12071 matches found
Ubuntu: Security Advisory (USN-6073-7)
The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-6073-7 python-glance-store regression
USN-6073-2 fixed a vulnerability in Glancestore. Unfortunately the update introduced a regression with detaching volumes. The security fix has been removed pending further investigation. We apologize for the inconvenience. Original advisory details: Jan Wasilewski and Gorka Eguileor discovered th...
Ubuntu 20.04 LTS / 22.04 LTS / 23.04 : Glance_store regression (USN-6073-7)
The remote Ubuntu 20.04 LTS / 22.04 LTS / 23.04 host has a package installed that is affected by a vulnerability as referenced in the USN-6073-7 advisory. USN-6073-2 fixed a vulnerability in Glancestore. Unfortunately the update introduced a regression with detaching volumes. The security fix has...
Store Creation Fails with "Set-DSNewClusterEnvironment" privilege related errors
The below error occured when the user is creating new stores on the Storefront server: Citrix.DeliveryServices.PowerShell.Command.RunnerInterfaces.Exceptions.PowerShellExecutionException: An error occurred running the command: 'Set-DSNewClusterEnvironment' Not possible to enable all the required...
CVE-2023-2815
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
CVE-2023-2815
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
Sql injection
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
CVE-2023-2815
The CVE-2023-2815 entry affects SourceCodester Online Jewelry Store 1.0. The vulnerability is in the file supplier.php of the POST Parameter Handler, where manipulating the suppid argument leads to SQL injection. It is exploitable remotely and exploits are publicly disclosed. Multiple sources con...
CVE-2023-2815 SourceCodester Online Jewelry Store POST Parameter supplier.php sql injection
A vulnerability classified as critical was found in SourceCodester Online Jewelry Store 1.0. Affected by this vulnerability is an unknown functionality of the file supplier.php of the component POST Parameter Handler. The manipulation of the argument suppid leads to sql injection. The attack can ...
OESA-2023-1289 redis security update
Redis is an advanced key-value store. It is often referred to as a dattructure server since keys can contain strings, hashes ,lists, sets anorted sets. Security Fixes: Redis is an open source, in-memory database that persists on disk. Authenticated users can use the HINCRBYFLOAT command to create...
SourceCodester Online Jewelry Store SQL注入漏洞
Online Jewelry Store is an online jewelry store by janobe individual developers. A SQL injection vulnerability exists in SourceCodester Online Jewelry Store version 1.0 due to unknown functionality in the file supplier.php in the component's POST parameter handler, which results in an sql injecti...
PT-2023-21595 · Sourcecodester · Sourcecodester Online Jewelry Store
Name of the Vulnerable Software and Affected Versions: SourceCodester Online Jewelry Store version 1.0 Description: A critical issue was found in the file supplier.php of the component POST Parameter Handler, where the manipulation of the suppid argument leads to sql injection. The attack can be...
This Cybercrime Syndicate Pre-Infected Over 8.9 Million Android Phones Worldwide
A cybercrime enterprise known as Lemon Group is leveraging millions of pre-infected Android smartphones worldwide to carry out their malicious operations, posing significant supply chain risks. "The infection turns these devices into mobile proxies, tools for stealing and selling SMS messages,...
Apple Thwarts $2 Billion in App Store Fraud, Rejects 1.7 Million App Submissions
Apple has announced that it prevented over $2 billion in potentially fraudulent transactions and rejected roughly 1.7 million app submissions for privacy and security violations in 2022. The computing giant said it terminated 428,000 developer accounts for potential fraudulent activity, blocked...
Online Computer and Laptop Store Arbitrary File Upload Vulnerability (CNVD-2023-40599)
Online Computer and Laptop Store is an online computer and laptop store. An arbitrary file upload vulnerability exists in Online Computer and Laptop Store v1.0, which stems from a failure to restrict file uploads at /classes/Users.php?f=save, and can be exploited by an attacker to cause remote co...
Redis 安全漏洞
Redis Labs Redis is an open source, ANSI C, web-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis Labs, Inc. that provides APIs in multiple languages. A security vulnerability exists in Redis version 7.0.10 that stems from a segmentation violation...
ChatGPT Scams Are Infiltrating Apple's App Store and Google Play
An explosion of interest in OpenAI’s sophisticated chatbot means a proliferation of “fleeceware” apps that trick users with sneaky in-app subscriptions...
DEBIAN-CVE-2022-42336
Mishandling of guest SSBD selection on AMD hardware The current logic to set SSBD on AMD Family 17h and Hygon Family 18h processors requires that the setting of SSBD is coordinated at a core level, as the setting is shared between threads. Logic was introduced to keep track of how many threads...
CVE-2023-30281
Insecure permissions vulnerability was discovered, due to a lack of permissions’s control in scquickaccounting before v3.7.3 from Store Commander for PrestaShop, a guest can access exports from the module which can lead to leak of personnal informations from pscustomer table sush as name / surnam...