CVE-2023-23444

CVE-2023-23444 affects SICK Flexi Classic and Flexi Soft Gateways with partnumbers: 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597. The issue is a missing authentication for a critical function that al...

CVE-2023-23444

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to...

SICK Flexi Classic 访问控制错误漏洞

SICK FX0-GENT00000 is a security control module from SICK with a built-in Ethernet switch. A security vulnerability exists in SICK Flexi Classic, Flexi Soft Gateways that originates from a vulnerability that could allow an unauthenticated, remote attacker to change the IP settings of the device v...

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

CVE-2023-23444: Missing Authentication for Critical Function

Missing Authentication for Critical Function in SICK Flexi Classic and Flexi Soft Gateways with Partnumbers 1042193, 1042964, 1044078, 1044072, 1044073, 1044074, 1099830, 1099832, 1127717, 1069070, 1112296, 1051432, 1102420, 1127487, 1121596, 1121597 allows an unauthenticated remote attacker to...

CVE-2023-25428: Uncontrolled Search Path Element

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

CVE-2023-25428

Soft-o Free Password Manager 1.1.20 is affected by a DLL hijacking flaw (PMHook.dll) that can lead to arbitrary code execution when a malicious DLL is loaded from the system directory. Details cited across CVE-2023-25428 entries (NVD/Red Hat/EUVD/PRION/CVE records) describe the vulnerability as a...

CVE-2023-25428

A DLL Hijacking issue discovered in Soft-o Free Password Manager 1.1.20 allows attackers to create arbitrary DLLs leading to code execution...

PT-2023-20056

Name of the Vulnerable Software and Affected Versions Soft-o Free Password Manager version 1.1.20 Description A DLL Hijacking issue allows attackers to create arbitrary DLLs, leading to code execution. Recommendations For Soft-o Free Password Manager version 1.1.20, consider disabling the loading...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

Xxe

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

Soft-o Free Password Manager 代码问题漏洞

Soft-o Free Password Manager is a password manager from Soft-o. A security vulnerability exists in Soft-o Free Password Manager version 1.1.20. An attacker could exploit this vulnerability to conduct a DLL hijacking attack...

CVE-2023-27527: Improper Restriction of XML External Entity Reference

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

PT-2023-21194

Name of the Vulnerable Software and Affected Versions Shinseiyo Sogo Soft versions 7.9A and earlier Description The issue improperly restricts XML external entity references XXE. By processing a specially crafted XML file, an attacker may access arbitrary files on the PC. Recommendations For...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

Soft-o Free Password Manager 1.1.20 DLL Hijacking

Title: Soft-o Free Password Manager 1.1.20 DLL hijacking Credit: Christian Bortone CVE: CVE-2023-25428 Date: 08/05/2023 dd/mm/yyyy Details: PMHook.dll is vulnerable to DLL hijacking attacks. An attacker can launch a DLL hijacking attack by placing a malicious DLL named PMHook.dll in the target...

CVE-2023-27527

Shinseiyo Sogo Soft 7.9A and earlier improperly restricts XML external entity references XXE. By processing a specially crafted XML file, arbitrary files on the PC may be accessed by an attacker...

CVE-2023-27527

CVE-2023-27527 affects Shinseiyo Sogo Soft (7.9A) and earlier, where XML external entity (XXE) processing improperly restricts external entities. A crafted XML file can allow an attacker to access arbitrary files on the PC. The issue is rooted in XXE handling in the software and is documented acr...

kernel: bpf: Add schedule points in batch ops

In the Linux kernel, the following vulnerability has been resolved: bpf: Add schedule points in batch ops syzbot reported various soft lockups caused by bpf batch operations. INFO: task kworker/1:1:27 blocked for more than 140 seconds. INFO: task hung in rcubarrier Nothing prevents batch ops to...