xen-4.16.4-4.fc37
FEDORA-2023-b7b87e4966 Packages in this update: xen-4.16.4-4.fc37 Update description: arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]...
xen-4.17.1-9.fc38
FEDORA-2023-0d6aa10621 Packages in this update: xen-4.17.1-9.fc38 Update description: arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]...
Trovent Security Advisory 2303-01 / CVE-2023-36255 / Authenticated remote code execution in Eramba
Posted by Stefan Pietsch on Aug 01 # Trovent Security Advisory 2303-01 # ##################################### Authenticated remote code execution in Eramba ############################################# Overview ######## Advisory ID:...
CVE-2023-28130 – Hostname injection leads to Remote Code Execution RCE (Authenticated)
Posted by Rick Verdoes via Fulldisclosure on Aug 01 ========================= Exploit Title: Hostname injection leads to Remote Code Execution RCE (Authenticated) Product: Gaia Portal Vendor:...
Unauthorized MFA Code Delivery in EmpowerID
Posted by Patel, Nirav on Aug 01 Severity: High Description: An identified security flaw is present in EmpowerID versions V7.205.0.0 and prior versions, causing the...
Pentest Paper – Introduction to Web Pentest
Posted by Andrey Stoykov on Aug 01 Just putting this for the new starters. It is in two languages, Bulgarian and English. https://drive.google.com/file/d/1mzYeratoSV82Oxaj_dYvu4fg7vSBuhE1/view https://drive.google.com/file/d/1b8obLloMnmQGI1gqAablzuTyKOFBRZjb/view Has...
Stored XSS – Perch
Posted by Andrey Stoykov on Aug 01 # Exploit Title: # Date: 07/2023 # Exploit Author: Andrey Stoykov # Version: 3.2 # Tested on: Windows...
ETSI WEBstore 2023 – Persistent Cross Site Scripting Web Vulnerability
Posted by info () vulnerability-lab com on Aug 01 Document Title: =============== ETSI WEBstore 2023 - Persistent Cross Site Scripting Web Vulnerability References (Source): ====================...
Novel Worm-Like Malware P2Pinfect Targets Redis Deployments
Cado Security said the malware acts as a botnet and is compatibille with both Windows and Linux Read More
Canon Inkjet Printers Expose Wi-Fi Threat
The printers retained various information after re-initialization, including SSIDs and passwords Read More