RedPacket Security - InfoSec News & Tutorials

Unified Twig module for Drupal cross-site scripting |

September 1, 2023

NAME__________Unified Twig module for Drupal cross-site scriptingPlatforms Affected:Drupal Unified Twig module for Drupal 1.1.0Risk Level:5.4Exploitability:HighConsequences:Cross-Site Scripting DESCRIPTION__________Unified Twig module for...

PaperCut NG code execution | CVE-2023-39469

September 1, 2023

NAME__________PaperCut NG code executionPlatforms Affected:PaperCut Software PaperCut NG 22.1Risk Level:7.2Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________PaperCut NG could allow a remote authenticated attacker to...

IBM Security Verify Information Queue information disclosure. | CVE-2023-33833

September 1, 2023

NAME__________IBM Security Verify Information Queue information disclosure.Platforms Affected:IBM Security Verify Information Queue 10.0.4 IBM Security Verify Information Queue 10.0.5Risk Level:2.9Exploitability:UnprovenConsequences:Obtain...

Easy Address Book Web Server cross-site scripting | CVE-2023-4492

September 1, 2023

NAME__________Easy Address Book Web Server cross-site scriptingPlatforms Affected:EFS Software Easy Address Book Web Server 1.6Risk Level:6.1Exploitability:HighConsequences:Gain Access DESCRIPTION__________Easy Address Book...

GitLab information disclosure | CVE-2023-4378

September 1, 2023

NAME__________GitLab information disclosurePlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

PTC Kepware KepServerEX code execution | CVE-2023-29445

September 1, 2023

NAME__________PTC Kepware KepServerEX code executionPlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________PTC Kepware KepServerEX could...

GitLab information disclosure | CVE-2022-4343

September 1, 2023

GitLab information disclosure | CVE-2023-4630

September 1, 2023

GitLab denial of service | CVE-2023-4647

September 1, 2023

NAME__________GitLab denial of servicePlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4...

GitLab information disclosure | CVE-2023-3950

September 1, 2023

Easy Address Book Web Server cross-site scripting | CVE-2023-4495

September 1, 2023

PTC Kepware KepServerEX information disclosure | CVE-2023-29447

September 1, 2023

NAME__________PTC Kepware KepServerEX information disclosurePlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:5.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________PTC Kepware KepServerEX could...

GitLab security bypass | CVE-2023-4018

September 1, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

GitLab denial of service | CVE-2023-3205

September 1, 2023

NAME__________GitLab denial of servicePlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4...

GitLab open redirect | CVE-2023-1279

September 1, 2023

NAME__________GitLab open redirectPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

GitLab security bypass | CVE-2023-1555

September 1, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

VMware Tools security bypass | CVE-2023-20900

September 1, 2023

NAME__________VMware Tools security bypassPlatforms Affected:VMware Tools 11 VMware Tools 12 VMware Tools 10.3Risk Level:7.5Exploitability:UnprovenConsequences:Bypass Security DESCRIPTION__________VMware Tools could allow a...

?GE Digital CIMPLICITY privilege escalation | CVE-2023-4487

September 1, 2023

NAME__________?GE Digital CIMPLICITY privilege escalationPlatforms Affected:GE Digital CIMPLICITY 2023Risk Level:7.8Exploitability:UnprovenConsequences:Gain Privileges DESCRIPTION__________?GE Digital CIMPLICITY could allow a local authenticated attacker...

GitLab security bypass | CVE-2023-0120

September 1, 2023

NAME__________GitLab security bypassPlatforms Affected:GitLab Community Edition 16.2.4 GitLab Community Edition 16.3.0 GitLab Enterprise Edition 16.3.0 GitLab Enterprise Edition 16.2.4 GitLab...

?PTC Kepware KepServerEX information disclosure | CVE-2023-29446

September 1, 2023

NAME__________?PTC Kepware KepServerEX information disclosurePlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:4.7Exploitability:UnprovenConsequences:Obtain Information DESCRIPTION__________?PTC Kepware KepServerEX could...

?PTC Kepware KepServerEX code execution | CVE-2023-29444

September 1, 2023

NAME__________?PTC Kepware KepServerEX code executionPlatforms Affected:PTC Kepware KepServerEX 6.14.263.0 PTC ThingWorx Kepware Server 6.14.263.0Risk Level:6.3Exploitability:UnprovenConsequences:Gain Access DESCRIPTION__________?PTC Kepware KepServerEX could...

Main Story

Editor’s Picks

Trending Story

Featured Story

You may have missed