9312 matches found
Beware! YouTube Videos Promoting Cracked Software Distribute Lumma Stealer
Threat actors are resorting to YouTube videos featuring content related to cracked software in order to entice users into downloading an information stealer malware called Lumma. "These YouTube videos typically feature content related to cracked applications, presenting users with similar...
Stable Channel Update for ChromeOS / ChromeOS Flex
Hello All, The Stable channel is being updated to 120.0.6099.203 Platform version: 15662.64.0 for most ChromeOS devices and will be rolled out over the next few days. If you find new issues, please let us know one of the following ways: File a bug Visit our Chrome OS communities General: Chromebo...
ARI Stream Quiz < 1.3.0 - Cross-Site Request Forgery
Description The ARI Stream Quiz plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 1.2.32. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to perform unauthorized actions against classes and...
Linux Kernel Security Vulnerability
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux Kernel, which stems from a contention issue with GC deletion of SKBs with unixstreamreadgeneric, leading to reuse after release...
Mozilla: Potential exposure of uninitialized data in <code>EncryptingOutputStream</code>
The Mozilla Foundation Security Advisory describes this flaw as: EncryptingOutputStream was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode...
Mozilla: Potential exposure of uninitialized data in <code>EncryptingOutputStream</code>
The Mozilla Foundation Security Advisory describes this flaw as: EncryptingOutputStream was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode...
Mozilla: Potential exposure of uninitialized data in <code>EncryptingOutputStream</code>
The Mozilla Foundation Security Advisory describes this flaw as: EncryptingOutputStream was susceptible to exposing uninitialized data. This issue could only be abused in order to write data to a local disk which may have implications for private browsing mode...
CVE-2023-52182
Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0...
Deserialization of untrusted data
Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0...
CVE-2023-52182 WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection
Deserialization of Untrusted Data vulnerability in ARI Soft ARI Stream Quiz – WordPress Quizzes Builder.This issue affects ARI Stream Quiz – WordPress Quizzes Builder: from n/a through 1.3.0...
CVE-2023-52182
AR I Stream Quiz – WordPress Quizzes Builder (ARI Stream Quiz) has a Deserialization of Untrusted Data vulnerability (PHP Object Injection) affecting versions up to 1.3.0. Exploitation requires authenticated access (Contributor+). The issue is mapped to CVE-2023-52182 and has been patched in late...
WordPress Plugin ARI Stream Quiz Code Issue Vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in the...
PT-2023-31937 · WordPress · Ari Stream Quiz – Wordpress Quizzes Builder
Name of the Vulnerable Software and Affected Versions: ARI Stream Quiz – WordPress Quizzes Builder versions 1.3.0 and earlier Description: The issue is related to the deserialization of untrusted data in ARI Stream Quiz – WordPress Quizzes Builder. This can potentially lead to security risks. No...
SUSE CVE-2023-6531
A use-after-free flaw was found in the Linux Kernel due to a race problem in the unix garbage collector's deletion of SKB races with unixstreamreadgeneric on the socket that the SKB is queued on...
WordPress ARI Stream Quiz Plugin <= 1.3.0 is vulnerable to PHP Object Injection
Software ARI Stream Quiz Type Plugin Vulnerable versions = 1.3.0 Fixed in 1.3.1 OWASP Top 10 A3: Injection Classification PHP Object Injection CVE CVE-2023-52182 Patch priority High CVSS severity High 9.9 Developer Claim ownership PSID c9a4f35de1f1 Credits Rafie Muhammad Patchstack Required...
WordPress ARI Stream Quiz Plugin <= 1.2.32 is vulnerable to Cross Site Request Forgery (CSRF)
Software ARI Stream Quiz Type Plugin Vulnerable versions = 1.2.32 Fixed in 1.3.0 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2023-51487 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 8ef1127b474b Credits Nguyen Xuan Chien...
MGASA-2023-0355 New chromium-browser-stable 120.0.6099.129 fixes bugs and vulnerabilities
The chromium-browser-stable package has been updated to the 120.0.6099.129 release, fixing bugs and 20 vulnerabilities, together with 120.0.6099.109, 120.0.6099.71 and 120.0.6099.62; some of them are listed below. High CVE-2023-6508: Use after free in Media Stream. Reported by Cassidy...
The vulnerability of the smc_encode_stream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library allows a perpetrator to gain access to confidential data and also trigger a service denial.
The vulnerability of the smcencodestream function in the libavcodec/smcenc.c component of the FFmpeg multimedia library relates to the execution of operations outside of the buffer boundaries in memory. Exploiting this vulnerability could allow a remote attacker to gain access to confidential dat...
The vulnerability of the MediaStream component in Google Chrome browsers allows a hacker to execute arbitrary code.
The vulnerability of the MediaStream component in Google Chrome browsers is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...