Apple Security Advisory 2023-02-13-1
Apple Security Advisory 2023-02-13-2
Apple Security Advisory 2023-02-13-3
B&R Systems Diagnostics Manager Cross Site Scripting
B&R Systems Diagnostics Manager versions above or equal to 3.00 and below or equal to C4.93 suffer from a cross site scripting vulnerability.
XWorm Trojan 2.1 NULL Pointer Dereference
XWorm Trojan version 2.1 suffers from a denial of service condition due to a null pointer vulnerability.
Cisco RV Series Authentication Bypass / Command Injection
This Metasploit module exploits two vulnerabilities, a session ID directory traversal authentication bypass (CVE-2022-20705) and a command injection vulnerability (CVE-2022-20707), on Cisco RV160, RV260, RV340, and RV345 Small Business Routers, allowing attackers to execute arbitrary commands with www-data user privileges. This access can then be used to pivot to other parts of the network. This […]
Cisco RV Series Authentication Bypass / Command Injection
This Metasploit module exploits two vulnerabilities, a session ID directory traversal authentication bypass (CVE-2022-20705) and a command injection vulnerability (CVE-2022-20707), on Cisco RV160, RV260, RV340, and RV345 Small Business Routers, allowing attackers to execute arbitrary commands with www-data user privileges. This access can then be used to pivot to other parts of the network. This […]
Global Infotech CMS 1.0 SQL Injection
Global Infotech CMS version 1.0 suffers from a remote SQL injection vulnerability that allows for authentication bypass.
Windows Kernel Key Replication Issues
The Microsoft Windows kernel suffers from multiple security issues in the key replication feature of registry virtualization.