Month: August 2023

Cisco AsyncOS Software for Cisco Secure Web Appliance security bypass | CVE-2023-20215

August 4, 2023

NAME__________Cisco AsyncOS Software for Cisco Secure Web Appliance security bypassPlatforms Affected:Cisco AsyncOS for Secure Web Appliance Cisco Secure Web ApplianceRisk...

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26447

August 4, 2023

NAME__________Open-Xchange OX App Suite cross-site scriptingPlatforms Affected:Open-Xchange OX App Suite frontend 7.10.6-rev27Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Open-Xchange OX App Suite is vulnerable...

Keyfactor EJBCA denial of service | CVE-2023-34196

August 4, 2023

NAME__________Keyfactor EJBCA denial of servicePlatforms Affected:Keyfactor EJBCA 7.9.0Risk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Keyfactor EJBCA is vulnerable to a denial of service,...

F5 BIG-IP cross-site scripting | CVE-2023-38423

August 4, 2023

NAME__________F5 BIG-IP cross-site scriptingPlatforms Affected:F5 BIG-IP 13.1.0 F5 BIG-IP 15.1.0 F5 BIG-IP 14.1.0 F5 BIG-IP 16.1.0 F5 BIG-IP 13.1.5 F5...

Golang tiff package denial of service | CVE-2023-29407

August 4, 2023

NAME__________Golang tiff package denial of servicePlatforms Affected:Golang tiff 0.9.0Risk Level:5.5Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Golang tiff package is vulnerable to a denial...

Open-Xchange OX App Office information disclosure | CVE-2023-26441

August 4, 2023

NAME__________Open-Xchange OX App Office information disclosurePlatforms Affected:Open-Xchange OX App Suite Office 8.10Risk Level:6.9Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Open-Xchange OX App Office could allow...

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26448

August 4, 2023

F5 BIG-IP (APM) security bypass | CVE-2023-36858

August 4, 2023

NAME__________F5 BIG-IP (APM) security bypassPlatforms Affected:F5 BIG-IP (APM) 14.1.0 F5 BIG-IP (APM) 13.1.0 F5 BIG-IP (APM) 15.1.0 F5 BIG-IP (APM)...

Open-Xchange OX App Backend command execution | CVE-2023-26430

August 4, 2023

NAME__________Open-Xchange OX App Backend command executionPlatforms Affected:Open-Xchange OX App Suite Backend 7.10.6-rev42Risk Level:3.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Open-Xchange OX App Backend could allow...

F5 BIG-IP (APM) privilege escalation | CVE-2023-38418

August 4, 2023

NAME__________F5 BIG-IP (APM) privilege escalationPlatforms Affected:F5 BIG-IP (APM) 14.1.0 F5 BIG-IP (APM) 13.1.0 F5 BIG-IP (APM) 15.1.0 F5 BIG-IP (APM)...

F5 F5 F5OS-A information disclosure | CVE-2023-36494

August 4, 2023

NAME__________F5 F5 F5OS-A information disclosurePlatforms Affected:F5 F5OS-A 1.4.0Risk Level:4.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________F5 F5 F5OS-A could allow a local authenticated attacker to...

Open-Xchange OX App Backend server-side request forgery | CVE-2023-26438

August 4, 2023

NAME__________Open-Xchange OX App Backend server-side request forgeryPlatforms Affected:Open-Xchange OX App Suite Backend 7.10.6-rev42Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Open-Xchange OX App Backend is...

Golang Go denial of service | CVE-2023-29409

August 4, 2023

NAME__________Golang Go denial of servicePlatforms Affected:Golang Go 1.20 Golang Go 1.19.11 Golang Go 1.20.6 Golang Go 1.21.0-rc.3Risk Level:5.7Exploitability:UnprovenConsequences:Denial of Service...

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26450

August 4, 2023

Golang tiff package denial of service | CVE-2023-29408

August 4, 2023

Matomo Analytics module for Drupal cross-site scripting |

August 4, 2023

NAME__________Matomo Analytics module for Drupal cross-site scriptingPlatforms Affected:Drupal Matomo Analytics module for DrupalRisk Level:3.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________Matomo Analytics module for Drupal...

