vulnerable Software and Affected Versions: Backup Migration plugin for WordPress versions 1.0.8 through 1.3.9 Description: The issue allows unauthenticated attackers to include remote files on the server, resulting in code execution, via the content-dir HTTP header. Successful...

CVE-2023-47093

An issue was discovered in Stormshield Network Security SNS 4.0.0 through 4.3.21, 4.4.0 through 4.6.8, and 4.7.0. Sending a crafted ICMP packet may lead to a crash of the ASQ engine...

Input Validation for createPiece Function

Lines of code Vulnerability details Potential Risk: The createPiece function in the CultureIndex contract takes two parameters: metadata and creatorArray. While the function calls the validateCreatorsArray and validateMediaType functions to validate the input data, it does not verify whether the...

PT-2023-30705 · Smartertools · Smartermail

Name of the Vulnerable Software and Affected Versions: SmarterTools SmarterMail versions 8495 through 8664 Description: The issue allows stored XSS via a crafted description of a Calendar appointment. Recommendations: For versions 8495 through 8664, update to version 8747 or later to resolve the...

PT-2023-32788 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 3.9 through 3.9.6 GitHub Enterprise Server versions 3.10 through 3.10.3 GitHub Enterprise Server versions 3.11 through 3.11.0 Description: An improper authentication issue was identified in GitHub Enterprise...

SmarterTools SmarterMail Security Breach

SmarterTools SmarterMail is a set of mail server software from SmarterTools. The software supports spam filtering, statistics, Simple Mail Transfer Protocol SMTP authentication, and other features. A security vulnerability exists in SmarterTools SmarterMail versions 8495 through 8664, which stems...

CVE-2023-49148

Cross-Site Request Forgery CSRF vulnerability in Kulwant Nagi Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates.This issue affects Affiliate Booster – Pros & Cons, Notice, and CTA Blocks for Affiliates: from n/a through 3.0.5...