Malicious code in opdistube (npm)

The package contains code to download and execute an infostealer payload...

Malicious code in testinbro (npm)

The package contains code to download and execute an infostealer payload. --- -= Per source details. Do not edit below this line.=-...

Malicious code in byfron (npm)

The package contains code to download and execute an infostealer payload...

About the security content of visionOS2.1

About the security content of visionOS2.1 This document describes the security content of visionOS 2.1. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2024-32833 · Pyload · Pyload

Name of the Vulnerable Software and Affected Versions: pyLoad versions prior to 0.5.0b3.dev87 Description: The vulnerability allows an attacker with access to change the settings on a pyload server to execute arbitrary code and completely compromise the system. This is achieved by downloading an...

IVY Smart 安全漏洞

IVY Smart is a smart home application from Shenzhen Aiwei IOT Technology Co. A security vulnerability exists in IVY Smart version v4.5.0, which stems from incorrect access control during firmware updates and downloads...

Ruochan Smart 安全漏洞

Ruochan Smart is a smart home control software from Ruochan. A security vulnerability exists in Ruochan Smart version v4.4.7, which stems from incorrect access control during firmware updates and downloads, and could allow an attacker to gain access to sensitive information by analyzing code and...

YingSheng Wear Sync 安全漏洞

YingSheng Wear Sync is a mobile application for connecting smart devices from YingSheng China. A security vulnerability exists in YingSheng Wear Sync v1.2.0, which stems from incorrect access control during firmware updates and downloads...

DreamCatcher Life 安全漏洞

Dreamcatcher Life is an application from Chuango, Germany that allows remote control of various wireless smart devices. A security vulnerability exists in DreamCatcher Life v1.8.7, which stems from incorrect access control during firmware updates and downloads...

SAP BusinessObjects Business Intelligence Web Intelligence Unauthorized Access

The vulnerability of SAP BusinessObjects Business Intelligence’s Web Intelligence component relates to the unlimited download of dangerous files. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Adobe Framemaker Code Execution

The vulnerability of the desktop publishing system Adobe Framemaker lies in the lack of restrictions on file uploads. Exploiting this vulnerability allows an attacker to execute arbitrary code...

Security Bulletin: NVIDIA GPU Display Driver - October 2024

NVIDIA has released a software security update for NVIDIA GPU Display Driver to address the issues that are disclosed in this bulletin. To protect your system, download and install this software update through the NVIDIA Driver Downloads page or, for the vGPU software and Cloud Gaming updates,...

openSUSE Security Advisory (openSUSE-SU-2024:0337-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...

Chromium: CVE-2024-9963 Insufficient data validation in Downloads

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

CVE-2024-8746

The File Manager Pro plugin for WordPress is vulnerable to arbitrary backup file downloads and uploads due to missing file type validation via the 'mkfilefoldermanagershortcode' ajax action in all versions up to, and including, 8.3.9. This makes it possible for unauthenticated attackers, if grant...

SAP Business Objects Business Intelligence Platform File Download

The vulnerability of the SAP Business Objects Business Intelligence Platform relates to the unlimited loading of dangerous files. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

DEBIAN-CVE-2024-9963

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9963

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...

CVE-2024-9963

Insufficient data validation in Downloads in Google Chrome prior to 130.0.6723.58 allowed a remote attacker who convinced a user to engage in specific UI gestures to perform UI spoofing via a crafted HTML page. Chromium security severity: Medium...