Open-Xchange OX App Backend SQL injection | CVE-2023-26443

August 4, 2023

NAME__________Open-Xchange OX App Backend SQL injectionPlatforms Affected:Open-Xchange OX App Suite Backend 7.10.6-rev42Risk Level:5.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Open-Xchange OX App Backend is vulnerable...

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26445

August 4, 2023

Rental Property Booking Calendar cross-site scripting | CVE-2023-4117

August 4, 2023

NAME__________Rental Property Booking Calendar cross-site scriptingPlatforms Affected:PHPJabbers Rental Property Booking Calendar 2.0Risk Level:4.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Rental Property Booking Calendar is vulnerable...

Open-Xchange OX App Suite Office server-side request forgery | CVE-2023-26442

August 4, 2023

NAME__________Open-Xchange OX App Suite Office server-side request forgeryPlatforms Affected:Open-Xchange OX App Suite Office 8.10Risk Level:3.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Open-Xchange OX App Suite...

GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W cross-site scripting | CVE-2023-36081

August 4, 2023

NAME__________GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W cross-site scriptingPlatforms Affected:GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150WRisk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________GatesAIr Flexiva FM Transmitter/Exciter...

Cleaning Business Software cross-site scripting | CVE-2023-4115

August 4, 2023

NAME__________Cleaning Business Software cross-site scriptingPlatforms Affected:PHPJabbers Cleaning Business Software 1.0Risk Level:4.3Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Cleaning Business Software is vulnerable to cross-site scripting,...

Rust code execution | CVE-2023-38497

August 4, 2023

NAME__________Rust code executionPlatforms Affected:Rust Rust 1.71.0Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Rust could allow a local authenticated attacker to execute arbitrary code on...

Mozilla VPN security bypass | CVE-2023-4104

August 4, 2023

NAME__________Mozilla VPN security bypassPlatforms Affected:Mozilla VPN 2.15.2Risk Level:7.1Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Mozilla VPN could allow a local authenticated attacker to bypass security...

Month: August 2023

Cisco AsyncOS Software for Cisco Secure Web Appliance security bypass | CVE-2023-20215

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26447

Keyfactor EJBCA denial of service | CVE-2023-34196

F5 BIG-IP cross-site scripting | CVE-2023-38423

Golang tiff package denial of service | CVE-2023-29407

Open-Xchange OX App Office information disclosure | CVE-2023-26441

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26448

F5 BIG-IP (APM) security bypass | CVE-2023-36858

Open-Xchange OX App Backend command execution | CVE-2023-26430

F5 BIG-IP (APM) privilege escalation | CVE-2023-38418

F5 F5 F5OS-A information disclosure | CVE-2023-36494

Open-Xchange OX App Backend server-side request forgery | CVE-2023-26438

Golang Go denial of service | CVE-2023-29409

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26450

Golang tiff package denial of service | CVE-2023-29408

Matomo Analytics module for Drupal cross-site scripting |

Open-Xchange OX App Backend SQL injection | CVE-2023-26443

Open-Xchange OX App Suite cross-site scripting | CVE-2023-26445

Rental Property Booking Calendar cross-site scripting | CVE-2023-4117

Open-Xchange OX App Suite Office server-side request forgery | CVE-2023-26442

GatesAIr Flexiva FM Transmitter/Exciter v.FAX 150W cross-site scripting | CVE-2023-36081

Cleaning Business Software cross-site scripting | CVE-2023-4115

Rust code execution | CVE-2023-38497

Mozilla VPN security bypass | CVE-2023-4104

[RANSOMHUB] – Ransomware Victim: blr[.]com

HackerOne Bug Bounty Disclosure: std-process-command-batch-files-argument-escaping-could-be-bypassed-with-trailing-whitespace-or-periods–xpl-r-r

[LOCKBIT3] – Ransomware Victim: madison-home[.]com

[CHORT] – Ransomware Victim: sheboyganwi[.]gov

[QILIN] – Ransomware Victim: Zimmerman & Frachtman PA Law Firm

You may have missed