CVE-2023-24853 Improper Input Validation in HLOS

Memory Corruption in HLOS while registering for key provisioning notify...

PT-2023-30967 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A DOS vulnerability could allow an attacker to register a new VNF Virtual Network Function value. This action could trigger the args assets function...

PT-2023-7100 · Hitachi · Hitachi Ops Center Administrator

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Administrator versions prior to 10.9.3-00 Description: The issue is related to the insertion of sensitive information into log files, allowing local users to gain sensitive information. This is due to insufficient protectio...

PT-2023-19828 · Qualcomm · Snapdragon +96

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to memory corruption in HLOS when registering for key provisioning notify. No additional details are provided about the estimated...

APT34 Deploys Phishing Attack With New Malware

We observed and tracked the advanced persistent threat APT APT34 group with a new malware variant accompanying a phishing attack comparatively similar to the SideTwist backdoor malware. Following the campaign, the group abused a fake license registration form of an African government agency to...

CVE-2023-44166

The 'age' parameter of the processregistration.php resource does not validate the characters received and they are sent unfiltered to the database...

CVE-2023-44166 Online Movie Ticket Booking System v1.0 - Multiple Unauthenticated SQL Injections (SQLi)

The 'age' parameter of the processregistration.php resource does not validate the characters received and they are sent unfiltered to the database...

Join the new Microsoft Security experience at Microsoft Ignite 2023

During the past few years, we’ve managed a lot of change and disruption in our security work, in our lives, and in society at large. This year we’re excited to welcome back security leaders, aspiring leaders, and IT professionals—in person—to Microsoft Ignite from November 14 to 17, 2023, and...

PT-2023-29137 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue is related to the 'name' parameter of the process registration.php resource, which does not validate the characters received, and they are sent unfiltered to the database...

PT-2023-29138 · Undefined · Undefined

Name of the Vulnerable Software and Affected Versions: process registration.php affected versions not specified Description: The issue concerns the 'phone' parameter of the process registration.php resource, which does not validate the characters received. As a result, these characters are sent...

PT-2023-29136 · Online Movie Ticket Booking System +1 · Online Movie Ticket Booking System

Name of the Vulnerable Software and Affected Versions: process registration.php affected versions not specified Description: The issue is related to the 'age' parameter of the process registration.php resource, which does not validate the characters received, and they are sent unfiltered to the...

CVE-2023-41233

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

JetBrains TeamCity < 2023.05.3 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2023.05.3. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2023.05.3 stored XSS was possible during Cloud Profiles configuration CVE-2023-41248 - In JetBrains TeamCity before 2023.05....

CVE-2023-41233

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

CVE-2023-41233

Cross-site scripting vulnerability in Item List page registration process of Welcart e-Commerce versions 2.7 to 2.8.21 allows a remote unauthenticated attacker to inject an arbitrary script...

Customize VDA registration port for DaaS deployments

Change the VDA registration port in a DaaS deployment...

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data, allowing attackers to gain access to protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data, allowing attackers to gain access to protected information.

The vulnerability of the IBM Robotic Process Automation software lies in the insufficient protection of registration data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information...

WordPress Easy Registration Forms Plugin <= 2.1.1 is vulnerable to Sensitive Data Exposure

Software Easy Registration Forms Type Plugin Vulnerable versions = 2.1.1 Fixed in N/A OWASP Top 10 A3: Sensitive Data Exposure Classification Sensitive Data Exposure CVE CVE-2023-5134 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID a5bfe7a3054b Credits Lana Codes Required...

CVE-2023-5134

The Easy Registration Forms for WordPress is vulnerable to Information Disclosure via the 'erformsusermeta' shortcode in versions up to, and including, 2.1.1 due to insufficient controls on the information retrievable via the shortcode. This makes it possible for authenticated attackers, with...