8470 matches found
amerrugs.com Cross Site Scripting vulnerability OBB-4030735
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Dario Health USB-C Blood Glucose Monitoring System Starter Kit Android Application
RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to expose information, inject code, manipulate data, or achieve cross-site scripting XSS, resulting in full session compromise. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to...
Security Bulletin: Apache Derby vulnerability addressed in IBM JRS (Jazz Reporting Service) [CVE-2022-46337]
Summary Apache Derby might allow a remote attacker to bypass security restrictions caused by an LDAP injection vulnerability in the authenticator. This vulnerability affects IBM Jazz Reporting Service. This bulletin identifies the steps to take to mitigate the vulnerability. Vulnerability Details...
SUSE CVE-2022-49214
In the Linux kernel, the following vulnerability has been resolved: powerpc/64s: Don't use DSISR for SLB faults Since commit 46ddcb3950a2 "powerpc/mm: Show if a bad page fault on data is read or write." we use pagefaultiswriteregs-dsisr in badpagefault to determine if the fault is for a read or...
Incorrect Authorization
Overview Affected versions of this package are vulnerable to Incorrect Authorization via the Reporting API. An attacker can gain unauthorized access to sensitive report data by exploiting the flawed HTTP Basic Authentication implementation. Note: This is only exploitable if the API is enabled and...
Mautic allows Improper Authorization in Reporting API
Summary This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any...
CVE-2024-47053 Improper Authorization in Reporting API
This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. Improper Authorization: An authorization flaw exists in Mautic's API Authorization implementation. Any authenticated use...
DEBIAN-CVE-2022-49520
In the Linux kernel, the following vulnerability has been resolved: arm64: compat: Do not treat syscall number as ESRELx for a bad syscall If a compat process tries to execute an unknown system call above the ARMNRCOMPATEND number, the kernel sends a SIGILL signal to the offending process...
IBM Cognos Controller Authentication Bypass
The vulnerabilities of the software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller are related to deficiencies in the authentication process. Exploiting these vulnerabilities can allow an attacker to bypass security...
Cognos Controller Unprotected Accounting Data
The vulnerability of software solutions that support the closing, consolidation, and reporting processes of IBM Cognos Controller and IBM Controller lies in the use of rigidly encrypted account data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acces...
Security Bulletin: IBM JRS (Jazz Reporting Service) uses a web link with untrusted references to an external site.
Summary IBM JRS Jazz Reporting Service uses a web link with untrusted references to an external site. A remote attacker could exploit this vulnerability to expose sensitive information or perform unauthorized actions on the victims' web browser. The web application produces links to untrusted...
CVE-2025-26763
creationtimestamp| type| source ---|---|--- 2025-02-22 16:25:03+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/5035 2025-02-22 17:48:47+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114048796331755571 2025-02-22 19:10:17+00:00| seen|...
CVE-2023-51319
creationtimestamp| type| source ---|---|--- 2025-02-20 20:17:45+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4807 2025-02-20 21:48:43+00:00| seen| https://mastodon.social/users/CyberSignaler/statuses/114038415208279900...
Carrier Block Load
RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious actor to execute arbitrary code with escalated privileges. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such as: Minimize...
Exploit for Missing Authentication for Critical Function in Paloaltonetworks Pan-Os
CVE-2025-0108 - PAN-OS PoC SCRIPT /!\ Disclaimer: This...
CVE-2024-13592
creationtimestamp| type| source ---|---|--- 2025-02-19 08:16:30+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lijdjxrrav2g 2025-02-19 08:40:56+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/4780 2025-02-19 15:39:52+00:00| seen|...
CVE-2025-21702
creationtimestamp| type| source ---|---|--- 2025-02-18 15:18:03+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lihkmthdcy2p 2025-02-18 16:48:54+00:00| seen| https://t.me/cvedetector/18326 2025-02-18 20:35:37+00:00| seen|...
Elseta Vinci Protocol Analyzer
RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to escalate privileges and perform code execution on the affected system. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of this vulnerability, such...
CVE-2025-26775
creationtimestamp| type| source ---|---|--- 2025-02-17 12:13:20+00:00| seen| https://infosec.exchange/users/cve/statuses/114019165764888577 2025-02-17 12:16:29+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3liepzbipdh2i 2025-02-17 14:02:09+00:00| seen|...
