Devolutions Workspace 安全漏洞

Devolutions Workspace is a mobile and desktop application from Devolutions Canada. A security vulnerability exists in Devolutions Workspace Desktop version 2023.1.1.3 and prior versions. An attacker could exploit the vulnerability to unlock Hub Workspace without being prompted to enter a password...

CVE-2023-2239 Exposure of Private Personal Information to an Unauthorized Actor in microweber/microweber

Exposure of Private Personal Information to an Unauthorized Actor in GitHub repository microweber/microweber prior to 1.3.4...

CVE-2023-2206

CVE-2023-2206 affects Campcodes Retro Basketball Shoes Online Store version 1.0, with a vulnerability in the file contactus.php where the email argument is susceptible to SQL injection . The issue allows remote exploitation and has been disclosed publicly. Multiple connected sources corroborate a...

DFIR via XDR: How to expedite your investigations with a DFIRent approach

Rapid technological evolution requires security that is resilient, up to date and adaptable. In this article, we will cover the transformation in the field of DFIR digital forensics and incident response in the last couple years, focusing on the digital forensics' aspect and how XDR fits into the...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab that originates from obtaining...

CVE-2023-30531

Jenkins Consul KV Builder Plugin 2.0.13 and earlier does not mask the HashiCorp Consul ACL Token on the global configuration form, increasing the potential for attackers to observe and capture it...

Palo Alto Networks GlobalProtect 安全漏洞

Palo Alto Networks GlobalProtect is a suite of network protection software from Palo Alto Networks, USA. The software provides firewall monitoring and threat prevention. A security vulnerability exists in Palo Alto Networks GlobalProtect that originates from a local file deletion vulnerability th...

safe-eval 安全漏洞

safe-eval is a safer version of the eval function from the Hage Yaapa Personal Developer. safe-eval suffers from a security vulnerability that stems from incorrect parameter cleanup of the safeEval function, leading to prototype contamination...

safe-eval 安全漏洞

safe-eval is a safer version of the eval function from the Hage Yaapa Personal Developer. safe-eval has a security vulnerability that stems from improper cleaning of input...

PT-2023-2449

Name of the Vulnerable Software and Affected Versions Microsoft Message Queuing MSMQ affected versions not specified Description The issue is related to a buffer overflow in memory, allowing a remote attacker to execute arbitrary code. This can affect the system, potentially leading to data leaks...

answer 安全漏洞

answer is an open source knowledge-based community software. A security vulnerability exists in answer versions prior to 1.0.8, which stems from the presence of sensitive information leaks...

ShipStation 安全漏洞

ShipStation is an e-commerce retail order carrier processing and shipping software from ShipStation. A security vulnerability exists in ShipStation version 1.1 and prior versions that stems from unchecked access to an endpoint, allowing a remote attacker to insert arbitrary information into the...

BHIMA 安全漏洞

BHIMA is a free, open source accounting and hospital information management system HIMS open source from IMAWorldHealth.org in Congo. A security vulnerability exists in Bhima version 1.27.0 that stems from not properly validating the permissions of certain operations that a user can perform...

BHIMA 安全漏洞

BHIMA is a free, open source accounting and hospital information management system HIMS open source from IMAWorldHealth.org in Congo. A security vulnerability exists in BHIMA version 1.27.0. An attacker exploited the vulnerability to update the permissions of any account registered in the...

Western Digital Hit by Network Security Breach - Critical Services Disrupted!

Data storage devices maker Western Digital on Monday disclosed a "network security incident" that involved unauthorized access to its systems. The breach is said to have occurred on March 26, 2023, enabling an unnamed third party to gain access to a "number of the company's systems." Following th...

RuoYi 安全漏洞

RuoYi is a backend management system for individual developers of RuoYi in China. A security vulnerability exists in RuoYi v4.7.6 and earlier versions. An attacker can exploit this vulnerability to download arbitrary files from the server...

Microsoft 3D Builder GLTF File Parsing Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Microsoft 3D Builder. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Grade Point Average GPA Calculator 安全漏洞

Grade Point Average GPA Calculator is an online and automated platform for calculating a student's grade point average or GPA built using the Bootstrap framework. A security vulnerability exists in SourceCodester Grade Point Average GPA Calculator version 1.0, which stems from an issue with the...

Gladinet CentreStack 安全漏洞

Gladinet CentreStack is a premier mobile access and secure sharing solution from Gladinet USA. Provides self-hosted cloud storage. A security vulnerability exists in Gladinet CentreStack versions prior to 13.5.9808. An attacker exploited the vulnerability to set a new password for any valid user...

Tesla 安全漏洞

Tesla is an electric vehicle from the American company Tesla. A security vulnerability exists in Tesla Model 3 that stems from the iceupdater component not properly validating user-supplied firmware...