10524 matches found
CVE-2023-4388 EventON < 2.2 - Admin+ Stored XSS
The EventON WordPress plugin before 2.2 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...
Exploit for CVE-2023-38646
Metabase Pre-Auth RCE CVE-2023-38646 POC This is a python sc...
PT-2023-9353
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to a potential NULL pointer dereference in the fc lport ptp setup function. This function did not check the return value of fc rport create, which can return NULL an...
Endpoint Management - How to load balance Exchange Servers
Steps to set up load balancing for Exchange Servers in Endpoint Management to ensure high availability and seamless user experiences...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
RedTeamTool-CVE-2023-22515 â Vulnerability Exploitation Tool...
delegateMulti(...) Griefing Attack
Lines of code Vulnerability details Impact A call to delegateMulti... with the right parameters will consume much gas and waste memory for Proxy Delegators DoS costing the attacker very little. Proof of Concept Calling delegateMulti with many unique targets and amounts of 0 consumes Proxy...
PT-2023-9708
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the cxl region attach function in the Linux kernel, which can lead to a denial of service when cxl region setup targets fails. This failure prevents endpoint and...
Moderate: Red Hat Bug Fix Advisory: Red Hat Ansible Automation Platform 2.4 Setup Bundle Release Update
An update is now available for Red Hat Ansible Automation Platform 2.4 Setup Bundle Red Hat Ansible Automation Platform provides an enterprise framework for building, deploying and managing IT automation at scale. IT Managers can provide top-down guidelines on how automation is applied to...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
CVE-2023-22515 CVE-2023-22515, a critical vulnerability affec...
CVE-2023-36704
Windows Setup Files Cleanup Remote Code Execution Vulnerability...
CVE-2023-36704
Windows Setup Files Cleanup Remote Code Execution Vulnerability...
Remote code execution
Windows Setup Files Cleanup Remote Code Execution Vulnerability...
CVE-2023-36704
Converging details from connected documents indicate CVE-2023-36704, named Windows Setup Files Cleanup, is a remote code execution vulnerability in the Windows Setup Files Cleanup component. The KLA61358 entry explicitly notes a remote code execution vulnerability for Windows Setup Files Cleanup ...
CVE-2023-36704 Windows Setup Files Cleanup Remote Code Execution Vulnerability
...
CVE-2023-36704 Windows Setup Files Cleanup Remote Code Execution Vulnerability
...
October 10, 2023âKB5031364 (OS Build 20348.2031)
October 10, 2023âKB5031364 OS Build 20348.2031 Applies To Windows Server 2022 Note For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note...
Windows Setup Files Cleanup Remote Code Execution Vulnerability
...
CVE-2023-45208
A command injection in the parsingxmlstasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers within range of the repeater to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names...
CVE-2023-45208
A command injection in the parsingxmlstasurvey function inside libcgifunc.so of the D-Link DAP-X1860 repeater 1.00 through 1.01b05-01 allows attackers within range of the repeater to run shell commands as root during the setup process of the repeater, via a crafted SSID. Also, network names...
PT-2023-9152
Name of the Vulnerable Software and Affected Versions SpaceX Starlink Wi-Fi router Gen 2 versions prior to 2023.48.0 Description The issue is related to the lack of protection of the web page structure, allowing a remote attacker to conduct a cross-site scripting XSS attack via the ssid and...