Month: June 2023

MCL-Net information disclosure | CVE-2023-34834

June 30, 2023

NAME__________MCL-Net information disclosurePlatforms Affected:MCL MCL-Net 4.3.5.8788Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________MCL-Net could allow a remote attacker to obtain sensitive information. By sending...

Job Board file upload |

June 30, 2023

NAME__________Job Board file uploadPlatforms Affected:Job Board Job Board 1.0Risk Level:5.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Job Board could allow a remote attacker to upload...

Multiple NETGEAR products weak security |

June 30, 2023

NAME__________Multiple NETGEAR products weak securityPlatforms Affected:NETGEAR RBR750 NETGEAR RBK842 NETGEAR RBR840 NETGEAR RBS840 NETGEAR RBK852 NETGEAR RBS850 NETGEAR MK62 NETGEAR...

Multiple NETGEAR products denial of service |

June 30, 2023

NAME__________Multiple NETGEAR products denial of servicePlatforms Affected:NETGEAR MK62 NETGEAR R6700v3 NETGEAR MR60 NETGEAR MS60 NETGEAR MR80 NETGEAR MS80 NETGEAR MK83...

NETGEAR R6700v3 command execution |

June 30, 2023

NAME__________NETGEAR R6700v3 command executionPlatforms Affected:NETGEAR R6700v3Risk Level:6Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________NETGEAR R6700v3 could allow a local authenticated attacker to execute arbitrary commands...

BKG Professional NtripCaster cross-site scripting | CVE-2023-3034

June 30, 2023

NAME__________BKG Professional NtripCaster cross-site scriptingPlatforms Affected:BKG NTRIP Caster 2.0.44Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________BKG Professional NtripCaster is vulnerable to cross-site scripting, caused...

Samsung devices with select Exynos modem chipsets information disclosure | CVE-2023-21512

June 30, 2023

NAME__________Samsung devices with select Exynos modem chipsets information disclosurePlatforms Affected:Samsung Devices with select Exynos modem chipsetsRisk Level:2.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Samsung devices...

Multiple NETGEAR products command execution |

June 30, 2023

NAME__________Multiple NETGEAR products command executionPlatforms Affected:NETGEAR RAX45 NETGEAR RAX43 NETGEAR RAX40v2 NETGEAR RAX35v2 NETGEAR RAX42 NETGEAR RAX38v2 NETGEAR RAXE500 NETGEAR...

GitLab denial of service | CVE-2023-2232

June 30, 2023

NAME__________GitLab denial of servicePlatforms Affected:GitLab GitLab 15.10 GitLab GitLab 16.0Risk Level:6.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________GitLab is vulnerable to a denial of...

NixOS calamares-nixos-extensions information disclosure | CVE-2023-36476

June 30, 2023

NAME__________NixOS calamares-nixos-extensions information disclosurePlatforms Affected:NixOS calamares-nixos-extensions 0.3.12Risk Level:7.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________NixOS calamares-nixos-extensions could allow a local attacker to obtain sensitive information,...

NETGEAR R8500 buffer overflow |

June 30, 2023

NAME__________NETGEAR R8500 buffer overflowPlatforms Affected:NETGEAR R8500Risk Level:7.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________NETGEAR R8500 is vulnerable to a stack-based buffer overflow, caused by improper...

Multiple NETGEAR products cross-site scripting |

June 30, 2023

NAME__________Multiple NETGEAR products cross-site scriptingPlatforms Affected:Netgear R8000 NETGEAR R7850 NETGEAR RAX45 NETGEAR LAX20 NETGEAR RAX43 NETGEAR RAX40v2 NETGEAR RAX35v2 NETGEAR...

Samsung devices with select Exynos modem chipsets security bypass | CVE-2023-21513

June 30, 2023

NAME__________Samsung devices with select Exynos modem chipsets security bypassPlatforms Affected:Samsung Devices with select Exynos modem chipsetsRisk Level:6.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Samsung devices...

Trellix Enterprise Security Manager command execution | CVE-2023-3313

June 30, 2023

NAME__________Trellix Enterprise Security Manager command executionPlatforms Affected:Trellix Enterprise Security Manager 11.6.3 Trellix Enterprise Security Manager 11.6.2Risk Level:7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Trellix Enterprise...

