Kategori: Girişimcilik

RECENT VULNERABILITIES

• CVE-2023-4259
  Two potential buffer overflow vulnerabilities at the following locations in the Zephyr eS-WiFi driver source code.
• CVE-2023-43325
  A reflected cross-site scripting (XSS) vulnerability in the data[redirect_url] parameter of mooSocial v3.1.8 allows attackers to steal user's session cookies and impersonate their account via a crafted URL.
• CVE-2023-43278
  A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account.
• CVE-2023-38907
  An issue in TPLink Smart bulb Tapo series L530 v.1.0.0 and Tapo Application v.2.8.14 allows a remote attacker to obtain sensitive information via session key in the message function.
• CVE-2023-4258
  In Bluetooth mesh implementation If provisionee has a public key that is sent OOB then during provisioning it can be sent back and will be accepted by provisionee.
• CVE-2023-43326
  mooSocial v3.1.8 was discovered to contain a cross-site scripting (XSS) vulnerability via the change email function.
• CVE-2023-43457
  An issue in Service Provider Management System v.1.0 allows a remote attacker to gain privileges via the ID parameter in the /php-spms/admin/?page=user/ endpoint.
• CVE-2023-5129
  With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. The ReadHuffmanCodes() function allocates the HuffmanCode buffer with a size that comes from an array of precomputed sizes: kTableSize. The color_cache_bits value defines which size to use. The kTableSize array only takes into account sizes for 8-bit first-level […]
• CVE-2023-43132
  szvone vmqphp
• CVE-2023-42753
  An array indexing vulnerability was found in the netfilter subsystem of the Linux kernel. A missing macro could lead to a miscalculation of the `h->nets` array offset, providing attackers with the primitive to arbitrarily increment/decrement a memory buffer out-of-bound. This issue may allow a local user to crash the system or potentially escalate their privileges […]