15825 matches found
CVE-2023-47039
A vulnerability was found in Perl. This security issue occurs while Perl for Windows relies on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl interpreter, Perl attempts to find and execute cmd.exe within the operating system...
PT-2023-7203 · Perl · Perl
Name of the Vulnerable Software and Affected Versions: Perl affected versions not specified Description: A security issue occurs in Perl for Windows due to its reliance on the system path environment variable to find the shell cmd.exe. When running an executable that uses the Windows Perl...
Kubernetes Secrets of Fortune 500 Companies Exposed in Public Repositories
Cybersecurity researchers are warning of publicly exposed Kubernetes configuration secrets that could put organizations at risk of supply chain attacks. "These encoded Kubernetes configuration secrets were uploaded to public repositories," Aqua security researchers Yakir Kadkoda and Assaf Morag...
Weak Password Vulnerability in the Application Basic Service Management System of Xiamen Nalon Health Technology Co.
Founded in 2002, Xiamen Nalon Health Science & Technology Co., Ltd. is a high-tech enterprise integrating the research and development, production, sales and software service of medical electronic instruments and equipment. A weak password vulnerability exists in the application infrastructure...
The vulnerability of the Zoho ManageEngine Applications Manager software lies in its lack of measures to protect the website structure. This allows attackers to carry out cross-site scripting attacks and execute arbitrary code.
The vulnerability of the Zoho ManageEngine Applications Manager software lies in the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to carry out cross-site scripting attacks and execute arbitrary code...
CVE-2023-2449
The UserPro plugin for WordPress is vulnerable to unauthorized password resets in versions up to, and including 5.1.1. This is due to the plugin using native password reset functionality, with insufficient validation on the password reset function userproprocessform. The function uses the plainte...
The vulnerability of the Windows operating system’s kernel allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Windows operating system’s kernel is related to insufficient protection of sensitive data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
The vulnerability of the WordPress content management system’s newsletter plugin allows attackers to perform cross-site scripting attacks.
The vulnerability of the WordPress content management system’s newsletter plugin exists due to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks remotely...
Weak Encryption
upydev is vulnerable to Weak Encryption. The vulnerability is due to PKCS 1v1.5 padding used in the RSA algorithm. This could lead to a Bleichenbacher attack...
upydev has weak encryption padding
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
GHSA-QC4J-HRJ6-CPPF upydev has weak encryption padding
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
CVE-2023-6142
Dev blog v1.0 allows to exploit an XSS through an unrestricted file upload, together with a bad entropy of filenames. With this an attacker can upload a malicious HTML file, then guess the filename of the uploaded file and send it to a potential victim...
IBM CICS TX Advanced Weak Algorithm Vulnerability
IBM CICS TX is a comprehensive, single transaction runtime package from International Business Machines IBM. A weak algorithmic vulnerability exists in IBM CICS TX Advanced version 10.1, which stems from the use of a weak encryption algorithm that can be exploited by an attacker to decrypt highly...
CVE-2023-48051
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
CVE-2023-48051
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
Information disclosure
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
PYSEC-2023-302
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
CVE-2023-48051
An issue in /upydev/keygen.py in upydev v0.4.3 allows attackers to decrypt sensitive information via weak encryption padding...
PT-2023-7536 · Acer · Acer Wireless Keyboard Sk-9662
Name of the Vulnerable Software and Affected Versions: Acer Wireless Keyboard SK-9662 affected versions not specified Description: The issue is related to weak encryption in the Acer Wireless Keyboard SK-9662, allowing an attacker in physical proximity to decrypt wireless keystrokes and inject...
