CVE-2023-28705
Openfind Mail2000 has insufficient filtering special characters of email content of its content filtering function. A remote attacker can exploit this vulnerability using phishing emails that contain ...
Continue Reading
June 02, 2023
CVE-2023-28704
Furbo dog camera has insufficient filtering for special parameter of device log management function. An unauthenticated remote attacker in the Bluetooth network with normal user privileges can exploit ...
Continue Reading
June 02, 2023
CVE-2023-28699
Wade Graphic Design FANTSY has a vulnerability of insufficient filtering for file type in its file update function. An authenticated remote attacker with general user privilege can exploit this vulner ...
Continue Reading
June 02, 2023
CVE-2023-28700
OMICARD EDM backend systemâs file uploading function does not restrict upload of file with dangerous type. A local area network attacker with administrator privileges can exploit this vulnerabili ...
Continue Reading
June 02, 2023
CVE-2022-4332
In Sprecher Automation SPRECON-E-C/P/T3 CPU in variant PU244x a vulnerable firmware verification has been identified. Through physical access and hardware manipulation, an attacker might be able to ...
Continue Reading
June 01, 2023
[SECURITY] Fedora 38 Update: mod_auth_openidc-2.4.13.2-1.fc38
This module enables an Apache 2.x web server to operate as an OpenID Connect Relying Party and/or OAuth 2.0 Resource Server.Read More ...
Continue Reading
June 01, 2023
Kyverno vulnerable due to usage of insecure cipher
### Summary Insecure 3DES ciphers are used which may lead to exploitation of the [Sweet32 vulnerability](https://sweet32.info/). Specifically, the ciphers TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r ...
Continue Reading
May 30, 2023
Kyverno vulnerable due to usage of insecure cipher
### Summary Insecure 3DES ciphers are used which may lead to exploitation of the [Sweet32 vulnerability](https://sweet32.info/). Specifically, the ciphers TLS_ECDHE_RSA_WITH_3DES_EDE_CBC_SHA (secp256r ...
Continue Reading
May 30, 2023
Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking
[]() A critical security vulnerability has been disclosed in the Ope ...
Continue Reading
May 27, 2023
Critical OAuth Vulnerability in Expo Framework Allows Account Hijacking
[]() A critical security vulnerability has been disclosed in the Ope ...
Continue Reading
May 27, 2023
