CVE-2024-6679

CVE-2024-6679 affects witmy my-springsecurity-plus (up to 2024-07-04). The flaw exists in the /api/role endpoint where manipulating the argument params.dataScope enables SQL injection. It can be exploited remotely and the vulnerability has been publicly disclosed. Multiple sources (NVD, CVE List,...

CVE-2024-6679 witmy my-springsecurity-plus role sql injection

A vulnerability classified as critical has been found in witmy my-springsecurity-plus up to 2024-07-04. Affected is an unknown function of the file /api/role. The manipulation of the argument params.dataScope leads to sql injection. It is possible to launch the attack remotely. The exploit has be...

PT-2024-37797 · Unknown · Witmy My-Springsecurity-Plus

Name of the Vulnerable Software and Affected Versions: witmy my-springsecurity-plus up to 2024-07-04 Description: A critical issue has been found, affecting some unknown functionality of the file /api/dept. The manipulation of the argument params.dataScope leads to SQL injection. The attack may b...

CVE-2024-36138

creationtimestamp| type| source ---|---|--- 2024-07-09 10:08:51+00:00| published-proof-of-concept| https://t.me/HackingInsights/5331 2024-09-07 19:20:31+00:00| seen| https://t.me/cvedetector/5029 2025-04-30 23:14:43+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14199...

CVE-2024-37472

creationtimestamp| type| source ---|---|--- 2024-07-04 21:51:57+00:00| seen| https://t.me/cvedetector/67...

CVE-2024-6511

creationtimestamp| type| source ---|---|--- 2024-07-04 21:51:56+00:00| seen| https://t.me/cvedetector/66...

CVE-2024-39932

creationtimestamp| type| source ---|---|--- 2024-07-04 18:56:16+00:00| seen| https://t.me/cvedetector/61 2024-07-08 12:33:12+00:00| seen| https://t.me/truesecator/5943 2024-07-08 13:16:59+00:00| seen| Telegram/BsDKi1NO35aX5jFw-nQrwozL1BDFKqIrJaNXO44sTuUJDa1q 2026-05-29 16:00:06+00:00| seen|...

JVN#94347255: JP1/Extensible SNMP Agent fails to restrict access permissions

JP1/Extensible SNMP Agent provided by Hitachi fails to restrict access permissions CWE-276. Impact If an authenticated attacker who can log in to the product places a specially crafted DLL file in a specific directory, arbitrary code may be executed with the administrative privilege. Solution...

Chromecast Security Bulletin—July 2024Stay organized with collectionsSave and categorize content based on your preferences.

The Chromecast Security Bulletin contains details of security vulnerabilities affecting supported Chromecast with Google TV devices Chromecast devices. For Chromecast devices, security patch levels of 2024-04-01 or later address all applicable issues in the April 2024 Android Security Bulletin an...

GLSA-202407-04 : Pixman: Heap Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-202407-04 Pixman: Heap Buffer Overflow A vulnerability has been discovered in Pixman. Please review the CVE identifiers referenced below for details. Tenable has extracted the preceding description block directly from the Gentoo...

Mailcow Patches Critical XSS and File Overwrite Flaws – Update NOW

Mailcow email servers faced critical vulnerabilities CVE-2024-31204 and CVE-2024-30270 allowing potential remote code execution. Update to Mailcow 2024-04 Moopril Update to patch the security holes and keep your email server safe...

gites-de-france-04.fr Cross Site Scripting vulnerability OBB-3936910

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Mailcow Mail Server Flaws Expose Servers to Remote Code Execution

Two security vulnerabilities have been disclosed in the Mailcow open-source mail server suite that could be exploited by malicious actors to achieve arbitrary code execution on susceptible instances. Both shortcomings impact all versions of the software prior to version 2024-04, which was release...

Aimeos Security Breach

Aimeos is an open source e-commerce framework for online stores from Aimeos Open Source. A security vulnerability exists in versions of Aimeos prior to 2024.04.5, which originates from a user with administrative privileges being able to upload files that look like images but contain PHP code that...

GHSA-6FQW-J3VM-7F66 Zendframework1 Potential SQL injection in ORDER and GROUP functions

The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution that identifies and removes comments prior to checking validity of the statement to ensur...

Zendframework1 Potential SQL injection in ORDER and GROUP functions

The implementation of ORDER BY and GROUP BY in ZendDbSelect remained prone to SQL injection when a combination of SQL expressions and comments were used. This security patch provides a comprehensive solution that identifies and removes comments prior to checking validity of the statement to ensur...

CVE-2024-35860

creationtimestamp| type| source ---|---|--- 2024-05-21 16:55:50+00:00| seen| https://t.me/DARKSPOTTEAM/463 2024-05-21 16:55:50+00:00| seen| Telegram/d1j1loFIVuVwPhxJokQwRYBbIsMxD64hi8FhXbQLXswb 2025-05-04 09:17:58+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/14749...

CVE-2023-49606

creationtimestamp| type| source ---|---|--- 2024-05-06 10:39:55+00:00| seen| https://t.me/HackingInsights/85 2024-05-06 13:34:11+00:00| published-proof-of-concept| https://t.me/HackingInsights/93 2024-05-06 16:50:19+00:00| seen| https://t.me/KomunitiSiber/1899 2024-05-06 17:01:06+00:00| seen|...

Fedora 40 : stalld (2024-d198253c42)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-d198253c42 advisory. address issues found in Static Application Security testing Fix a service startup issue Fix file open issue when kernel lockdown is in effect Tenable has...

Honeywell Experion PKS, Experion LX, PlantCruise by Experion, Safety Manager, Safety Manager SC Stack-based Buffer Overflow (CVE-2023-5401)

Server receiving a malformed message based on a using the specified key values can cause a stack overflow vulnerability which could lead to an attacker performing remote code execution or causing a failure. See Honeywell Security Notification for recommendations on upgrading and versioning. This...