F-Secure Endpoint Protection Products On Windows And Mac. F-Secure Linux Security (32-bit) F-Secure Linux Security 64 F-Secure Atlant & F-Secure Cloud Protection For Salesforce Security Vulnerabilities

CVE-2024-6047

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-4305

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2024-3236

The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting...

CVE-2024-3236 Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS

The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting...

CVE-2024-3236 Easy Notify Lite < 1.1.33 - Contributor+ Stored XSS

The Popup Builder WordPress plugin before 1.1.33 does not sanitise and escape some of its Notification fields, which could allow users such as contributor and above to perform Stored Cross-Site Scripting...

CVE-2024-4305 PostX < 4.1.0 - Contributor+ Stored XSS

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2024-4305 PostX < 4.1.0 - Contributor+ Stored XSS

The Post Grid Gutenberg Blocks and WordPress Blog Plugin WordPress plugin before 4.1.0 does not validate and escape some of its block options before outputting them back in a page/post where the block is embed, which could allow users with the contributor role and above to perform Stored...

CVE-2024-6047 GeoVision EOL device - OS Command Injection

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-6047 GeoVision EOL device - OS Command Injection

Certain EOL GeoVision devices fail to properly filter user input for the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

mashcall.com Cross Site Scripting vulnerability OBB-3935805

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently...

NiceRAT Malware Targets South Korean Users via Cracked Software

Threat actors have been observed deploying a malware called NiceRAT to co-opt infected devices into a botnet. The attacks, which target South Korean users, are designed to propagate the malware under the guise of cracked software, such as Microsoft Windows, or tools that purport to offer license...

CVE-2024-6045

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the....

CVE-2024-6046

SECOM WRTR-304GN-304TW-UPSC V02(unsupported-when-assigned) does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-6045

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the....

CVE-2024-6046

SECOM WRTR-304GN-304TW-UPSC V02(unsupported-when-assigned) does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-6046 SECOM WRTR-304GN-304TW-UPSC - OS Command Injection

SECOM WRTR-304GN-304TW-UPSC V02(unsupported-when-assigned) does not properly filter user input in the specific functionality. Unauthenticated remote attackers can exploit this vulnerability to inject and execute arbitrary system commands on the...

CVE-2024-6044

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the...

CVE-2024-5163

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security...

CVE-2024-5163

Improper permission settings for mobile applications (com.transsion.carlcare) may lead to user password and account security...

CVE-2024-6044

Certain models of D-Link wireless routers have a path traversal vulnerability. Unauthenticated attackers on the same local area network can read arbitrary system files by manipulating the...

CVE-2024-6045 D-Link router - Hidden Backdoor

Certain models of D-Link wireless routers contain an undisclosed factory testing backdoor. Unauthenticated attackers on the local area network can force the device to enable Telnet service by accessing a specific URL and can log in by using the administrator credentials obtained from analyzing the....

CVE-2024-5585 vulnerabilities

Vulnerabilities for packages:...

GHSA-95PR-FXF5-86GV vulnerabilities

Vulnerabilities for packages: kubescape, skaffold, wolfictl, tekton-chains, gitsign, tkn, ko, falcoctl, falco, flux-source-controller, spire-server, melange, apko, policy-controller, vexctl, goreleaser, aactl, slsa-verifier, zarf, neuvector-sigstore-interface,...

GHSA-MQ39-4GV4-MVPX vulnerabilities

Vulnerabilities for packages: conftest, kubescape, ctop, dagger, wolfictl, cadvisor, prometheus, syft, tkn, datadog-agent, ko, telegraf, buildkitd, spire-server, up, buf, melange, loki, goreleaser, aactl, crossplane, trivy, zot, kaniko, kargo, grype,...

CVE-2024-23652 vulnerabilities

Vulnerabilities for packages: conftest, datadog-agent, trivy, kubescape, guac, docker, kaniko, buildkitd, skaffold, scorecard,...

CVE-2023-31130 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-2727 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-29131 vulnerabilities

Vulnerabilities for packages: cassandra-reaper, trino,...

GHSA-R53H-JV2G-VPX6 vulnerabilities

Vulnerabilities for packages: up, cilium-cli, helm-push, istio-operator, k8sgpt, k9s, chartmuseum, trivy, helm-operator, kubescape, zot, flux-helm-controller, cert-manager, zarf, eksctl, flux-source-controller,...

CVE-2024-4368 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-4058 vulnerabilities

Vulnerabilities for packages:...

GHSA-9XRG-J488-68QQ vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5493 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5836 vulnerabilities

Vulnerabilities for packages:...

CVE-2024-5841 vulnerabilities

Vulnerabilities for packages:...

GHSA-CXR8-69XQ-5R5P vulnerabilities

Vulnerabilities for packages:...

GHSA-FCHP-8M28-G68F vulnerabilities

Vulnerabilities for packages:...

GHSA-G9F9-C2XM-RWMM vulnerabilities

Vulnerabilities for packages:...

GHSA-RW9Q-CWC5-QQP5 vulnerabilities

Vulnerabilities for packages:...

GHSA-X989-52FC-4VR4 vulnerabilities

Vulnerabilities for packages: hubble,...

CVE-2024-0874 vulnerabilities

Vulnerabilities for packages: kubernetes-dns-node-cache, consul,...

GHSA-HMR7-M48G-48F6 vulnerabilities

Vulnerabilities for packages: cloudwatch-exporter,...

CVE-2024-35241 vulnerabilities

Vulnerabilities for packages:...

GHSA-CF7P-GM2M-833M vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43618 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43620 vulnerabilities

Vulnerabilities for packages:...

CVE-2023-43621 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-23471 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-24769 vulnerabilities

Vulnerabilities for packages:...

CVE-2022-29526 vulnerabilities

Vulnerabilities for packages: dynamic-localpv-provisioner, grpcurl, ctop, kind,...