[SECURITY] Fedora 38 Update: wdt-1.32.1910230^20230711git3b52ef5-2.fc38

Warp speed Data Transfer is aiming to transfer data between two systems as fast as possible...

ROS-20231024-03

The OAuth2 token vulnerability of the cloud-based software for creating and utilizing Nextcloud storage Nextcloud data storage software is related to the storage of OAuth2 tokens in plaintext. Exploitation of the vulnerability could allow an attacker acting remotely to gain access to the server a...

PT-2023-29683 · Fastwpspeed · Fast Wp Speed

Name of the Vulnerable Software and Affected Versions: Fastwpspeed Fast WP Speed plugin version 1.0.0 Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This allows for malicious scripts to be injected into websites, potentially leading to unauthoriz...

CVE-2023-45770: Improper Neutralization of Input During Web Page Generation

Unauth. Reflected Cross-Site Scripting XSS vulnerability in Fastwpspeed Fast WP Speed plugin = 1.0.0 versions...

What is WAN Acceleration?

Hook: Network Sluggish? Learn What WAN Acceleration Is Ever been in a virtual meeting that froze at the worst possible moment? Or had your staff grumble about slow data transfers that are as slow as molasses? If your answer is a weary "yes," it's high time to turn your eyes toward WAN Acceleratio...

WordPress Fast WP Speed Plugin <= 1.0.0 is vulnerable to Cross Site Scripting (XSS)

Software Fast WP Speed Type Plugin Vulnerable versions = 1.0.0 Fixed in N/A OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-45770 Patch priority Medium CVSS severity Medium 7.1 Developer Claim ownership PSID fdb1faff8b3d Credits LEE SE HYOUNG...

Missing of the distribution state updating

Lines of code Vulnerability details Impact The getEffectiveDistributionSpeed can return incorrect information. It can return distributionSpeed but the accrueTokens function will increase tokenAmountAccruedtoken only for the difference between token.balanceOfaddressthis and tokenAmountAccruedtoken...

Wrong calculation of APR in certain conditions.

Lines of code Vulnerability details Impact The wrong APR due to the miscalculation of effective distribution speed. Proof of Concept The functions Prime.sol/calculateAPR and Prime.sol/estimateAPR both uses the function calculateUserAPR which uses incomeDistributionYearly function. Now this functi...

PT-2023-29073

Name of the Vulnerable Software and Affected Versions Tenda AC10U version 1.0 US AC10UV1.0RTL V15.03.06.49 multi TDE01 Description A stack overflow issue was discovered via the speed dir parameter in the formSetSpeedWan function. This allows for potential exploitation. Recommendations For Tenda...

WordPress Asset CleanUp: Page Speed Booster Plugin <= 1.3.5.4 is vulnerable to Cross Site Scripting (XSS)

Software Asset CleanUp: Page Speed Booster Type Plugin Vulnerable versions = 1.3.5.4 Fixed in 1.3.5.5 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-33999 Patch priority High CVSS severity High 7.1 Developer Claim ownership PSID bc6a1c710d5a Credits Rafie Muhammad...

CVE-2023-37703

Tenda FH1203 V2.0.1.6 was discovered to contain a stack overflow via the speeddir parameter in the formSetSpeedWan function...

Meet unprecedented security challenges by leveraging MXDR services

We know customers of every size face ever-increasing security risks. In just the last 12 months the speed of attackers leveraging breaches is also increasing, as it only takes 72 minutes on average for an attacker to access private data from the time a user falls victim to a phishing email.1 Data...

PT-2023-3886

Name of the Vulnerable Software and Affected Versions Tenda FH1203 version 2.0.1.6 Description The issue is related to a stack overflow in the formSetSpeedWan function of the Tenda FH1203 router's firmware, which can be exploited by a remote attacker to cause a denial of service. The vulnerabilit...

[SECURITY] Fedora 37 Update: dav1d-1.2.1-1.fc37

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness...

[SECURITY] Fedora 38 Update: dav1d-1.2.1-1.fc38

dav1d is a new AV1 cross-platform Decoder, open-source, and focused on speed and correctness...

speed-fahrschule.de Cross Site Scripting vulnerability OBB-3456833

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Generative AI Assistant Makes Hunting Threats Faster

Learn how analysts can search for threats with greater accuracy, speed, and effectiveness...

malicious policyholder can forbid setRoleHolder/revokeExpiredRole/revokePolicy calls

Lines of code Vulnerability details Impact All policyholders can't trigger functions related to setRoleHolder, such as setRoleHolder/revokeExpiredRole/revokePolicy. So malicious hackers can achieve DoS or use expired roles for a long unexpected time. Proof of Concept In...

5 Must-Know Facts about 5G Network Security and Its Cloud Benefits

5G is a game changer for mobile connectivity, including mobile connectivity to the cloud. The technology provides high speed and low latency when connecting smartphones and IoT devices to cloud infrastructure. 5G networks are a critical part of all infrastructure layers between the end user and t...

[SECURITY] Fedora 38 Update: python-fastapi-0.95.2-1.fc38

FastAPI is a modern, fast high-performance, web framework for building APIs with Python 3.7+ based on standard Python type hints. The key features are: =EF=BF=BD=EF=BF=BD=EF=BF=BD Fast: Very high performance, on par with NodeJS and Go thanks to Starlette and Pydantic. One of the fastest Python...