Lucene search
+L

1433 matches found

Debian CVE
Debian CVE
added 2023/12/04 8:35 a.m.84 views

CVE-2023-6481

A serialization vulnerability in logback receiver component part of logback version 1.4.13, 1.3.13 and 1.2.12 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.7AI score0.00682EPSS
SaveExploits0
OSV
OSV
added 2023/11/29 12:30 p.m.9 views

GHSA-VMQ6-5M68-F53M logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.1CVSS6.9AI score0.009EPSS
SaveExploits0References10
OSV
OSV
added 2023/11/29 12:15 p.m.4 views

UBUNTU-CVE-2023-6378

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.5CVSS6.8AI score0.009EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2023/11/29 12:2 p.m.33 views

CVE-2023-6378 Logback "receiver" DOS vulnerability

A serialization vulnerability in logback receiver component part of logback version 1.4.11 allows an attacker to mount a Denial-Of-Service attack by sending poisoned data...

7.1CVSS7.6AI score0.009EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/29 12:0 a.m.5 views

logback code issue vulnerability

Quality Open Software Logback is a logging framework for Java applications from Quality Open Software, Switzerland. A security vulnerability exists in logback version 1.4.11, which stems from a denial of service DOS vulnerability in the component logback receiver...

7.5CVSS6.7AI score0.009EPSS
SaveExploits0References3
GitLab Advisory Database
GitLab Advisory Database
added 2023/11/29 12:0 a.m.52 views

logback serialization vulnerability

A serialization vulnerability in logback receiver component part of logback allows an attacker to mount a Denial-Of-Service attack by sending poisoned data. This is only exploitable if logback receiver component is deployed. See https://logback.qos.ch/manual/receivers.html...

7.5CVSS7AI score0.009EPSS
SaveExploits0References11Affected Software1
Citrix
Citrix
added 2023/11/28 12:0 a.m.7 views

iOS Receiver disconnects from session after one minute of activity

Citrix users using Receiver for iOS are disconnected from their Citrix session after working on the session by typing or clicking for around20-30 seconds. The users get the following error: "Cannot Connect. Check your network connection and try again. OK." If the users are not working on the...

6.8AI score
SaveExploits0
Code423n4
Code423n4
added 2023/11/13 12:0 a.m.15 views

RandomizerNXT allows randomness re-rolling and also front-running.

Lines of code Vulnerability details Description When a collection uses RandomizerNXT as the randomizer, the process of minting and setting the token hash happens in the same transaction and block, which allows two attacks. First, a user can see the randomness outcome in mempool and front-run his...

6.9AI score
SaveExploits0
GithubExploit
GithubExploit
added 2023/11/10 8:46 p.m.17 views

Exploit for SQL Injection in Code-Projects Blood_Bank

CVE-2023-46017-Code-Projects-Blood-Bank-1.0-SQL-Injection-Vuln...

5.5CVSS6.2AI score0.00355EPSS
SaveExploits5
Prion
Prion
added 2023/11/07 8:15 a.m.18 views

Input validation

Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege...

5CVSS7.1AI score0.00452EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2023/11/07 7:49 a.m.30 views

CVE-2023-42543

Improper verification of intent by broadcast receiver vulnerability in Bixby Voice prior to version 3.3.35.12 allows attackers to access arbitrary data with Bixby Voice privilege...

6.2CVSS7.7AI score0.00452EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/11/07 12:0 a.m.12 views

SAMSUNG Mobile devices security vulnerability

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from the South Korean company Samsung SAMSUNG. A security vulnerability previously existed in SAMSUNG Mobile devices version 3.3.35.12, which stemmed from improper validation of intent due to a...

7.5CVSS6.7AI score0.00452EPSS
SaveExploits0References2
Code423n4
Code423n4
added 2023/10/30 12:0 a.m.10 views

replay exploitation in StakedUSDeV2's unstake function

Lines of code Vulnerability details Impact The vulnerability in the unstake function of the StakedUSDeV2 contract allows the receiver to claim assets without considering the specific round from which they should receive the assets. The receiver can claim assets from a different round than intende...

7AI score
SaveExploits0
The Hacker News
The Hacker News
added 2023/10/16 12:11 p.m.56 views

SpyNote: Beware of This Android Trojan that Records Audio and Phone Calls

The Android banking trojan known as SpyNote has been dissected to reveal its diverse information-gathering features. Typically spread via SMS phishing campaigns, attack chains involving the spyware trick potential victims into installing the app by clicking on the embedded link, according to...

6.4AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2023/09/30 12:0 a.m.318 views

Electrolink FM/DAB/TV Transmitter SuperAdmin Hidden Functionality

Summary Since 1990 Electrolink has been dealing with design and manufacturing of advanced technologies for radio and television broadcasting. The most comprehensive products range includes: FM Transmitters, DAB Transmitters, TV Transmitters for analogue and digital multistandard operation, Bandpa...

8.7CVSS5.7AI score0.00551EPSS
SaveExploits1
OSV
OSV
added 2023/09/27 3:19 p.m.6 views

CVE-2023-44129

The vulnerability is that the Messaging "com.android.mms" app patched by LG forwards attacker-controlled intents back to the attacker in the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity. The attacker can abuse this functionality by launching this activity and then sending a...

3.3CVSS5.9AI score0.00094EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2023/09/27 12:0 a.m.9 views

PT-2023-29123 · Google · Com.Android.Mms

Name of the Vulnerable Software and Affected Versions: com.android.mms affected versions not specified Description: The issue allows an attacker to forward controlled intents back to themselves through the exported "com.android.mms.ui.QClipIntentReceiverActivity" activity in the Messaging app...

3.6CVSS3.9AI score0.00094EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/09/20 11:26 p.m.3 views

SUSE CVE-2023-43620

An issue was discovered in Croc through 9.6.5. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...

7.8CVSS7AI score0.00339EPSS
SaveExploits1References3
OSV
OSV
added 2023/09/20 6:30 a.m.29 views

GHSA-PPJH-XP5V-46WC Croc sender may send dangerous new files to receiver

An issue was discovered in Croc before 9.6.16. A sender may send dangerous new files to a receiver, such as executable content or a .ssh/authorizedkeys file...

7.8CVSS7.3AI score0.00339EPSS
SaveExploits1References7
OSV
OSV
added 2023/09/20 6:30 a.m.16 views

GHSA-364C-VVQX-446C Croc sender may place ANSI or CSI escape sequences in filename to attach receiver's terminal device

An issue was discovered in Croc before 9.6.16. A sender may place ANSI or CSI escape sequences in a filename to attack the terminal device of a receiver...

7.8CVSS7.3AI score0.00339EPSS
SaveExploits1References7
Rows per page
Query Builder