5033 matches found
Researchers Uncover New Exploit for PaperCut Vulnerability That Can Bypass Detection
Cybersecurity researchers have found a way to exploit a recently disclosed critical flaw in PaperCut servers in a manner that bypasses all current detections. Tracked as CVE-2023-27350 CVSS score: 9.8, the issue affects PaperCut MF and NG installations that could be exploited by an unauthenticate...
Google’s Authenticator App Now Lets You Sync 2FA Codes Across Devices
You can now sync sign-in codes across devices—but they aren’t end-to-end encrypted...
Google Authenticator App Gets Cloud Backup Feature for TOTP Codes
Search giant Google on Monday unveiled a major update to its 12-year-old Authenticator app for Android and iOS with an account synchronization option that allows users to back up their time-based one-time passwords TOTPs to the cloud. "This change means users are better protected from lockout and...
April 25, 2023—KB5025297 (OS Build 19045.2913) Preview
None None...
Spring cleaning tips for your browser
When you are resting up from the physical part of your spring cleaning and youre sitting behind your laptop or swiping left on your phone, why dont you speed up your browsing experience with a few simple actions? Lets start with your browser, as that usually has the most impact on your perception...
sync-sign.com Cross Site Scripting vulnerability OBB-3262624
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
openSUSE 15 Security Update : nextcloud-desktop (openSUSE-SU-2023:0090-1)
The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0090-1 advisory. - Nexcloud desktop is the Desktop sync client for Nextcloud. An attacker can inject arbitrary HyperText Markup Language into the Desktop Client...
com.openshift.jenkins:openshift-pipeline (>=1.0.22 <=1.0.57), io.fabric8.jenkins.plugins:openshift-sync (>=0.0.8 <=1.0.45) potentially affected by CVE-2023-30513 via org.csanchez.jenkins.plugins:kubernetes (>=0.10 <=1.18.2)
org.csanchez.jenkins.plugins:kubernetes MAVEN version =0.10, =1.0.22, =0.0.8, =1.0.45 Source cves: CVE-2023-30513 Source advisory: OSV:GHSA-V5HQ-CQQR-6W4G...
In the Linux kernel through 6.2.8 net/bluetooth/hci_sync.c allows out-of-bounds access because amp_init1[] and amp_init2[] are supposed to have an intentionally invalid element but do not.
...
Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)
Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)
Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)
Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Azure File Sync Agent v16.0 Release – January 2023 (KB5013877)
Update for Azure File Sync agent version 16.0.0.0. For more details, see the associated Microsoft Knowledge Base article...
Code injection
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...
CVE-2022-36059
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...
CVE-2022-36059 Prototype pollution in matrix-js-sdk
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. In versions prior to 19.4.0 events sent with special strings in key places can temporarily disrupt or impede the matrix-js-sdk from functioning properly, potentially impacting the consumer's ability to process data...
SUSE CVE-2023-28866
In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally invalid element, but do not...
AZL-25933 CVE-2023-28866 affecting package kernel for versions less than 5.15.122.1-2
In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally invalid element, but do not...
UBUNTU-CVE-2023-28866
In the Linux kernel through 6.2.8, net/bluetooth/hcisync.c allows out-of-bounds access because ampinit1 and ampinit2 are supposed to have an intentionally invalid element, but do not...
Linux kernel 缓冲区错误漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel version 6.2.8 and earlier, which stems from net/bluetooth/hcisync.c allowing out-of-bounds access...