New Threat Actor 'Void Arachne' Targets Chinese Users with Malicious VPN Installers

Chinese-speaking users are the target of a never-before-seen threat activity cluster codenamed Void Arachne that employs malicious Windows Installer MSI files for virtual private networks VPNs to deliver a command-and-control C&C framework called Winos 4.0. "The campaign also promotes compromised...

PT-2024-27677 · Phpvod · Phpvod

Name of the Vulnerable Software and Affected Versions: PHPVOD version 4.0 Description: A reflected cross-site scripting XSS issue was found in PHPVOD. The issue is related to the id parameter at the "/view/admin/view.php" API endpoint. Recommendations: For PHPVOD version 4.0, avoid using the id...

Important Photon OS Security Update - PHSA-2024-4.0-0633

Updates of 'glibc' packages of Photon OS have been released...

OPENSUSE-SU-2024:11506-1 libjavascriptcoregtk-4_0-18-2.32.4-1.1 on GA media

These are all security issues fixed in the libjavascriptcoregtk-40-18-2.32.4-1.1 package on the GA media of openSUSE Tumbleweed...

Joomla core 3.7.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1 - Unauthenticated XSS in com_fields default field value vulnerability

Unauthenticated XSS in comfields default field value vulnerability discovered by ? in WordPress Core Joomla versions 3.7.0-3.10.15-elts,4.0.0-4.4.5,5.0.0-5.1.1...

Moderate Photon OS Security Update - PHSA-2024-4.0-0625

Updates of 'libvirt' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0624

Updates of 'krb5' packages of Photon OS have been released...

PCI DSS 4.0: Get Audit-Ready for the New Requirements

The Payment Card Industry Data Security Standard PCI DSS originated in 2004 and is managed by the PCI Security Standards Council to ensure security for the global payment industry. This mandate applies to all entities worldwide that store, process, or transmit payment cardholder data or sensitive...

Important Photon OS Security Update - PHSA-2024-4.0-0614

Updates of 'wireshark' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2024-4.0-0613

Updates of 'unixODBC' packages of Photon OS have been released...

CVE-2023-51476 WordPress WP MLM Unilevel plugin <= 4.0 - Unauthenticated Account Takeover vulnerability

Improper Privilege Management vulnerability in IOSS WP MLM Unilevel allows Privilege Escalation.This issue affects WP MLM Unilevel: from n/a through 4.0...

WordPress plugin WP MLM Unilevel 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

PT-2024-10875 · B&R · Automation Studio

Name of the Vulnerable Software and Affected Versions: B&R Automation Studio versions 4.0 through 4.11 Description: The issue is related to improper DLL loading algorithms, which may allow an authenticated local attacker to execute code in the context of the product with elevated privileges...

VulnCheck KEV: CVE-2016-5734

phpMyAdmin 4.0.x before 4.0.10.16, 4.4.x before 4.4.15.7, and 4.6.x before 4.6.3 does not properly choose delimiters to prevent use of the pregreplace e aka eval modifier, which might allow remote attackers to execute arbitrary PHP code via a crafted string, as demonstrated by the table...

Debian: Security Advisory (DSA-5684-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell OpenManage Enterprise Access Control Error Vulnerability

Dell OpenManage Enterprise is an easy-to-use, one-to-many systems management console for IT infrastructure management from Dell. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. An Access Control Error vulnerability exis...

Debian dsa-5684 : gir1.2-javascriptcoregtk-4.0 - security update

The remote Debian 11 / 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5684 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5684-1 [email protected]...

CVE-2022-48704 drm/radeon: add a force flush to delay work when radeon

In the Linux kernel, the following vulnerability has been resolved: drm/radeon: add a force flush to delay work when radeon Although radeon card fence and wait for gpu to finish processing current batch rings, there is still a corner case that radeon lockup work queue may not be fully flushed, an...

CVE-2024-28978

Dell OpenManage Enterprise, versions 3.10 and 4.0, contains an Improper Access Control vulnerability. A high privileged remote attacker could potentially exploit this vulnerability, leading to unauthorized access to resources...

Dell OpenManage Enterprise 访问控制错误漏洞

Dell OpenManage Enterprise is an easy-to-use, one-to-many systems management console for IT infrastructure management from Dell. The software supports cost-effective, comprehensive lifecycle management of Dell EMC PowerEdge servers from a single console. An Access Control Error vulnerability exis...