2554 matches found
CVE-2024-49367
CVE-2024-49367 affects Nginx UI prior to version 2.0.0-beta.36. The issue is a controllable log path that, when combined with directory traversal at the /api/configs endpoint, allows reading directories and file contents on the server. A fixed version is 2.0.0-beta.36. Connected sources confirm t...
Adobe Media Encoder < 14.3 Multiple Vulnerabilities (APSB20-36) (macOS)
The version of Adobe Media Encoder installed on the remote macOS host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-36 advisory. - Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful exploitatio...
Adobe Media Encoder < 14.3 Multiple Vulnerabilities (APSB20-36)
The version of Adobe Media Encoder installed on the remote Windows host is prior to 14.3. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-36 advisory. - Adobe Media Encoder versions 14.2 and earlier have an out-of-bounds write vulnerability. Successful...
Adobe Illustrator < 24.0 Multiple Vulnerabilities (APSB19-36) (macOS)
The version of Adobe Illustrator installed on the remote macOS host is prior to 24.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-36 advisory. - Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation...
Adobe Illustrator < 24.0 Multiple Vulnerabilities (APSB19-36)
The version of Adobe Illustrator installed on the remote Windows host is prior to 24.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB19-36 advisory. - Adobe Illustrator CC versions 23.1 and earlier have a memory corruption vulnerability. Successful exploitation...
CVE-2024-47080
creationtimestamp| type| source ---|---|--- 2024-10-15 17:46:36+00:00| seen| https://t.me/cvedetector/7925...
CVE-2024-47329
creationtimestamp| type| source ---|---|--- 2024-10-06 14:02:36+00:00| seen| https://t.me/cvedetector/7144...
CVE-2024-8897
creationtimestamp| type| source ---|---|--- 2024-09-17 15:36:29+00:00| seen| https://t.me/cvedetector/5807...
CVE-2024-43913
creationtimestamp| type| source ---|---|--- 2024-08-26 13:42:36+00:00| seen| https://t.me/cvedetector/4112...
Blind Eagle Hackers Exploit Spear-Phishing to Deploy RATs in Latin America
Cybersecurity researchers have shed light on a threat actor known as Blind Eagle that has persistently targeted entities and individuals in Colombia, Ecuador, Chile, Panama, and other Latin American nations. Targets of these attacks span several sectors, including governmental institutions,...
BlindEagle flying high in Latin America
BlindEagle, also known as "APT-C-36", is an APT actor recognized for employing straightforward yet impactful attack techniques and methodologies. The group is known for their persistent campaigns targeting entities and individuals in Colombia, Ecuador, Chile, Panama and other countries in Latin...
CVE-2024-7420
creationtimestamp| type| source ---|---|--- 2024-08-15 05:56:36+00:00| seen| https://t.me/cvedetector/3225...
SUSE CVE-2024-41817
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
ImageMagick < 7.1.1-36 Arbitrary Code Execution
The remote Windows host has a version of ImageMagick installed that is prior to 7.1.1-36. It is, therefore, affected by an arbitrary code execution vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...
CVE-2024-41817
A flaw was found in ImageMagick. The 'AppImage' version of ImageMagick, when executed with an empty path in the MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables, can load malicious configuration files or shared libraries in the current directory, resulting in arbitrary code execution...
UBUNTU-CVE-2024-41817
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
CVE-2024-41817 Arbitrary Code Execution in `AppImage` version `ImageMagick`
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
CVE-2024-41817 Arbitrary Code Execution in `AppImage` version `ImageMagick`
ImageMagick is a free and open-source software suite, used for editing and manipulating digital images. The AppImage version ImageMagick might use an empty path when setting MAGICKCONFIGUREPATH and LDLIBRARYPATH environment variables while executing, which might lead to arbitrary code execution b...
CVE-2024-7188
creationtimestamp| type| source ---|---|--- 2024-07-29 09:36:05+00:00| seen| https://t.me/cvedetector/1815 2024-07-30 10:58:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/8123 2024-09-07 05:42:04+00:00| published-proof-of-concept| https://t.me/codeb0ss/1529...