Amazon Linux 2 : jetty (ALAS-2024-2408)

It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2408 advisory. For Eclipse Jetty versions = 9.4.40, = 10.0.2, = 11.0.2, it is possible for requests to the ConcatServlet with a doubly encoded path to access protected resources within the WEB-INF directory. For example...

CVE-2023-2408

CVE-2023-2408 affects SourceCodester AC Repair and Services System 1.0. The vulnerability is a SQL injection in the file services/view.php triggered by manipulating the id argument. It can be exploited remotely; public disclosure is noted. Connected sources confirm the issue and provide a CVSS ba...

SUSE CVE-2014-2408

Unspecified vulnerability in the Core RDBMS component in Oracle Database Server 11.1.0.7, 11.2.0.3, 11.2.0.4, and 12.1.0.1 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to the "Grant Any Object Privilege."...

MSNSwitch Firmware MNT.2408 Remote Code Execution

Exploit Title: MSNSwitch Firmware MNT.2408 - Remote Code Exectuion RCE Google Dork: n/a Date:9/1/2022 Exploit Author: Eli Fulkerson Vendor Homepage: https://www.msnswitch.com/ Version: MNT.2408 Tested on: MNT.2408 firmware CVE: CVE-2022-32429 !/usr/bin/python3 """ POC for unauthenticated...

Ubuntu: Security Advisory (USN-810-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-32429

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution...

Authentication flaw

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution...

MSNSwitch 授权问题漏洞

MSNSwitch is a smart power outlet from MSNSwitch. Designed to automatically reboot its outlets when an Internet connection is lost. A security vulnerability exists in MSNSwitch version MNT.2408 that originates from allowing an unauthenticated attacker to arbitrarily configure settings in the...

CVE-2022-32429

An authentication-bypass issue in the component http://MYDEVICEIP/cgi-bin-sdb/ExportSettings.sh of Mega System Technologies Inc MSNSwitch MNT.2408 allows unauthenticated attackers to arbitrarily configure settings within the application, leading to remote code execution...

CVE-2022-2408

creationtimestamp| type| source ---|---|--- 2022-07-14 22:32:48+00:00| seen| https://t.me/cibsecurity/46270...

CVE-2022-2408

Mattermost CVE-2022-2408 affects version 6.7.0 and earlier. The Guest account feature fails to properly restrict permissions, allowing a guest to fetch a list of all public channels in a team even if not a member of those channels. Root cause is a permission-check issue within the Guest feature. ...

CVE-2021-2408

CVE-2021-2408 affects Oracle PeopleSoft: PT PeopleTools (Notification Configuration) 8.59. Vulnerable component and impact described as unauthorized read/update/delete of certain data, with network access over HTTP and user interaction required. Root cause aligns with a logic/authorization issue ...

CVE-2021-2408

Vulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft component: Notification Configuration. The supported version that is affected is 8.59. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

Debian DLA-2408-1 : thunderbird security update

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code or denial of service. Debian follows the Thunderbird upstream releases. Support for the 68.x series has ended, so starting with this update we're now following the 78.x releases. The 78.x...

Debian: Security Advisory (DLA-2408-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for quagga (EulerOS-SA-2019-2408)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for nfs-utils (openSUSE-SU-2019:2408-1)

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

PRODSECBUG-2408: Unrestricted upload of file with dangerous type

More info at https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update...

CVE-2019-2408

Vulnerability in the PeopleSoft Enterprise PeopleTools component of Oracle PeopleSoft Products subcomponent: Feeds. Supported versions that are affected are 8.55, 8.56 and 8.57. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise PeopleSoft...

CVE-2019-2408

CVE-2019-2408 affects the Oracle PeopleSoft Enterprise PeopleTools component, subcomponent Feeds, with affected versions 8.55, 8.56, and 8.57. The vulnerability is exploitable over a network via HTTP and unauthenticated access is possible, but exploitation requires human interaction from a user o...