CVE-2023-33257

Verint Engagement Management 15.3 Update 2023R2 is vulnerable to HTML injection via the user data form in the live chat...

PT-2023-24250 · Verint · Verint Engagement Management

Name of the Vulnerable Software and Affected Versions: Verint Engagement Management version 15.3 Update 2023R2 Description: The issue concerns HTML injection via the user data form in the live chat. This allows for potential malicious code injection. Recommendations: For Verint Engagement...

Zimbra Fixes A Zero-Day Vulnerability Exploited in Attacks

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The vulnerability CVE-2023-37580 in Zimbra Collaboration Suite ZCS version 8.8.15 is a Cross-Site Scripting XSS flaw in the Zimbra Classic Web Client interface. Its impact is severe as it can...

Mars: Reflected XSS on formaction parameter

The formaction parameter of the target application was found to contain a reflected Cross-Site Scripting XSS vulnerability. User-supplied data was reflected back without proper sanitization, allowing for the injection of malicious JavaScript code. The issue was compounded by potential cache...

Linux kernel out-of-bounds read vulnerability (CNVD-2023-62926)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An out-of-bounds read vulnerability exists in the Linux kernel, which stems from improper validation of user-supplied data and can be exploited by an attacker to cause an...

Apple macOS Ventura Information Disclosure Vulnerability (CNVD-2023-61767)

Apple macOS Ventura is a desktop operating system from the American company Apple. Apple macOS Ventura suffers from an information disclosure vulnerability that can be exploited by attackers to access sensitive user data...

CVE-2023-32654

A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.5. A user may be able to read information belonging to another user...

Apple Music for Android 安全漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. Apple macOS Ventura has an information disclosure vulnerability that can be exploited by an attacker to read information belonging to another user...

CVE-2023-38608

The issue was addressed with additional permissions checks. This issue is fixed in macOS Ventura 13.5. An app may be able to access user-sensitive data...

CVE-2023-38259

A logic issue was addressed with improved restrictions. This issue is fixed in macOS Monterey 12.6.8, macOS Ventura 13.5, macOS Big Sur 11.7.9. An app may be able to access user-sensitive data...

Esri ArcGIS Server Cross-Site Scripting Vulnerability

Esri ArcGIS Server is Esri's Web-oriented enterprise software platform for providing geolocation services. A cross-site scripting vulnerability exists in Esri ArcGIS Server that stems from the application's lack of effective filtering and escaping of user-supplied data; no details of the...

Apple macOS Ventura 安全漏洞

Apple macOS Ventura is a desktop operating system from the American company Apple. Apple macOS Ventura suffers from an information disclosure vulnerability that can be exploited by attackers to access sensitive user data...

PT-2023-4211 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.7.9 macOS versions prior to 12.6.8 macOS versions prior to 13.5 Description: A logic issue was addressed with improved restrictions, which may allow an app to access user-sensitive data. The issue is related to the...

CMS-Bank Mellat Payment Manager 1.0.0 Cross Site Scripting

==================================================================================================================================== | Title : CMS-Bank Mellat Payment Manager v1.0.0 Xss Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox...

The vulnerability of the Sandbox component in operating systems such as iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to gain access to confidential information.

The vulnerability of the Sandbox component in iOS, iPadOS, tvOS, watchOS, and macOS is related to authentication process errors. Exploiting this vulnerability can allow attackers to access confidential information and also retain user data...

CVE-2023-3459

The Export and Import Users and Customers plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'hfupdatecustomer' function called via an AJAX action in versions up to, and including, 2.4.1. This makes it possible for authenticated...

PT-2023-24105 · WordPress · Crudlab Jazz Popups

Name of the Vulnerable Software and Affected Versions: CRUDLab Jazz Popups plugin versions 1.8.7 and earlier Description: The issue is related to an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially...

PT-2023-24936 · WordPress · Export/Import Users/Customers

Name of the Vulnerable Software and Affected Versions: Export and Import Users and Customers plugin for WordPress versions up to, and including, 2.4.1 Description: The issue is related to a missing capability check on the hf update customer function, which is called via an AJAX action. This allow...

CVE-2023-2959

Authentication Bypass by Primary Weakness vulnerability in Oliva Expertise Oliva Expertise EKS allows Collect Data as Provided by Users. This issue affects Oliva Expertise EKS: before 1.2...

MyCompanyFiles Oliva Expertise EKS 授权问题漏洞

MyCompanyFiles Oliva Expertise EKS is a file management application from MyCompanyFiles, Inc. A security vulnerability exists in MyCompanyFiles Oliva Expertise EKS prior to version 1.2 that stems from an authentication bypass vulnerability that allows collection of user-supplied data...