Month: January 2024

Sesami Cash Point & Transport Optimizer (CPTO) information disclosure | CVE-2023-31301

January 4, 2024

NAME__________Sesami Cash Point & Transport Optimizer (CPTO) information disclosurePlatforms Affected:Sesami Cash Point & Transport Optimizer CPTO 6.3.8.6 (#718)Risk Level:4.8Exploitability:HighConsequences:Cross-Site Scripting...

Sesami Cash Point & Transport Optimizer (CPTO) information disclosure | CVE-2023-31292

January 4, 2024

NAME__________Sesami Cash Point & Transport Optimizer (CPTO) information disclosurePlatforms Affected:Sesami Cash Point & Transport Optimizer CPTO 6.3.8.6 (#718)Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information...

Sesami Cash Point & Transport Optimizer (CPTO) information disclosure | CVE-2023-31297

January 4, 2024

Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform information disclosure | CVE-2023-38021

January 4, 2024

NAME__________Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform information disclosurePlatforms Affected:Fortanix EnclaveOS Confidential Computing Manager (CCM) PlatformRisk Level:6.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Fortanix EnclaveOS...

Poly devices security bypass | CVE-2023-4465

January 4, 2024

NAME__________Poly devices security bypassPlatforms Affected:Risk Level:2.7Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________Poly devices could allow a remote authenticated attacker to bypass security restrictions, caused...

Poly devices weak security | CVE-2023-4466

January 4, 2024

NAME__________Poly devices weak securityPlatforms Affected:Risk Level:2.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Poly devices could provide weaker than expected security, caused by protection mechanism failure...

SCONE Confidential Computing Platform for Intel SGX information disclosure | CVE-2023-38023

January 4, 2024

NAME__________SCONE Confidential Computing Platform for Intel SGX information disclosurePlatforms Affected:Risk Level:6.2Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________SCONE Confidential Computing Platform for Intel SGX could...

Poly devices denial of service | CVE-2023-4463

January 4, 2024

NAME__________Poly devices denial of servicePlatforms Affected:Risk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Poly devices are vulnerable to a denial of service, caused by...

Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform information disclosure | CVE-2023-38022

January 4, 2024

Poly Trio 8800 backdoor | CVE-2023-4467

January 4, 2024

NAME__________Poly Trio 8800 backdoorPlatforms Affected:Risk Level:6.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Poly Trio 8800 contains an undocumented backdoor account, caused by a flaw in...

S-CMS /member/ad.php?action=ad SQL injection | CVE-2023-7190

January 4, 2024

NAME__________S-CMS /member/ad.php?action=ad SQL injectionPlatforms Affected:S-CMS S-CMS 2.0_build20220529-20231006Risk Level:5.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________S-CMS is vulnerable to SQL injection. A remote authenticated attacker could...

Poly devices command execution | CVE-2023-4464

January 4, 2024

NAME__________Poly devices command executionPlatforms Affected:Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Poly devices could allow a remote attacker to execute arbitrary commands on the...

S-CMS member/reg.php SQL injection | CVE-2023-7191

January 4, 2024

NAME__________S-CMS member/reg.php SQL injectionPlatforms Affected:S-CMS S-CMS 2.0_build20220529-20231006Risk Level:5.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________S-CMS is vulnerable to SQL injection. A remote authenticated attacker could...

MTab Bookmark security bypass | CVE-2023-7193

January 4, 2024

NAME__________MTab Bookmark security bypassPlatforms Affected:Risk Level:4.6Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________MTab Bookmark could allow a remote authenticated attacker within the local network to...

Multiple MediaTek Chipsets denial of service | CVE-2023-32890

January 4, 2024

NAME__________Multiple MediaTek Chipsets denial of servicePlatforms Affected:MediaTek ChipsetsRisk Level:5.3Exploitability:UnprovenConsequences:Denial of Service DESCRIPTION__________Multiple MediaTek Chipsets are vulnerable to a denial of...

RRJ Nueva Ecija Engineer Online Portal cross-site scripting | CVE-2024-0183

January 4, 2024

NAME__________RRJ Nueva Ecija Engineer Online Portal cross-site scriptingPlatforms Affected:Risk Level:2.4Exploitability:UnprovenConsequences:Cross-Site Scripting DESCRIPTION__________RRJ Nueva Ecija Engineer Online Portal is vulnerable to...

