Vulnerabilities

ECShop file upload | CVE-2023-39112

August 14, 2023

NAME__________ECShop file uploadPlatforms Affected:ECShop ECShop 4.1.16Risk Level:6.5Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________ECShop could allow a remote attacker to traverse directories on the system....

OPPO Store app code execution | CVE-2023-26311

August 14, 2023

NAME__________OPPO Store app code executionPlatforms Affected:OPPO Store appRisk Level:7.4Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________OPPO Store app could allow a remote authenticated attacker to...

PostgreSQL code execution | CVE-2023-39417

August 14, 2023

NAME__________PostgreSQL code executionPlatforms Affected:PostgreSQL PostgreSQL 11 PostgreSQL PostgreSQL 12 PostgreSQL PostgreSQL 13 PostgreSQL PostgreSQL 14 PostgreSQL PostgreSQL 15Risk Level:7.1Exploitability:UnprovenConsequences:Gain Access...

1Panel-dev1Panel information disclosure | CVE-2023-39964

August 13, 2023

NAME__________1Panel-dev1Panel information disclosurePlatforms Affected:1Panel-dev 1Panel 1.4.3Risk Level:7.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________1Panel-dev1Panel could allow a remote attacker to obtain sensitive information, caused by...

1Panel-dev1Panel information disclosure | CVE-2023-39965

August 13, 2023

NAME__________1Panel-dev1Panel information disclosurePlatforms Affected:1Panel-dev 1Panel 1.4.3Risk Level:6.5Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________1Panel-dev1Panel could allow a remote attacker to obtain sensitive information, caused by...

Siemens JT Open, JT Utilities code execution | CVE-2023-30795

August 13, 2023

NAME__________Siemens JT Open, JT Utilities code executionPlatforms Affected:Siemens JT Utilities Siemens Parasolid 35.0 Siemens Parasolid 34.1 Siemens Parasolid 34.0 Siemens...

OpenZeppelin Contracts security bypass | CVE-2023-40014

August 13, 2023

NAME__________OpenZeppelin Contracts security bypassPlatforms Affected:OpenZeppelin OpenZeppelin Contracts 4.0.0 OpenZeppelin OpenZeppelin Contracts 4.9.2Risk Level:5.3Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________OpenZeppelin Contracts could allow a remote...

1Panel-dev1Panel security bypass | CVE-2023-39966

August 13, 2023

NAME__________1Panel-dev1Panel security bypassPlatforms Affected:1Panel-dev 1Panel 1.4.3Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________1Panel-dev1Panel could allow a remote attacker to bypass security restrictions, caused by...

Siemens JT Open, JT Utilities code execution | CVE-2023-30796

August 13, 2023

NAME__________Siemens JT Open, JT Utilities code executionPlatforms Affected:Siemens JT Utilities Siemens Parasolid 35.0 Siemens Parasolid 34.1 Siemens Parasolid 34.0 Siemens...

Siemens JT2Go, Teamcenter Visualization and Solid Edge code execution | CVE-2023-28830

August 13, 2023

NAME__________Siemens JT2Go, Teamcenter Visualization and Solid Edge code executionPlatforms Affected:Siemens JT2Go 14.2.0.4Risk Level:7.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Siemens JT2Go, Teamcenter Visualization and Solid...

Elecom network devices OS command execution | CVE-2023-40072

August 12, 2023

NAME__________Elecom network devices OS command executionPlatforms Affected:ELECOM WAB-S600-PS ELECOM WAB-S300Risk Level:6.8Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________Elecom network devices could allow a remote authenticated...

Nextcloud Server information disclosure | CVE-2023-39958

August 12, 2023

NAME__________Nextcloud Server information disclosurePlatforms Affected:Nextcloud Nextcloud Server 25.0.0 Nextcloud Nextcloud Enterprise Server 23.0.0 Nextcloud Nextcloud Enterprise Server 24.0.0 Nextcloud Nextcloud...

Dell Storage Integration Tools for VMware (DSITV) information disclosure | CVE-2023-39250

August 12, 2023

NAME__________Dell Storage Integration Tools for VMware (DSITV) information disclosurePlatforms Affected:Dell Storage Integration Tools for VMware (DSITV) 06.01.00.016Risk Level:6Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Dell...

Siemens JT2Go, Teamcenter Visualization and Solid Edge code execution | CVE-2023-28830

August 12, 2023

Siemens JT Open, JT Utilities code execution | CVE-2023-30795

August 12, 2023

NAME__________Siemens JT Open, JT Utilities code executionPlatforms Affected:Siemens JT Utilities Siemens Parasolid 35.0 Siemens Parasolid 34.1 Siemens Parasolid 34.0 Siemens...

