CVE-2023-29526 Async and display macro allow displaying and interacting with any document in restricted mode

XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In affected versions it's possible to display or interact with any page a user cannot access through the combination of the async and display macros. A comment with either macro will be execut...

CVE-2023-30608 Parser contains an inefficient regular expression in sqlparse

sqlparse is a non-validating SQL parser module for Python. In affected versions the SQL parser contains a regular expression that is vulnerable to ReDoS Regular Expression Denial of Service. This issue was introduced by commit e75e358. The vulnerability may lead to Denial of Service DoS. This...

PT-2023-22195 · Discourse · Discourse

Name of the Vulnerable Software and Affected Versions: Discourse versions prior to the latest tests-passed, beta and stable branches Description: This issue affects Discourse, an open source platform for community discussion. It is not exploitable on the default install of Discourse, requiring a...

PT-2023-22293 · Xwiki · Xwiki Platform

Name of the Vulnerable Software and Affected Versions: XWiki Platform versions prior to 14.10.2 XWiki Platform version 15.0 RC1 and earlier Description: The XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. In XWiki, every user can add...

PT-2023-2674 · Oracle · Oracle Graalvm Enterprise Edition

Name of the Vulnerable Software and Affected Versions: Oracle GraalVM Enterprise Edition versions 20.3.9, 21.3.5, and 22.3.1 Description: The issue is related to insufficient input validation in the Native Image component of Oracle GraalVM Enterprise Edition, allowing an unauthenticated attacker...

CVE-2023-30540 Chat poll data can still be queried from API after purging history in Nextcloud talk

Nextcloud Talk is a chat, video & audio call extension for Nextcloud. In affected versions a user that was added later to a conversation can use this information to get access to data that was deleted before they were added to the conversation. This issue has been patched in version 15.0.5 and it...

CVE-2023-30539 Users can set up workflows using restricted and invisible system tags in Nextcloud

Nextcloud is a personal home server system. Depending on the set up tags and other workflows this issue can be used to limit access of others or being able to grant them access when there are system tag based files access control or files retention rules. It is recommended that the Nextcloud Serv...

CVE-2023-30548 Path traversal vulnerability in gatsby-plugin-sharp

gatsby-plugin-sharp is a plugin for the gatsby framework which exposes functions built on the Sharp image processing library. The gatsby-plugin-sharp plugin prior to versions 5.8.1 and 4.25.1 contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. It...

PT-2023-16966 · WordPress · Wp Vr

Name of the Vulnerable Software and Affected Versions: WP VR WordPress plugin versions prior to 8.2.9 Description: The issue is related to a Reflected Cross-Site Scripting problem. It occurs because some parameters are not properly sanitised and escaped before being outputted back in the page. Th...

PT-2023-16937 · WordPress · W4 Post List

Name of the Vulnerable Software and Affected Versions: W4 Post List WordPress plugin versions prior to 2.4.6 Description: The issue arises because the plugin does not properly check access to password-protected posts before displaying their content. This could allow any authenticated users to...

PT-2023-13526 · Open Xchange · Ox App Suite

Name of the Vulnerable Software and Affected Versions: OX App Suite versions prior to 7.10.6-rev30 Description: The issue allows for XSS via an upsell trigger. Recommendations: For versions prior to 7.10.6-rev30, update to version 7.10.6-rev30 or later to resolve the issue...

PT-2023-10698 · Slack +1 · Slack +2

Name of the Vulnerable Software and Affected Versions: GitLab Community and Enterprise Edition versions 11.1.7 and earlier, 11.2.x through 11.2.3, 11.3.x through 11.3.0 Description: The issue is related to Cross Site Request Forgery CSRF in the Slack integration for issuing slash commands. This...

Security Bulletin: Vulnerability in Transport Layer Security Protocol Used in IBM System Networking Ethernet Switches (CVE-2011-3389)

Summary Earlier versions of the Transport Layer Security TLS protocol are affected by a publicly disclosed vulnerability that could allow information disclosure if an attacker is carrying out a man-in-the-middle attack. Customers can avoid the vulnerability byfollowing workarounds recommended by...

MaxContribution check can be bypassed to give a card high voting power

Lines of code Vulnerability details Proof of Concept ReraiseETHCrowdfund tries limit the voting power of each card by doing a min/maxContribution check in claim and claimMultiple. uint96 contribution = votingPower 1e4 / exchangeRateBps; uint96 maxContribution = maxContribution; // Check that the...

PT-2023-21292 · Unknown · Auto Dealer Management System

Name of the Vulnerable Software and Affected Versions: Auto Dealer Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. Recommendations: For Auto Dealer Management System version 1.0, update to a version that includes a fix for the SQL injection...

No check for minPrice and maxPrice in the deposit() function

Lines of code Vulnerability details Impact No check for minPrice and maxPrice in the deposit function could lead to unexpected consequences Proof of Concept In the function deposit function deposit address payable privatePool, address nft, uint256 calldata tokenIds, uint256 minPrice, uint256...

MAL-2023-246 Malicious code in deskpro-notifications-service (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d9e07cbfe7dbcfbce0bd86d7353862570a270265a771f2ed1da61bb8ddf101b9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

PT-2023-5726 · Tightvnc · Tightvnc

Name of the Vulnerable Software and Affected Versions: TightVNC versions prior to 2.8.75 Description: The issue is related to errors in privilege management, allowing remote attackers to escalate their privileges on the host operating system. This can be achieved by replacing legitimate files wit...

PT-2023-21300

Name of the Vulnerable Software and Affected Versions Void Tools Everything versions prior to 1.4.1.1022 Description The issue is related to a Regular Expression Denial of Service ReDoS. No information is provided about the estimated number of potentially affected devices worldwide or real-world...

PT-2023-6426 · Fortinet · Fortisoar

Name of the Vulnerable Software and Affected Versions: Fortinet FortiSOAR versions 7.3.0 through 7.3.1 Description: The issue is related to an improper neutralization of special elements used in a template engine, which allows an authenticated, remote attacker to execute arbitrary code via a...