CVE-2023-28361

A Cross-site WebSocket Hijacking (CSWSH) vulnerability found in UniFi OS 2.5 and earlier allows a malicious actor to access certain confidential information by persuading a UniFi OS user to visit a ma ...

Continue Reading
Mattermost Server < 7.1.6 / 7.2.x < 7.7.2 Information Disclosure (MMSA-2023-00138)

The version of Mattermost Server running on the remote host is prior to 7.1.6 or 7.2.x prior to 7.7.2. It is, therefore, affected by an information disclosure vulnerability. When running in a High Ava ...

Continue Reading

CVSS3 - MEDIUM

CVE-2023-2534

Improper Authorization vulnerability in OTRS AG OTRS 8 (Websocket API backend) allows any as Agent authenticated attacker to track user behaviour and to gain live insight into overall system usage. Us ...

Continue Reading
(RHSA-2023:2097) Important: Satellite 6.13 Release

Red Hat Satellite is a systems management tool for Linux-based infrastructure. It allows for provisioning, remote management, and monitoring of multiple Linux deployments with a single centralized too ...

Continue Reading

CVSS3 - CRITICAL

CVSS2 - HIGH

Serendipity 2.4.0 – File Inclusion RCE

Post ContentRead More ...

Continue Reading
Serendipity 2.4.0 – File Inclusion Remote Code Execution Exploit

Post ContentRead More ...

Continue Reading
Mattermost vulnerable to information disclosure

When running in a High Availability configuration, Mattermost fails to sanitize some of the `user_updated` and` post_deleted` events broadcast to all users, leading to disclosure of sensitive informat ...

Continue Reading

CVSS3 - MEDIUM

Mattermost vulnerable to information disclosure

When running in a High Availability configuration, Mattermost fails to sanitize some of the `user_updated` and` post_deleted` events broadcast to all users, leading to disclosure of sensitive informat ...

Continue Reading

CVSS3 - MEDIUM

Back to Main

Subscribe for the latest news: