3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%system32 files via /Electron/download directory traversal in conjunction with a path componen ...
Continue ReadingMay 02, 2023
3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certain files via /Electron/download directory traversal. Files may have credentials, ...
Continue ReadingMay 02, 2023
In affected versions of Octopus Deploy it is possible to unmask variable secrets using the variable preview functionRead More ...
Continue ReadingMay 02, 2023
Transient DOS due to NULL pointer dereference in Modem while performing pullup for received TCP/UDP packet.Read More ...
Continue ReadingMay 02, 2023
Memory corruption in HAB Memory management due to broad system privileges via physical address.Read More ...
Continue ReadingMay 02, 2023
Memory corruption in Qualcomm IPC due to use after free while receiving the incoming packet and reposting it.Read More ...
Continue ReadingMay 02, 2023
Information disclosure due to buffer over-read in Modem while parsing DNS hostname.Read More ...
Continue ReadingMay 02, 2023
The Limit Login Attempts WordPress plugin through 1.7.2 does not sanitize and escape usernames when outputting them back in the logs dashboard, which could allow any authenticated users, such as subsc ...
Continue ReadingMay 02, 2023
Back to Main