Critical Flaws Found in ConnectWise ScreenConnect Software - Patch Now

ConnectWise has released software updates to address two security flaws in its ScreenConnect remote desktop and access software, including a critical bug that could enable remote code execution on affected systems. The vulnerabilities are listed below - CVE-2024-1708 CVSS score: 8.4 - Improper...

CVE-2022-48625

creationtimestamp| type| source ---|---|--- 2024-02-20 01:21:34+00:00| seen| https://t.me/ctinow/188013 2024-02-20 01:26:32+00:00| seen| https://t.me/ctinow/188017 2024-02-21 06:48:57+00:00| seen| https://t.me/arpsyndicate/3696...

CVE-2024-25636 Lack of media type verification of Activity Streams objects allows impersonation and takeover of remote accounts

Misskey is an open source, decentralized social media platform with ActivityPub support. Prior to version 2024.2.0, when fetching remote Activity Streams objects, Misskey doesn't check that the response from the remote server has a Content-Type header value of the Activity Streams media type, whi...

CVE-2024-25981

creationtimestamp| type| source ---|---|--- 2024-02-19 18:26:49+00:00| seen| https://t.me/ctinow/187857 2024-02-19 18:26:57+00:00| seen| https://t.me/ctinow/187864 2024-02-20 18:42:37+00:00| seen| https://t.me/arpsyndicate/3667 2024-03-08 11:23:47+00:00| seen| https://t.me/ctinow/203223...

CVE-2024-25623 Lack of media type verification of Activity Streams objects allows impersonation of remote accounts

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.2.7, 4.1.15, 4.0.15, and 3.5.19, when fetching remote statuses, Mastodon doesn't check that the response from the remote server has a Content-Type header value of the Activity Streams media type, which...

CVE-2024-25623 Lack of media type verification of Activity Streams objects allows impersonation of remote accounts

Mastodon is a free, open-source social network server based on ActivityPub. Prior to versions 4.2.7, 4.1.15, 4.0.15, and 3.5.19, when fetching remote statuses, Mastodon doesn't check that the response from the remote server has a Content-Type header value of the Activity Streams media type, which...

CVE-2024-1345

creationtimestamp| type| source ---|---|--- 2024-02-19 13:27:03+00:00| seen| https://t.me/ctinow/187651 2024-02-19 13:31:10+00:00| seen| https://t.me/ctinow/187655 2024-02-20 18:55:35+00:00| seen| https://t.me/arpsyndicate/3675...

CVE-2020-36774

creationtimestamp| type| source ---|---|--- 2024-02-19 03:31:55+00:00| seen| https://t.me/ctinow/187429 2024-02-19 03:31:56+00:00| seen| https://t.me/ctinow/187430 2024-02-19 10:31:29+00:00| seen| https://t.me/ctinow/187560 2024-02-20 05:06:30+00:00| seen| https://t.me/arpsyndicate/3537...

Huawei EMUI 安全漏洞

Huawei HarmonyOS is an operating system from Huawei, a Chinese company. It provides a full-scenario distributed operating system based on a microkernel.Huawei EMUI is a user interface developed by Huawei based on the Android operating system. A denial of service vulnerability exists in Huawei...

CVE-2022-41738

creationtimestamp| type| source ---|---|--- 2024-02-17 18:21:31+00:00| seen| https://t.me/ctinow/187003 2024-02-17 18:21:34+00:00| seen| https://t.me/ctinow/187006 2024-03-08 09:51:59+00:00| seen| https://t.me/ctinow/203187...

CVE-2024-25218

creationtimestamp| type| source ---|---|--- 2024-02-16 23:16:58+00:00| seen| https://t.me/ctinow/186684 2024-03-06 15:46:07+00:00| seen| https://t.me/ctinow/201453...

CVE-2024-25221

creationtimestamp| type| source ---|---|--- 2024-02-16 23:16:55+00:00| seen| https://t.me/ctinow/186681 2024-03-06 15:46:08+00:00| seen| https://t.me/ctinow/201454...

CVE-2024-21984

StorageGRID formerly StorageGRID Webscale versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting XSS vulnerability. Successful exploit requires the attacker to know specific information about the target instance and trick a privileged user into clicking a...

Cross site scripting

StorageGRID formerly StorageGRID Webscale versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting XSS vulnerability. Successful exploit requires the attacker to know specific information about the target instance and trick a privileged user into clicking a...

CVE-2024-21984 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)

StorageGRID formerly StorageGRID Webscale versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting XSS vulnerability. Successful exploit requires the attacker to know specific information about the target instance and trick a privileged user into clicking a...

CVE-2024-21984 Reflected Cross-Site Scripting Vulnerability in StorageGRID (formerly StorageGRID Webscale)

StorageGRID formerly StorageGRID Webscale versions prior to 11.8 are susceptible to a difficult to exploit Reflected Cross-Site Scripting XSS vulnerability. Successful exploit requires the attacker to know specific information about the target instance and trick a privileged user into clicking a...

NetApp StorageGRID Cross-Site Scripting Vulnerability

NetApp StorageGRID is a suite of object storage solutions from Network Appliance NetApp. A security vulnerability exists in NetApp StorageGRID versions prior to 11.8. An attacker could exploit the vulnerability to view or modify configuration settings or add/modify user accounts...

PT-2024-19138 · Netapp · Storagegrid

Name of the Vulnerable Software and Affected Versions: StorageGRID formerly StorageGRID Webscale versions prior to 11.8 Description: The issue is a difficult to exploit Reflected Cross-Site Scripting XSS vulnerability. Successful exploitation requires the attacker to know specific information abo...

CVE-2024-23478

creationtimestamp| type| source ---|---|--- 2024-02-15 22:31:36+00:00| seen| https://t.me/ctinow/185926 2024-02-19 11:22:18+00:00| seen| https://t.me/truesecator/5427 2024-03-08 08:56:31+00:00| seen| https://t.me/ctinow/203147 2024-07-22 12:54:50+00:00| seen| https://t.me/MrVGunz/1211...

CVE-2024-1530

creationtimestamp| type| source ---|---|--- 2024-02-15 14:21:08+00:00| seen| https://t.me/ctinow/185531 2024-02-15 14:27:05+00:00| seen| https://t.me/ctinow/185546 2024-03-12 18:16:49+00:00| seen| https://t.me/ctinow/205949...