PT-2023-22498 · Unknown · Pfsense Ce

Name of the Vulnerable Software and Affected Versions: Pfsense CE version 2.6.0 Description: The issue is related to the absence of a rate limit, which can be exploited by an attacker to create multiple malicious users in the firewall. This can lead to potential security breaches. Recommendations...

Uvdesk Security Breach

Uvdesk is a complete ticket support system open source by Uvdesk India. A security vulnerability exists in Uvdesk v1.1.1. An attacker exploits the vulnerability to perform a brute force attack on the login page to gain access to the application...

Okta's Support System Breach Exposes Customer Data to Unidentified Threat Actors

Identity services provider Okta on Friday disclosed a new security incident that allowed unidentified threat actors to leverage stolen credentials to access its support case management system. "The threat actor was able to view files uploaded by certain Okta customers as part of recent support...

Hackers Stole Access Tokens from Okta’s Support Unit

Okta, a company that provides identity tools like multi-factor authentication and single sign-on to thousands of businesses, has suffered a security breach involving a compromise of its customer support unit, KrebsOnSecurity has learned. Okta says the incident affected a "very small number" of...

please Security breach

please is a sudo clone by the individual developer of ed neville. A security vulnerability exists in please 0.5.4 and earlier, which stems from allowing privilege escalation via TIOCSTI and/or TIOCLINUX ioctl...

Insyde InsydeH2O Security Breach

Insyde InsydeH2O is a C source from Insyde Corporation of Taiwan, which implements the new technology "EFI/UEFI" specification designed to replace the traditional BIOS Basic Input/Output System. A security vulnerability exists in Insyde InsydeH2O. An attacker could exploit this vulnerability to...

Artifact Hub Security Breach

Artifact Hub is a web-based application that finds, installs, and distributes packages and configurations for CNCF projects. A security vulnerability exists in Artifact Hub, which stems from the "registryIsDockerHub" function only checking if a registry domain has the suffix "docker.io"...

Kaibutsunosato security breach

Kaibutsunosato is an application. A security vulnerability exists in Kaibutsunosato version v13.6.1, which stems from an information disclosure vulnerability in the client. An attacker can exploit the vulnerability to obtain a channel access token and send a crafted broadcast message...

PT-2023-12787 · Texas Instruments · Texas Instruments Omap L138

Name of the Vulnerable Software and Affected Versions: Texas Instruments OMAP L138 secure variants affected versions not specified Description: The trusted execution environment TEE lacks a bounds check on the signature size field in the SK LOAD module loading routine, present in mask ROM. A modu...

OAuth2 client_secret stored in plain text in the database

None...

Lost and Found Information System security breach

Lost and Found Information System is a lost and found information system by oretnom23 Individual Developer. A security vulnerability exists in version 1.0 of the Lost and Found Information System, which stems from an insecure direct object reference vulnerability in the system that allows account...

Microsoft Edge Security Breach

Microsoft Edge is a web browser from Microsoft Corporation USA that comes with systems after Windows 10. Microsoft Edge has a security vulnerability that stems from the presence of a spoofing vulnerability...

Zephyr Security Breach

Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.4.0 and earlier versions, which stems from a buffer overflow vulnerability in the Zephyr IEEE 802.15.4 nRF 15.4 driver...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from a TBD component privilege bypass that has a possible way to access location information. This could lead to the disclosure of local information that requires system...

Matter Security Breach

Matter is a unified open source application layer connectivity standard designed to enable developers and device manufacturers to connect and build reliable, secure ecosystems and improve compatibility between connected home devices. Matter suffers from a security vulnerability that stems from a...

MAL-2023-8317 Malicious code in zf-apigility (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 76f7f25b98a2fb2e5c3d03a497a3732a067e5e1b6e7334a7aaf06310777b479e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Facebook Tacacs+ Security Breach

Facebook Tacacs+ is a daemon library from Facebook Inc. in the United States. A security vulnerability exists in versions prior to Facebook Tacacs+ 4fdf178, which stems from a lack of input validation, leading to a remote command execution vulnerability...

HelpDezk Security Breach

HelpDezk is a powerful software from HelpDezk Inc. for managing requests/events. A security vulnerability exists in HelpDezk version 1.1.10, which originated from a vulnerability that allows remote attackers to access the platform without authentication and retrieve personal data via jsonGrid...

Qualcomm Chip Security Breach

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits mainly semiconductor devices, but also passive components, etc., and from time to time are manufactured on the surface of semiconductor wafers. The Qualcomm chip has a security vulnerability that stems from...

Universitat Politècnica de València PEIX security breach

Universitat Politècnica de València PEIX is the web-based information management platform of the Universitat Politècnica de València Spain. A security vulnerability exists in Universitat Politècnica de València PEIX, which originates from an authorization bypass vulnerability in the component...