1635 matches found
win-joy.de Improper Access Control vulnerability OBB-3780399
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
JetBrains TeamCity Unauthenticated Remote Code Execution
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'JetBrains TeamCity Unauthenticated Remote Code Execution', 'Description' = %q This module exploits an authentication bypass vulnerability to...
CVE-2023-28538
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region...
Memory corruption
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region...
CVE-2023-28538 Stack-based Buffer Overflow in WIN Product
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region...
CVE-2023-28538 Stack-based Buffer Overflow in WIN Product
Memory corruption in WIN Product while invoking WinAcpi update driver in the UEFI region...
CVE-2023-28538
CVE-2023-28538 describes memory corruption in WIN Product when invoking the WinAcpi update driver in the UEFI region. The vulnerability is labeled with high impact (C, I, A = High) and is exploitable locally with low attack complexity and no user interaction required, requiring low privileges (pe...
Qualcomm Chipsets Buffer Error Vulnerability
Qualcomm Chipsets are a series of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption in WIN Product...
PT-2023-21786 · Unknown · Win Product
Name of the Vulnerable Software and Affected Versions: WIN Product affected versions not specified Description: The issue is related to memory corruption in the WIN Product when invoking the WinAcpi update driver in the UEFI region. Recommendations: At the moment, there is no information about a...
virtio-win bug fix and enhancement update
An update is available for virtio-win. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The virtio-win package provides paravirtualized network drivers for most...
Denial of Service (DoS)
Overview Microsoft.AspNetCore.App.Runtime.win-arm is a package providing a default set of APIs for building an ASP.NET Core application. Contains assets used for self-contained deployments. Affected versions of this package are vulnerable to Denial of Service DoS in .NET Kestrel where a malicious...
The vulnerability of the software for creating and managing graphical interfaces for user applications on industrial computers (iPC) and personal computers (PC/AT) – GP-Pro EX WinGP – arises from the operation of operations beyond the buffer in memory. This vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of software for creating and managing graphical interfaces for user applications on industrial computers iPC and personal computers PC/AT like GP-Pro EX WinGP lies in the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an...
Multiple Codesys Products Input Validation Error Vulnerability
3s-smart Software Solutions CODESYS is a controller development system from 3s-smart Software Solutions, Germany. An input validation error vulnerability exists in multiple Codesys products. The vulnerability stems from the fact that after successful authentication of a user's identity, a specifi...
@pnpm/exe (>=8.0.0 <=8.15.9) potentially affected by CVE-2023-37478 via @pnpm/win-x64 (>=8.0.0 <=8.6.7)
@pnpm/win-x64 NPM version =8.0.0, =8.0.0, =8.15.9 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...
@emberai/agent-node (>=1.1.0 <=1.2.0), @pnpm/beta (>=0.0.0 <=0.0.6-6.17.0) +1 more potentially affected by CVE-2023-37478 via @pnpm/win-x64 (>=0.0.0 <=7.33.3)
@pnpm/win-x64 NPM version =0.0.0, =1.1.0, =0.0.0, =6.17.1, =11.5.3 Source cves: CVE-2023-37478 Source advisory: OSV:GHSA-5R98-F33J-G8H7...
NYPD Body Cam Data Shows the Scale of Violence Against Protesters
A landmark $13 million settlement with the City of New York is the latest in a string of legal wins for protesters who were helped by a video-analysis tool that smashes the “bad apple” myth...
WordPress plugin Wp Ultimate Review 跨站脚本漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A cross-site scripting...
win-win.c-hrd.net Cross Site Scripting vulnerability OBB-3425714
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Winning together with Wiz: Introducing the Wiz Integration (WIN) platform for greater agility and flexibility to build best-of-breed cloud security programs
New integrations with industry-leading partners make Wiz the most composable and extensible cloud security platform in the market...
