Month: December 2023

Voovi Social Networking Script SQL injection | CVE-2023-6418

December 2, 2023

NAME__________Voovi Social Networking Script SQL injectionPlatforms Affected:Voovi Social Networking Script Voovi Social Networking Script 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Voovi Social Networking...

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6432

December 2, 2023

NAME__________BigProf Online Inventory Manager cross-site scriptingPlatforms Affected:BigProf Online Inventory Manager 3.2Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________BigProf Online Inventory Manager is vulnerable to...

BigProf Online Invoicing System cross-site scripting | CVE-2023-6427

December 2, 2023

NAME__________BigProf Online Invoicing System cross-site scriptingPlatforms Affected:BigProf Online Invoicing System 2.6Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________BigProf Online Invoicing System is vulnerable to...

BigProf Online Invoicing System cross-site scripting | CVE-2023-6429

December 2, 2023

Voovi Social Networking Script cross-site scripting | CVE-2023-6419

December 2, 2023

NAME__________Voovi Social Networking Script cross-site scriptingPlatforms Affected:Voovi Social Networking Script Voovi Social Networking Script 1.0Risk Level:6.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Voovi Social Networking...

ZenTao PMS cross-site scripting | CVE-2023-6439

December 2, 2023

NAME__________ZenTao PMS cross-site scriptingPlatforms Affected:EasyCorp ZenTao PMS 18.8Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________ZenTao PMS is vulnerable to cross-site scripting, caused by improper...

Apple Safari, macOS Sonoma, iOS and iPadOS information disclosure | CVE-2023-42916

December 2, 2023

NAME__________Apple Safari, macOS Sonoma, iOS and iPadOS information disclosurePlatforms Affected:Apple Safari 17.1.1 Apple iOS 17.1.1 Apple iPadOS 17.1.1 Apple macOS...

Voovi Social Networking Script SQL injection | CVE-2023-6411

December 2, 2023

BigProf Online Clinic Management System cross-site scripting | CVE-2023-6423

December 2, 2023

NAME__________BigProf Online Clinic Management System cross-site scriptingPlatforms Affected:BigProf Online Clinic Management System 2.2Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________BigProf Online Clinic Management System...

Voovi Social Networking Script SQL injection | CVE-2023-6415

December 2, 2023

BigProf Online Clinic Management System cross-site scripting | CVE-2023-6424

December 2, 2023

Voovi Social Networking Script SQL injection | CVE-2023-6410

December 2, 2023

Voovi Social Networking Script SQL injection | CVE-2023-6414

December 2, 2023

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6435

December 2, 2023

PHPGurukul Nipah Virus Testing Management System cross-site scripting | CVE-2023-6442

December 2, 2023

NAME__________PHPGurukul Nipah Virus Testing Management System cross-site scriptingPlatforms Affected:PHPGurukul Nipah virus (NiV) Testing Management System 1.0Risk Level:6.1Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________PHPGurukul Nipah...

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6433

December 2, 2023

PTC KEPServerEX, ThingWorx, and OPC-Aggregator information disclosure | CVE-2023-5909

December 2, 2023

NAME__________PTC KEPServerEX, ThingWorx, and OPC-Aggregator information disclosurePlatforms Affected:PTC ThingWorx Kepware Server 8.0 PTC ThingWorx Industrial Connectivity 8.0 PTC OPC-Aggregator 6.14...

IceCMS weak security | CVE-2023-6438

December 2, 2023

NAME__________IceCMS weak securityPlatforms Affected:IceCMS IceCMS 2.0.1Risk Level:7.3Exploitability:UnprovenConsequences:Unknown DESCRIPTION__________IceCMS could provide weaker than expected security, caused by an improper enforcement of...

BigProf Online Clinic Management System cross-site scripting | CVE-2023-6422

December 2, 2023

Voovi Social Networking Script SQL injection | CVE-2023-6413

December 2, 2023

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6431

December 2, 2023

BigProf Online Invoicing System cross-site scripting | CVE-2023-6428

December 2, 2023

Dell RVTools information disclosure | CVE-2023-44303

December 2, 2023

NAME__________Dell RVTools information disclosurePlatforms Affected:Dell RVTools 4.4.5Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Dell RVTools could allow a local authenticated attacker to obtain sensitive...

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6430

December 2, 2023

Month: December 2023

Voovi Social Networking Script SQL injection | CVE-2023-6418

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6432

BigProf Online Invoicing System cross-site scripting | CVE-2023-6427

BigProf Online Invoicing System cross-site scripting | CVE-2023-6429

Voovi Social Networking Script cross-site scripting | CVE-2023-6419

ZenTao PMS cross-site scripting | CVE-2023-6439

Apple Safari, macOS Sonoma, iOS and iPadOS information disclosure | CVE-2023-42916

Voovi Social Networking Script SQL injection | CVE-2023-6411

BigProf Online Clinic Management System cross-site scripting | CVE-2023-6423

Voovi Social Networking Script SQL injection | CVE-2023-6415

BigProf Online Clinic Management System cross-site scripting | CVE-2023-6424

Voovi Social Networking Script SQL injection | CVE-2023-6410

Voovi Social Networking Script SQL injection | CVE-2023-6414

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6435

PHPGurukul Nipah Virus Testing Management System cross-site scripting | CVE-2023-6442

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6433

PTC KEPServerEX, ThingWorx, and OPC-Aggregator information disclosure | CVE-2023-5909

IceCMS weak security | CVE-2023-6438

BigProf Online Clinic Management System cross-site scripting | CVE-2023-6422

Voovi Social Networking Script SQL injection | CVE-2023-6413

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6431

BigProf Online Invoicing System cross-site scripting | CVE-2023-6428

Dell RVTools information disclosure | CVE-2023-44303

BigProf Online Inventory Manager cross-site scripting | CVE-2023-6430

[LOCKBIT3] – Ransomware Victim: lockbit4[.]com

CISA: CISA Adds One Known Exploited Vulnerability to Catalog

CISA: CISA Releases Insights from Red Team Assessment of a U.S. Critical Infrastructure Sector Organization

CISA: CISA Releases Six Industrial Control Systems Advisories

CISA: CISA Adds Three Known Exploited Vulnerabilities to Catalog

You may have missed