Author: Angelo Barbosa

CVE-2023-48863 | SEMCMS 3.9 sql injection

A vulnerability classified as critical has been found in SEMCMS 3.9. This affects an unknown part. The manipulation leads to sql injection. This vulnerability is uniquely identified as CVE-2023-48863. The attack needs to be initiated within the local network. There is no exploit...

Read More

CVE-2023-6484 | JBoss KeyCloak 22.0.5 WebAuthn injection

A vulnerability was found in JBoss KeyCloak 22.0.5. It has been rated as critical. Affected by this issue is some unknown functionality of the component WebAuthn. The manipulation leads to injection. This vulnerability is handled as CVE-2023-6484. The attack needs to be done within the local network. There is no exploit...

Read More

CVE-2023-6460 | nodejs-firestore up to 6.1.0 insecure storage of sensitive information

A vulnerability was found in nodejs-firestore up to 6.1.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to insecure storage of sensitive information. This vulnerability is traded as CVE-2023-6460. An attack has to be approached locally. There is no exploit available. It is recommended to upgrade the affected...

Read More