The vulnerability of the Spectrum Power 7 software, related to incorrect privilege assignment, allows a perpetrator to elevate their privileges.

The vulnerability of the Spectrum Power 7 software is related to the improper assignment of privileges by running binary files with the SUID privilege. Exploiting this vulnerability can allow an attacker to increase their privileges...

DuckDB Installed (Windows)

Binary data duckdbwininstalled.nbin...

DuckDB Installed (Linux / Unix)

Binary data duckdbnixinstalled.nbin...

PT-2024-26930 · Sharp +1 · Multiple Mfps

Name of the Vulnerable Software and Affected Versions: No specific software name or affected versions are mentioned in the provided descriptions. Description: The issue involves hardcoded API keys for some cloud services in the "main" binary, posing security risks. The details of affected product...

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility lies in the improper use of standard permissions, allowing attackers to increase their privileges.

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to the improper use of standard permissions. Exploiting this vulnerability can allow attackers to increase their privileges...

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility lies in its uncontrolled search path, which allows a malicious actor to exploit their privileges.

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

com.thoughtworks.xstream: XStream is vulnerable to a Denial of Service attack due to stack overflow from a manipulated binary input stream

A flaw was found in the XStream library. A remote attacker may trigger a denial of service by manipulating the processed input stream when XStream is configured to use the BinaryStreamDriver. This issue may lead to the termination of the application...

Finding vulnerabilities in ClipSp, the driver at the core of Windows’ Client License Platform

By Philippe Laulheret ClipSP clipsp.sys is a Windows driver used to implement client licensing and system policies on Windows 10 and 11 systems. Cisco Talos researchers have discovered eight vulnerabilities related to clipsp.sys ranging from signature bypass to elevation of privileges and sandbox...

Rclone Installed (Mac OS X)

Binary data rclonemacosinstalled.nbin...

Binary Vulnerability in Damon New Cloud Cache Database of Wuhan Damon Database Co.

Damon New Cloud Cache Database DMCDM is a Key-Value database that is deeply compatible with the native Redis protocol. A binary vulnerability exists in the Damon New Cloud Cache Database DMCDM of Wuhan Damon Database Co. which can be exploited by attackers to cause a denial of service...

JetBrains WebStorm Installed (Linux)

Binary data jetbrainswebstormnixinstalled.nbin...

Rockwell Automation FactoryTalk Updater Installed (Windows)

Binary data rockwellfactorytalkupdaterwininstalled.nbin...

The vulnerability of the needrestart utility, related to concurrent access to resources (race condition), allows a violator to execute arbitrary code in the context of the root user.

The vulnerability of the needrestart tool is related to concurrent access to resources race condition. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the context of the root user by replacing the file usr/bin/python with a malicious executable file...

DEBIAN-CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

UBUNTU-CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

Open62541 安全漏洞

Open62541 is an open source implementation of OPC UA OPC Unified Architecture by Open62541 Open Source. A security vulnerability exists in Open62541 version 1.4.6, which stems from an assertion failure in fuzzbinarydecode that causes a crash...

Apple iOS < 18.1.1 Multiple Vulnerabilities (121752)

Binary data appleios1811check.nbin...

JetBrains WebStorm Installed (Mac OS X)

Binary data jetbrainswebstormmacosinstalled.nbin...

CVE-2024-53429

Open62541 v1.4.6 is has an assertion failure in fuzzbinarydecode, which leads to a crash...

Arbitrary File Upload

Overview django-filer is an A file management application for django that makes handling of files and images a breeze. Affected versions of this package are vulnerable to Arbitrary File Upload via the file upload mechanism allowing, by default, the upload of binary or unknown file types...