Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-2876

Sensitive Cookie Without ‘HttpOnly’ Flag vulnerability in ABB REX640 PCL1 (firmware modules), ABB REX640 PCL2 (Firmware modules), ABB REX640 PCL3 (firmware modules) allows Cross-Site Scripting (XSS).This issue affects REX640 PCL1: from 1.0;0 before 1.0.8; REX640 PCL2: from 1.0;0 before 1.1.4; REX640 PCL3: from 1.0;0 before 1.2.1.

CVE
#xss#vulnerability#pdf

%PDF-1.7 %���� 1 0 obj <>/Metadata 671 0 R/ViewerPreferences 672 0 R>> endobj 2 0 obj <> endobj 3 0 obj <>/ExtGState<>/Font<>/ProcSet[/PDF/Text/ImageB/ImageC/ImageI] >>/MediaBox[ 0 0 595.32 842.04] /Contents 4 0 R/Group<>/Tabs/S/StructParents 0>> endobj 4 0 obj <> stream x��[[o�~��0�I��x����Uڢ�ZE�<����!��(��K^��!wg�3V�wv.��w�s��f���Ӈ��/ݛ77ۗ����|��������/7����x󗇏��^>=?ݼ��?^ܩ?<>������������>����_�W\ �D��A�v� �E���t_����C�t}Ea�u��`��?%x�׆Ѯ��o�W7o_D��~�?�t��h���iL�DD�0{�f��&�Z;�0�Y4��L��{;��;}�������� i��H���ʃ��VBA��x}��L��7S{�Y��ڝR���3�]�#⎄�h�i���wF���űԾ��������t}u�B�t�"�t��a�c�H����/��U��j�C��<�� ��;��@��]��.��6� c"��: ��4x ���;_�6y�a��h�p2.#��%�

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907