Multiple MediaTek Chipsets information disclosure | CVE-2023-32876

January 4, 2024

NAME__________Multiple MediaTek Chipsets information disclosurePlatforms Affected:MediaTek ChipsetsRisk Level:4.4Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Multiple MediaTek Chipsets could allow a local authenticated attacker to obtain...

Engineers Online Portal SQL injection | CVE-2024-0182

January 4, 2024

NAME__________Engineers Online Portal SQL injectionPlatforms Affected:Risk Level:7.3Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Engineers Online Portal is vulnerable to SQL injection. A remote attacker could...

RRJ Nueva Ecija Engineer Online Portal cross-site scripting | CVE-2024-0184

January 4, 2024

RRJ Nueva Ecija Engineer Online Portal cross-site scripting | CVE-2024-0181

January 4, 2024

Fahuo100 SQL injection | CVE-2023-7188

January 4, 2024

NAME__________Fahuo100 SQL injectionPlatforms Affected:Risk Level:5Exploitability:UnprovenConsequences:Data Manipulation DESCRIPTION__________Fahuo100 is vulnerable to SQL injection. A remote attacker within the local network could...

RRJ Nueva Ecija Engineer Online Portal file upload | CVE-2024-0185

January 4, 2024

NAME__________RRJ Nueva Ecija Engineer Online Portal file uploadPlatforms Affected:Risk Level:4.7Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________RRJ Nueva Ecija Engineer Online Portal could allow a...

Multiple MediaTek Chipsets privelege escalation | CVE-2023-32882

January 4, 2024

NAME__________Multiple MediaTek Chipsets privelege escalationPlatforms Affected:MediaTek ChipsetsRisk Level:6.7Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Multiple MediaTek Chipsets could allow a local authenticated attacker to gain...

Multiple MediaTek Chipsets privilege escalation | CVE-2023-32891

January 4, 2024

NAME__________Multiple MediaTek Chipsets privilege escalationPlatforms Affected:MediaTek ChipsetsRisk Level:4.2Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Multiple MediaTek Chipsets could allow a local authenticated attacker to gain...

Month: January 2024

Sesami Cash Point & Transport Optimizer (CPTO) information disclosure | CVE-2023-31301

Sesami Cash Point & Transport Optimizer (CPTO) information disclosure | CVE-2023-31292

Sesami Cash Point & Transport Optimizer (CPTO) information disclosure | CVE-2023-31297

Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform information disclosure | CVE-2023-38021

Poly devices security bypass | CVE-2023-4465

Poly devices weak security | CVE-2023-4466

SCONE Confidential Computing Platform for Intel SGX information disclosure | CVE-2023-38023

Poly devices denial of service | CVE-2023-4463

Fortanix EnclaveOS Confidential Computing Manager (CCM) Platform information disclosure | CVE-2023-38022

Poly Trio 8800 backdoor | CVE-2023-4467

S-CMS /member/ad.php?action=ad SQL injection | CVE-2023-7190

Poly devices command execution | CVE-2023-4464

S-CMS member/reg.php SQL injection | CVE-2023-7191

MTab Bookmark security bypass | CVE-2023-7193

Multiple MediaTek Chipsets denial of service | CVE-2023-32890

RRJ Nueva Ecija Engineer Online Portal cross-site scripting | CVE-2024-0183

Multiple MediaTek Chipsets information disclosure | CVE-2023-32876

Engineers Online Portal SQL injection | CVE-2024-0182

RRJ Nueva Ecija Engineer Online Portal cross-site scripting | CVE-2024-0184

RRJ Nueva Ecija Engineer Online Portal cross-site scripting | CVE-2024-0181

Fahuo100 SQL injection | CVE-2023-7188

RRJ Nueva Ecija Engineer Online Portal file upload | CVE-2024-0185

Multiple MediaTek Chipsets privelege escalation | CVE-2023-32882

Multiple MediaTek Chipsets privilege escalation | CVE-2023-32891

CVE Alert: CVE-2023-31280

[FUNKSEC] – Ransomware Victim: visualsystemas[.]com[.]ar

[FUNKSEC] – Ransomware Victim: casarom[.]com[.]ar

[FUNKSEC] – Ransomware Victim: gtsportcarrental[.]com

CVE Alert: CVE-2023-31279

You may have missed