Page 2 - Vulnerability Lab News Today

Document Title:===============PaulPrinting CMS - Multiple Cross Site Web VulnerabilitiesReferences (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2285Release Date:=============2023-07-19Vulnerability Laboratory ID (VL-ID):====================================2285Common Vulnerability Scoring System:====================================5.8Vulnerability Class:====================Cross Site Scripting - PersistentCurrent Estimated Price:========================500€ ...

SEC Consult Vulnerability Lab Security Advisory < 20230705-0 >=======================================================================title: Path traversal bypass & Denial of serviceproduct: Kyocera TASKalfa 4053ci printervulnerable version: TASKalfa 4053ci Version

Document Title:===============Citrix Gateway & Cloud MFA - Insufficient Session Validation VulnerabilityReferences (Source):====================https://www.vulnerability-lab.com/get_content.php?id=2324Vulnerability Magazine:https://www.vulnerability-db.com/?q=articles/2023/07/03/citrix-gateway-cloud-mfa-insufficient-session-validation-vulnerabilitySecurity Video: (Cloud)https://www.youtube.com/watch?v=vObgOpGpCSMSecurity Video: (OnPrem)https://www.youtube.com/watch?v=RFjRgiW2OWERelease Date:...

Patches are available for three bugs, but with technical details and PoCs now available, threat actors can craft targeted attacks.

SEC Consult Vulnerability Lab Security Advisory < 20230516-0 >=======================================================================title: Multiple Vulnerabilitiesproduct: Serenity and StartSharp Softwarevulnerable version: < 6.7.1fixed version: 6.7.1 or higherCVE number: CVE-2023-31285, CVE-2023-31286, CVE-2023-31287impact: highhomepage: https://serenity.isfound: 2023-02-28by: Fabian Densborn (Office Vienna)SEC Consult Vulnerability LabAn integrated part of SEC Consult.SEC Consult is ...

SEC Consult Vulnerability Lab Security Advisory < 20230517-0 >=======================================================================title: Stored XSS vulnerability in rename functionalityproduct: Wekan (Open-Source kanban)vulnerable version:

SEC Consult Vulnerability Lab Security Advisory < 20230515-0 >=======================================================================title: Multiple Vulnerabilitiesproduct: Kiddoware Kids Place Parental Control Android Appvulnerable version:

SEC Consult Vulnerability Lab Security Advisory < 20230502-0 >=======================================================================title: Bypassing cluster isolation through insecure defaults andshared storageproduct: Databricks Platformvulnerable version: PaaS version as of 2023-01-26fixed version: Current PaaS versionCVE number: -impact: criticalhomepage: https://www.databricks.comfound: 2023-01-20by: Florian Roth (Atos)Marius Bartholdy (SEC Office Berlin)SEC Consult Vulnerability LabA...

IrfanView is a fast and simple freeware image viewer, editor and converter that supports all major graphic formats, including AIF, ANI/CUR, ASF, AU/SND/AIF, AVI, B3D, BMP/DIB, CAM, CLP..etc.