Typo3 has released security updates to address vulnerabilities in multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.
Users and administrators are encouraged to review Typo3 Security Advisories dated 13th February 2024 and apply necessary updates.
Hewlett-Packard has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.
Users and administrators are encouraged to review HP Security Advisories hpesbhf04592, hpesbhf04591, hpesbhf04594, hpesbhf04566, hpsbhf03910, hpsbhf03881 and hpsbhf03915 and apply necessary updates.
IBM has released security updates to address vulnerabilities in its multiple products. Exploitation of these vulnerabilities may allow an attacker to gain access to sensitive information.
Users and administrators are encouraged to review IBM Security Advisories and apply necessary updates.
QNQP has released security updates to address vulnerabilities in QTS, QuTS hero and QuTScloud. Exploitation of these vulnerabilities may allow an attacker to take control of affected system.
Users and administrators are encouraged to review QNAP Security Advisory and apply necessary updates.
Advisory No: TZCERT/SA/2024/02/15
Date of First Release: 15th February 2024
Source: WPScan
Software Affected: Revolution Slider Plugin version <= 6.6.12
Overview:
The vulnerability exists in the Revolution Slider plugin prior to version <= 6.6.12. Successfully exploitation of this vulnerability could allow a remote attacker to execute code on the affected system.
Description:
The vulnerability (CVE-2023-2359, CVSS score: 6.6) exists because the plugin does not check the for validity of uploaded image file. By default, the import functionality is only available to Admin users. However, the plugin may be configured to allow Editor and Author users to use the functionality as well.
Impact:
Successful exploitation of this vulnerability may allow a an attacker to execute remote code to an affected system.
Solution:
Security updates have been released to resolve this vulnerability. Users and administrators are encouraged to apply necessary updates.
References:
Tanzania Computer Emergency Response Team