Month: November 2023

Schneider Electric PowerLogic ION8650 and ION8800 security bypass | CVE-2023-5984

November 17, 2023

NAME__________Schneider Electric PowerLogic ION8650 and ION8800 security bypassPlatforms Affected:Schneider Electric PowerLogic ION8800 Schneider Electric PowerLogic ION8650Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Schneider Electric...

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family code execution | CVE-2023-44317

November 17, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family code executionPlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE XR-300WG...

Adobe After Effects code execution | CVE-2023-47068

November 17, 2023

NAME__________Adobe After Effects code executionPlatforms Affected:Adobe After Effects 24.0.2 Adobe After Effects 23.6Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe After Effects could allow...

Adobe Audition information disclosure | CVE-2023-47054

November 17, 2023

NAME__________Adobe Audition information disclosurePlatforms Affected:Adobe Audition 24.0 Adobe Audition 23.6.1Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Audition could allow a remote attacker to...

Adobe Audition code execution | CVE-2023-47046

November 17, 2023

NAME__________Adobe Audition code executionPlatforms Affected:Adobe Audition 24.0 Adobe Audition 23.6.1Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Audition could allow a remote attacker to...

Forminator plugin for WordPress file upload | CVE-2023-6133

November 17, 2023

NAME__________Forminator plugin for WordPress file uploadPlatforms Affected:WordPress Forminator plugin for WordPress 1.27.0 WordPress Forminator plugin for WordPress 1.26.0Risk Level:6.6Exploitability:UnprovenConsequences:Gain Access...

Adobe Audition code execution | CVE-2023-47049

November 17, 2023

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family denial of service | CVE-2023-44321

November 17, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family denial of servicePlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE...

Combust MLeap directory traversal | CVE-2023-5245

November 17, 2023

NAME__________Combust MLeap directory traversalPlatforms Affected:Combust MLeap 0.18.0 Combust MLeap 0.23.0Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Combust MLeap could allow a remote attacker to...

Microsoft .NET, .NET Framework and Visual Studio privilege escalation | CVE-2023-36049

November 17, 2023

NAME__________Microsoft .NET, .NET Framework and Visual Studio privilege escalationPlatforms Affected:Microsoft .NET Framework 3.5 Microsoft .NET Framework 4.8 Microsoft .NET Framework...

Extra Product Options for WooCommerce Plugin for WordPress cross-site scripting | CVE-2023-47658

November 17, 2023

NAME__________Extra Product Options for WooCommerce Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Extra Product Options for WooCommerce Plugin for WordPress 3.0.3Risk...

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family weak security | CVE-2023-44319

November 17, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family weak securityPlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE XR-300WG...

AMD Graphics Cards denial of service | CVE-2023-31320

November 17, 2023

NAME__________AMD Graphics Cards denial of servicePlatforms Affected:AMD Radeon RX 5000 Series AMD Radeon PRO W5000 Series AMD Radeon RX 6000...

Adobe Premiere Pro information disclosure | CVE-2023-47060

November 17, 2023

NAME__________Adobe Premiere Pro information disclosurePlatforms Affected:Adobe Premiere Pro 24.0 Adobe Premiere Pro 23.6Risk Level:5.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Adobe Premiere Pro could allow...

Adobe After Effects code execution | CVE-2023-47073

November 17, 2023

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family information disclosure | CVE-2023-44318

November 17, 2023

NAME__________Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family information disclosurePlatforms Affected:Siemens SCALANCE XF-200BA Siemens SCALANCE XR-300WG...

Adobe Audition information disclosure | CVE-2023-47053

November 17, 2023

Lava Directory Manager Plugin for WordPress cross-site scripting | CVE-2023-47659

November 17, 2023

NAME__________Lava Directory Manager Plugin for WordPress cross-site scriptingPlatforms Affected:WordPress Lava Directory Manager plugin for WordPress 1.1.34Risk Level:6.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Lava Directory...

Dell OS Recovery Tool privilege escalation | CVE-2023-39259

November 17, 2023

NAME__________Dell OS Recovery Tool privilege escalationPlatforms Affected:Dell OS Recovery Tool 2.2.4013 Dell OS Recovery Tool 2.3.7012.0 Dell OS Recovery Tool...

Adobe Audition buffer overflow | CVE-2023-47051

November 17, 2023

NAME__________Adobe Audition buffer overflowPlatforms Affected:Adobe Audition 24.0 Adobe Audition 23.6.1Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Audition is vulnerable to a heap-based buffer...

Schneider Electric Galaxy VS and VL directory traversal | CVE-2023-6032

November 17, 2023

NAME__________Schneider Electric Galaxy VS and VL directory traversalPlatforms Affected:Schneider Electric Galaxy VS 6.82 Schneider Electric Galaxy VL 12.21Risk Level:5.3Exploitability:UnprovenConsequences:Obtain Information...

Adobe Premiere Pro code execution | CVE-2023-47055

November 17, 2023

NAME__________Adobe Premiere Pro code executionPlatforms Affected:Adobe Premiere Pro 24.0 Adobe Premiere Pro 23.6Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Adobe Premiere Pro could allow...

Adobe Audition code execution | CVE-2023-47047

November 17, 2023

SuiteCRM code execution | CVE-2023-6126

November 17, 2023

NAME__________SuiteCRM code executionPlatforms Affected:SalesAgility SuiteCRM 7.10.10 SalesAgility SuiteCRM 7.10.18Risk Level:4.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________SuiteCRM could allow a remote authenticated attacker to execute...

Month: November 2023

Schneider Electric PowerLogic ION8650 and ION8800 security bypass | CVE-2023-5984

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family code execution | CVE-2023-44317

Adobe After Effects code execution | CVE-2023-47068

Adobe Audition information disclosure | CVE-2023-47054

Adobe Audition code execution | CVE-2023-47046

Forminator plugin for WordPress file upload | CVE-2023-6133

Adobe Audition code execution | CVE-2023-47049

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family denial of service | CVE-2023-44321

Combust MLeap directory traversal | CVE-2023-5245

Microsoft .NET, .NET Framework and Visual Studio privilege escalation | CVE-2023-36049

Extra Product Options for WooCommerce Plugin for WordPress cross-site scripting | CVE-2023-47658

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family weak security | CVE-2023-44319

AMD Graphics Cards denial of service | CVE-2023-31320

Adobe Premiere Pro information disclosure | CVE-2023-47060

Adobe After Effects code execution | CVE-2023-47073

Siemens SCALANCE XB-200 / XC-200 / XP-200 / XF-200BA / XR-300WG Family information disclosure | CVE-2023-44318

Adobe Audition information disclosure | CVE-2023-47053

Lava Directory Manager Plugin for WordPress cross-site scripting | CVE-2023-47659

Dell OS Recovery Tool privilege escalation | CVE-2023-39259

Adobe Audition buffer overflow | CVE-2023-47051

Schneider Electric Galaxy VS and VL directory traversal | CVE-2023-6032

Adobe Premiere Pro code execution | CVE-2023-47055

Adobe Audition code execution | CVE-2023-47047

SuiteCRM code execution | CVE-2023-6126

[RANSOMHUB] – Ransomware Victim: Jornstax[.]com

[RANSOMHUB] – Ransomware Victim: jergenspiping[.]com

[RANSOMHUB] – Ransomware Victim: sealevelinc[.]com

[RANSOMHUB] – Ransomware Victim: waive[.]com[.]au

HackerOne Bug Bounty Disclosure: share-information-of-tables-app-is-not-limited-to-affected-users-cx-fa

You may have missed