GitLab security bypass | CVE-2023-3444

June 30, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Enterprise Edition 16.1.0 GitLab Enterprise Edition 16.0.5 GitLab Enterprise Edition 15.11.9 GitLab Community Edition 16.1.0 GitLab...

GitLab denial of service | CVE-2023-3424

June 30, 2023

NAME__________GitLab denial of servicePlatforms Affected:GitLab Enterprise Edition 16.1.0 GitLab Enterprise Edition 16.0.5 GitLab Enterprise Edition 15.11.9 GitLab Community Edition 16.1.0...

GitLab security bypass | CVE-2023-2576

June 30, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Enterprise Edition 16.1.0 GitLab Enterprise Edition 16.0.5 GitLab Enterprise Edition 15.11.9 GitLab Community Edition 16.1.0 GitLab...

Ovarro TBox RTUs information disclosure | CVE-2023-36610

June 30, 2023

NAME__________Ovarro TBox RTUs information disclosurePlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

GitLab information disclosure | CVE-2023-3102

June 30, 2023

NAME__________GitLab information disclosurePlatforms Affected:GitLab Enterprise Edition 16.1.0 GitLab Enterprise Edition 16.0.5 GitLab Enterprise Edition 15.11.9 GitLab Community Edition 16.1.0 GitLab...

GitLab information disclosure | CVE-2023-2190

June 30, 2023

Ovarro TBox RTUs information disclosure | CVE-2023-36607

June 30, 2023

NAME__________Ovarro TBox RTUs information disclosurePlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

Ovarro TBox RTUs privilege escalation | CVE-2023-36609

June 30, 2023

NAME__________Ovarro TBox RTUs privilege escalationPlatforms Affected:Ovarro TBox LT2 Ovarro TBox MS-CPU32 Ovarro TBox MS-CPU32-S2 Ovarro TBox RM2 Ovarro TBox TG2Risk...

GitLab information disclosure | CVE-2023-3362

June 30, 2023

Mitsubishi Electric MELSEC-F Series security bypass | CVE-2023-2846

June 30, 2023

NAME__________Mitsubishi Electric MELSEC-F Series security bypassPlatforms Affected:Mitsubishi Electric FX3U-xMy/z x=1632486480128 y=TR z=ESESSDSDSS *1 Mitsubishi Electric FX3U-32MR/UA1 FX3U-64MR/UA1 *1Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security...

Month: June 2023

MCL-Net information disclosure | CVE-2023-34834

Job Board file upload |

Multiple NETGEAR products weak security |

Multiple NETGEAR products denial of service |

NETGEAR R6700v3 command execution |

BKG Professional NtripCaster cross-site scripting | CVE-2023-3034

Samsung devices with select Exynos modem chipsets information disclosure | CVE-2023-21512

Multiple NETGEAR products command execution |

GitLab denial of service | CVE-2023-2232

NixOS calamares-nixos-extensions information disclosure | CVE-2023-36476

NETGEAR R8500 buffer overflow |

Multiple NETGEAR products cross-site scripting |

Samsung devices with select Exynos modem chipsets security bypass | CVE-2023-21513

Trellix Enterprise Security Manager command execution | CVE-2023-3313

GitLab security bypass | CVE-2023-3444

GitLab denial of service | CVE-2023-3424

GitLab security bypass | CVE-2023-2576

Ovarro TBox RTUs information disclosure | CVE-2023-36610

GitLab information disclosure | CVE-2023-3102

GitLab information disclosure | CVE-2023-2190

Ovarro TBox RTUs information disclosure | CVE-2023-36607

Ovarro TBox RTUs privilege escalation | CVE-2023-36609

GitLab information disclosure | CVE-2023-3362

Mitsubishi Electric MELSEC-F Series security bypass | CVE-2023-2846

Unleashing the Power of Security Orchestration, Automation, and Response

Surge in UK Cyber-Attacks: NCSC Warns of Increasing Threat Severity

Chinese LIDAR Dominance Poses Cybersecurity Threat to U.S. National Security

Hydra Market Leader Sentenced to Life in Prison by Moscow Court

French Mobile Operators Unite to Combat Digital Fraud and Identity Theft

You may have missed