Siemens JT Open, JT Utilities code execution | CVE-2023-30796

August 12, 2023

NAME__________Siemens JT Open, JT Utilities code executionPlatforms Affected:Siemens JT Utilities Siemens Parasolid 35.0 Siemens Parasolid 34.1 Siemens Parasolid 34.0 Siemens...

Oduyo Online Collection Software SQL injection | CVE-2023-3716

August 12, 2023

NAME__________Oduyo Online Collection Software SQL injectionPlatforms Affected:Oduyo Online Collection Software 1.0.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Oduyo Online Collection Software is vulnerable to...

Code-Projects Online Hospital Management System SQL injection | CVE-2023-37069

August 12, 2023

NAME__________Code-Projects Online Hospital Management System SQL injectionPlatforms Affected:Code-Projects Online Hospital Management System 1.0Risk Level:6.5Exploitability:HighConsequences:Data Manipulation DESCRIPTION__________Code-Projects Online Hospital Management System...

Nextcloud Server information disclosure | CVE-2023-39959

August 12, 2023

NAME__________Nextcloud Server information disclosurePlatforms Affected:Nextcloud Nextcloud Server 25.0.0 Nextcloud Nextcloud Enterprise Server 25.0.0 Nextcloud Nextcloud Server 26.0.0 Nextcloud Nextcloud Enterprise...

Lenovo Notebook products privilege escalation | CVE-2023-34419

August 12, 2023

NAME__________Lenovo Notebook products privilege escalationPlatforms Affected:Lenovo NotebookRisk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________Lenovo Notebook products could allow a local authenticated attacker to gain...

Nextcloud Server information disclosure | CVE-2023-39952

August 12, 2023

Nextcloud Notes cross-site scripting | CVE-2023-39955

August 12, 2023

NAME__________Nextcloud Notes cross-site scriptingPlatforms Affected:Nextcloud Notes 4.4.0 Nextcloud Notes 4.7.2Risk Level:3.5Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Nextcloud Notes is vulnerable to cross-site scripting, caused...

Elecom network devices OS command execution | CVE-2023-39455

August 12, 2023

NAME__________Elecom network devices OS command executionPlatforms Affected:Elecom WRC-1467GHBK-A Elecom WRC-1900GHBK-A Elecom WRC-733FEBK2-A Elecom WRC-F1167ACF2 Elecom WRC-1467GHBK-S Elecom WRC-1900GHBK-SRisk Level:6.8Exploitability:UnprovenConsequences:Gain Access...

Apache Airflow Drill Provider information disclosure | CVE-2023-39553

August 12, 2023

NAME__________Apache Airflow Drill Provider information disclosurePlatforms Affected:Apache Airflow Drill Provider 2.4.2Risk Level:0Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________Apache Airflow Drill Provider could allow a...

Vulnerabilities

ECShop file upload | CVE-2023-39112

OPPO Store app code execution | CVE-2023-26311

PostgreSQL code execution | CVE-2023-39417

1Panel-dev1Panel information disclosure | CVE-2023-39964

1Panel-dev1Panel information disclosure | CVE-2023-39965

Siemens JT Open, JT Utilities code execution | CVE-2023-30795

OpenZeppelin Contracts security bypass | CVE-2023-40014

1Panel-dev1Panel security bypass | CVE-2023-39966

Siemens JT Open, JT Utilities code execution | CVE-2023-30796

Siemens JT2Go, Teamcenter Visualization and Solid Edge code execution | CVE-2023-28830

Elecom network devices OS command execution | CVE-2023-40072

Nextcloud Server information disclosure | CVE-2023-39958

Dell Storage Integration Tools for VMware (DSITV) information disclosure | CVE-2023-39250

Siemens JT2Go, Teamcenter Visualization and Solid Edge code execution | CVE-2023-28830

Siemens JT Open, JT Utilities code execution | CVE-2023-30795

Siemens JT Open, JT Utilities code execution | CVE-2023-30796

Oduyo Online Collection Software SQL injection | CVE-2023-3716

Code-Projects Online Hospital Management System SQL injection | CVE-2023-37069

Nextcloud Server information disclosure | CVE-2023-39959

Lenovo Notebook products privilege escalation | CVE-2023-34419

Nextcloud Server information disclosure | CVE-2023-39952

Nextcloud Notes cross-site scripting | CVE-2023-39955

Elecom network devices OS command execution | CVE-2023-39455

Apache Airflow Drill Provider information disclosure | CVE-2023-39553

[INCRANSOM] – Ransomware Victim: VZW Avalon

Ai Layoffs To Backfire: Half Quietly Rehired At Lower Pay

[BLACKSHRANTAC] – Ransomware Victim: The Matlusky Firm LLC

[QILIN] – Ransomware Victim: bagnoles[.]nl

[BLACKSHRANTAC] – Ransomware Victim: ApleNet Co[.], Ltd

You may have missed