Microsoft Releases October 2023 Security Updates

Microsoft has released updates to address multiple vulnerabilities in Microsoft software. A cyber threat actor can exploit some of these vulnerabilities to take control of an affected system. CISA encourages users and administrators to review Microsoft’s October 2023 Security Update Guidelink is...

Vulnerabilities in SICK Application Processing Unit

Vulnerabilities in SICK Application Processing Unit...

RSEC-2023-7 Denial of Service (DoS) and Arbitrary Code Execution (ACE) vulnerabilities

cmark-gfm, GitHub's extended CommonMark library, has multiple vulnerabilities. Versions prior to 0.29.0.gfm.6 suffer from a polynomial time complexity issue in the autolink extension, causing denial of service. Also, versions before 0.29.0.gfm.3 and 0.28.3.gfm.21 contain an integer overflow in...

BELL-CVE-2023-42755

Bulletin has no description...

SUSE-SU-2023:3989-1 Security update for libX11

This update for libX11 fixes the following issues: - CVE-2023-43786: Fixed stack exhaustion from infinite recursion in PutSubImage bsc1215684. - CVE-2023-43787: Fixed integer overflow in XCreateImage leading to a heap overflow bsc1215685. - CVE-2023-43785: Fixed out-of-bounds memory access in...

CVE-2023-43877

Rite CMS 3.0 has Multiple Cross-Site scripting XSS vulnerabilities that allow attackers to execute arbitrary code via a payload crafted in the Home Page fields in the Administration menu...

OPENSUSE-SU-2023:0270-1 Security update for Cadence

This update for Cadence fixes the following issues: - Fix security bugs related to use of Fixed Temporary Files. boo1213330, boo1213983, boo1213985...

BELL-CVE-2023-42753

Bulletin has no description...

BELL-CVE-2023-5156

Bulletin has no description...

BELL-CVE-2023-4504

Bulletin has no description...

CVE-2023-43375

Hoteldruid v3.0.5 was discovered to contain multiple SQL injection vulnerabilities at /hoteldruid/clienti.php via the annonascita, annoscaddoc, giornonascita, giornoscaddoc, linguacli, mesenascita, and mesescaddoc parameters...

SUSE-SU-2023:3713-1 Security update for skopeo

This update of skopeo fixes the following issues: - rebuild the package with the go 1.21 security release bsc1212475...

GHSA-7MP6-929P-PQHJ vulnerabilities

Vulnerabilities for packages: croc...

GHSA-7G3V-4GGR-XVJF vulnerabilities

Vulnerabilities for packages: croc...

GHSA-PPJH-XP5V-46WC vulnerabilities

Vulnerabilities for packages: croc...

From Caribbean shores to your devices: analyzing Cuba ransomware

Introduction Knowledge is our best weapon in the fight against cybercrime. An understanding of how various gangs operate and what tools they use helps build competent defenses and investigate incidents. This report takes a close look at the history of the Cuba group, and their attack tactics,...

BELL-CVE-2023-39318

Bulletin has no description...

BELL-CVE-2023-4244

Bulletin has no description...

PT-2023-7036

Name of the Vulnerable Software and Affected Versions Electron versions prior to 26.0.0-beta.13 Electron versions prior to 25.5.0 Electron versions prior to 24.7.1 Electron versions prior to 23.3.13 Electron versions prior to 22.3.19 Description The issue is related to improper code generation...

PT-2023-4981 · Aruba · Aruba 9000 Series Gateways +3

Name of the Vulnerable Software and Affected Versions: Aruba 9200 and 9000 Series Controllers and Gateways affected versions not specified Description: Vulnerabilities exist in the BIOS implementation that could allow an attacker to execute arbitrary code early in the boot sequence. An attacker...