CVE-2024-36465

A low privilege regular Zabbix user with API access can use SQL injection vulnerability in include/classes/api/CApiService.php to execute arbitrary SQL commands via the groupBy parameter...

LibreChat groupid parameter access control error vulnerability

LibreChat is an enhanced ChatGPT clone. An Access Control Error vulnerability exists in versions of LibreChat prior to 0.7.6, which stems from the groupid parameter not verifying that the prompt ID provided belongs to the current user, and can be exploited by an attacker to cause the deletion of...

Linux Distros Unpatched Vulnerability : CVE-2023-1637

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw that boot CPU could be vulnerable for the speculative execution behavior kind of attacks in the Linux kernel X86 CPU Power management options functionali...

CVE-2024-43708

An allocation of resources without limits or throttling in Kibana can lead to a crash caused by a specially crafted payload to a number of inputs in Kibana UI. This can be carried out by users with read access to any feature in Kibana...

"Connection timeout" error when launching Desktop sessions

Users are unable to connect to Desktop Sessions. All connections fail with status "Connection Timeout"...

CVE-2022-23501 TYPO3 vulnerable to Improper Authentication in Frontend Login

TYPO3 is an open source PHP based web content management system. In versions prior to 8.7.49, 9.5.38, 10.4.33, 11.5.20, and 12.1.1 TYPO3 is vulnerable to Improper Authentication. Restricting frontend login to specific users, organized in different storage folders partitions, can be bypassed. A...

SAML: Getting "Your account cannot be added with this server address" error when accessing Citrix Access Gateway Vserver FQDN on Citrix Workspace

Users will see "Your account cannot be added with this server address" error when accessing Citrix Access Gateway Vserver FQDN on Citrix Workspace...

HCL Domino Login Cross-Site Request Forgery Vulnerability

HCL Domino is a suite of enterprise-class application development platforms from HCL India. HCL Domino has a security vulnerability. An attacker can exploit the vulnerability by tricking a user into accessing the system using another ID, or accessing the internal system from the internet using th...

SUSE-SU-2020:1767-1 Security update for the Linux Kernel (Live Patch 30 for SLE 12 SP2)

This update for the Linux Kernel 4.4.121-92114 fixes several issues. The following security issues were fixed: - CVE-2020-10757: Fixed an issue where remaping hugepage DAX to anon mmap could have caused user PTE access bsc1172437. - CVE-2019-15666: Fixed an out of bounds read xfrmpolicyunlink,...

Error: "Your apps are not available at this time" after upgrading to the new Workspace UI

After upgrading to the new Workspace UI, Citrix Cloud end users are no longer able to access their resources and receive the message "Your apps are not available at this time."...

CVE-2003-0699

The C-Media PCI sound driver in Linux before 2.4.21 does not use the getuser function to access userspace, which crosses security boundaries and may facilitate the exploitation of vulnerabilities, a different vulnerability than CVE-2003-0700...

CVE-1999-1346

PAM configuration file for rlogin in Red Hat Linux 6.1 and earlier includes a less restrictive rule before a more restrictive one, which allows users to access the host via rlogin even if rlogin has been explicitly disabled using the /etc/nologin file...

openbsdreadv.txt

Date: Mon, 27 Jul 1998 12:26:36 +0100 BST From: [email protected] To: [email protected] X-Send-Pr-Version: 3.97 Subject: kernel/549: Any user can panic OpenBSD machine Sender: [email protected] Number: 549 Category: kernel Synopsis: readv with -ve block size panics kernel Confidential: yes...

bigfoot-bellsouth-webmail.txt

Date: Fri, 8 Jan 1999 07:07:20 -0600 From: "Madere, Russel" To: [email protected] Subject: Bigfoot/Bellsouth Webmail bug I seem to have found another "bug" with the Bigfoot/Bellsouth Webmail. Users can log back into the service from cached pages. This is a huge security hole, especially for...