Show filters
991 Total Results
Displaying 101-110 of 991
Sort by:
Attacker Value
Unknown
CVE-2023-43488
Disclosure Date: October 25, 2023 (last updated February 25, 2025)
The vulnerability allows a low privileged (untrusted) application to
modify a critical system property that should be denied, in order to enable the ADB (Android Debug Bridge) protocol to be exposed on the network, exploiting it to gain a privileged shell on the device without requiring the physical access through USB.
0
Attacker Value
Unknown
CVE-2023-41960
Disclosure Date: October 25, 2023 (last updated February 25, 2025)
The vulnerability allows an unprivileged(untrusted) third-party application to interact with a content-provider unsafely exposed by the Android Agent application, potentially modifying sensitive settings of the Android Client application itself.
0
Attacker Value
Unknown
CVE-2023-41372
Disclosure Date: October 25, 2023 (last updated February 25, 2025)
The vulnerability allows an unprivileged (untrusted) third- party application to arbitrary modify the server settings of the Android Client application, inducing it to connect to an attacker - controlled malicious server.This is possible by forging a valid broadcast intent encrypted with a hardcoded RSA key pair
0
Attacker Value
Unknown
CVE-2023-41255
Disclosure Date: October 25, 2023 (last updated February 25, 2025)
The vulnerability allows an unprivileged user with access to the subnet of the TPC-110W device to gain a root shell on the device itself abusing the lack of authentication
of the ‘su’ binary file installed on the device that can be accessed through the ADB (Android Debug Bridge) protocol exposed on the network.
0
Attacker Value
Unknown
CVE-2023-3010
Disclosure Date: October 25, 2023 (last updated February 25, 2025)
Grafana is an open-source platform for monitoring and observability.
The WorldMap panel plugin, versions before 1.0.4 contains a DOM XSS vulnerability.
0
Attacker Value
Unknown
CVE-2023-4089
Disclosure Date: October 17, 2023 (last updated February 25, 2025)
On affected Wago products an remote attacker with administrative privileges can access files to which he has already access to through an undocumented local file inclusion. This access is logged in a different log file than expected.
0
Attacker Value
Unknown
CVE-2023-40852
Disclosure Date: October 16, 2023 (last updated February 25, 2025)
SQL Injection vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to obtain sensitive information via crafted string in the admin user name field on the admin log in page.
0
Attacker Value
Unknown
CVE-2023-40851
Disclosure Date: October 16, 2023 (last updated February 25, 2025)
Cross Site Scripting (XSS) vulnerability in Phpgurukul User Registration & Login and User Management System With admin panel 3.0 allows attackers to run arbitrary code via fname, lname, email, and contact fields of the user registration page.
0
Attacker Value
Unknown
CVE-2023-44259
Disclosure Date: October 10, 2023 (last updated February 25, 2025)
Cross-Site Request Forgery (CSRF) vulnerability in Mediavine Mediavine Control Panel plugin <= 2.10.2 versions.
0
Attacker Value
Unknown
CVE-2023-4530
Disclosure Date: October 06, 2023 (last updated February 25, 2025)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Turna Advertising Administration Panel allows SQL Injection.This issue affects Advertising Administration Panel: before 1.1.
0