CVSS3 - HIGH - API Security Blog

CVE-2023-34358

ASUS RT-AX88U's httpd is subject to an unauthenticated DoS condition. A remote attacker can send a specially crafted request to a device which contains a specific user agent, causing the httpd binary ...

July 31, 2023

CVE-2023-34360

A stored cross-site scripting (XSS) issue was discovered within the Custom User Icons functionality of ASUS RT-AX88U running firmware versions 3.0.0.4.388.23110 and prior.Â After a remote attacker ...

July 31, 2023

Moderate Photon OS Security Update – PHSA-2023-5.0-0059

Updates of ['wireshark', 'linux', 'pcre2', 'linux-secure', 'linux-rt'] packages of Photon OS have been released.Read More ...

July 30, 2023

c security update

**CentOS Errata and Security Advisory** CESA-2023:3741 The c-ares C library defines asynchronous DNS (Domain Name System) requests and provides name resolving API. Security Fix(es): * c-ares: 0-byte U ...

July 29, 2023

Closing vulnerabilities in Decidim, a Ruby-based citizen participation platform

This blog post describes two security vulnerabilities in Decidim, a digital platform for citizen participation. Both vulnerabilities were addressed by the Decidim team with corresponding update releas ...

July 29, 2023

CVE-2023-3670

In CODESYS Development System 3.5.9.0 toÂ 3.5.17.0 andÂ CODESYS ScriptingÂ 4.0.0.0 toÂ 4.1.0.0 unsafe directory permissions would allow an attacker with local access to the workstation to plac ...

July 28, 2023

Wordfence Intelligence Weekly WordPress Vulnerability Report (July 17, 2023 to July 23, 2023)

Last week, there were 62 vulnerabilities disclosed in 1035 WordPress Plugins and 90 WordPress themes that have been added to the Wordfence Intelligence Vulnerability Database, and there were 36 Vulner ...

July 27, 2023

Internet Bug Bounty: [CVE-2023-22799] Possible ReDoS based DoS vulnerability in GlobalID

I made a report and patch at https://hackerone.com/reports/1696752. https://discuss.rubyonrails.org/t/cve-2023-22799-possible-redos-based-dos-vulnerability-in-globalid/82127 > There is a possible D ...

July 27, 2023

(RHSA-2023:4293) Moderate: Migration Toolkit for Containers (MTC) 1.7.11 security and bug fix update

The Migration Toolkit for Containers (MTC) enables you to migrate Kubernetes resources, persistent volume data, and internal container images between OpenShift Container Platform clusters, using the M ...

July 27, 2023

Security Bulletin: IBM Watson Discovery Cartridge for IBM Cloud Pak for Data affected by vulnerability in gRPC

## Summary IBM Watson Discovery Cartridge for IBM Cloud Pak for Data contains a vulnerable version of gRPC. ## Vulnerability Details ** CVEID: **[CVE-2023-32732]() ** DESCRIPTION: **gRPC is vulnerable ...

July 27, 2023