PT-2023-28530 · Unisoc (Shanghai) Technologies Co. +1 · Sc7731E/Sc9832E/Sc9863A/T310/T606/T612/T616/T610/T618/T760/T770/T820/S8000 +1

Name of the Vulnerable Software and Affected Versions: Firewall service affected versions not specified Description: The issue is related to a missing permission check in the firewall service, which could allow writing permission usage records of an app. This may lead to local information...

PT-2023-28494 · Unknown · Imsservice

Name of the Vulnerable Software and Affected Versions: imsservice affected versions not specified Description: The issue is related to a missing permission check in imsservice, which could allow writing permission usage records of an app. This may lead to local information disclosure without...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking by the engineermode service, with a possible method to write a privilege usage log of an application...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...

CVE-2023-47633: Uncontrolled Resource Consumption

Traefik is an open source HTTP reverse proxy and load balancer. The traefik docker container uses 100% CPU when it serves as its own backend, which is an automatically generated route resulting from the Docker integration in the default configuration. This issue has been addressed in versions...

PT-2023-28573 · Unknown · Engineermode

Name of the Vulnerable Software and Affected Versions: EngineerMode service affected versions not specified Description: The issue is related to a missing permission check in the EngineerMode service, which could allow writing permission usage records of an app. This might lead to local informati...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets, which stems from a lack of privilege checking in the firewall service, with a possible method to write a record of an application's privilege usage...

UNISOC Chipsets Security Vulnerability

UNISOC Chipsets is a chipset from China's Purple Spreadtrum UNISOC. A security vulnerability exists in UNISOC Chipsets that stems from a lack of privilege checking in the ims service, with a possible method to write a privilege usage log of an application...

PT-2023-28517 · Unknown · Omacp Service

Name of the Vulnerable Software and Affected Versions: omacp service affected versions not specified Description: The issue is related to a missing permission check in the omacp service, which could allow writing permission usage records of an app. This may lead to local information disclosure...

PT-2023-28540 · Dialer · Dialer

Name of the Vulnerable Software and Affected Versions: Dialer affected versions not specified Description: The issue is related to a missing permission check in the dialer, which could allow writing permission usage records of an app. This could lead to local information disclosure without...

CVE-2023-48801

In TOTOLINK X6000RFirmware V9.4.0cu.852B20230719, the shttpd file sub415534 function obtains fields from the front-end, connects them through the snprintf function, and passes them to the CsteSystem function, resulting in a command execution vulnerability...

Google Unveils RETVec - Gmail's New Defense Against Spam and Malicious Emails

Google has revealed a new multilingual text vectorizer called RETVec short for Resilient and Efficient Text Vectorizer to help detect potentially harmful content such as spam and malicious emails in Gmail. "RETVec is trained to be resilient against character-level manipulations including insertio...

PT-2023-8187

Name of the Vulnerable Software and Affected Versions Go versions prior to 1.21.5 Go versions prior to 1.20.12 Description A malicious HTTP sender can use chunk extensions to cause a receiver reading from a request or response body to read many more bytes from the network than are in the body. A...

Exploit for OS Command Injection in Vsftpd_Project Vsftpd

CVE-2011-2523-poc This is a python3 script to exploit the CVE...

Mitsubishi Electric GX Works2

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 2.5 ATTENTION : Exploitable locally Vendor : Mitsubishi Electric Corporation Equipment : GX Works2 Vulnerability : Denial-of-Service 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a Denial-of-service DoS due to improper input...

How to verify disk space warnings on Storefront servers.

To verify what may be using disk space on a storefront server where the admin has received an alert that the server is low on disk space...

PT-2023-8836 · Nextchat · Nextchat

Name of the Vulnerable Software and Affected Versions: NextChat versions 2.11.2 and prior Description: The issue concerns a server-side request forgery and cross-site scripting vulnerability in NextChat, also known as ChatGPT-Next-Web. This vulnerability enables read access to internal HTTP...