9085 matches found
CVE-2024-22667
creationtimestamp| type| source ---|---|--- 2024-02-05 09:31:32+00:00| seen| https://t.me/ctinow/179064 2024-02-06 15:11:45+00:00| seen| https://t.me/ctinow/180037 2024-02-14 23:16:33+00:00| seen| https://t.me/ctinow/185105 2024-02-23 18:32:10+00:00| seen| https://t.me/ctinow/192009 2024-02-29...
CVE-2021-46903
An issue was discovered in LTOS-Web-Interface in Meinberg LANTIME-Firmware before 6.24.029 MBGID-9343 and 7 before 7.04.008 MBGID-6303. An admin can delete required user accounts in violation of expected access control...
Unverified Password Change
OctoPrint is vulnerable to Unverified Password Change. The vulnerability is due to improper validation within the password change functionality for admin accounts. The issue can be exploited to a malicious admin to change the passwords of other admin account...
Secure non-human identities with Wiz’s newest CIEM dashboard
Gain visibility into non-human identities in your environment and protect against risky service accounts with the new Non-Human Identities Dashboard...
CVE-2024-24573 facileManager Privilege Escalation via Mass Assignment
facileManager is a modular suite of web apps built with the sysadmin in mind. In versions 4.5.0 and earlier, when a user updates their profile, a POST request containing user information is sent to the endpoint server/fm-modules/facileManager/ajax/processPost.php. It was found that non-admins can...
PYSEC-2024-29
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their password. An attacker who managed to hijack an adm...
Design/Logic Flaw
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their password. An attacker who managed to hijack an adm...
GHSA-5626-PW9C-HMJR OctoPrint Unverified Password Change via Access Control Settings
Impact OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their password. An attacker who managed to hijack an admin account might use this to lock out...
CVE-2024-23637 OctoPrint Unverified Password Change via Access Control Settings
OctoPrint is a web interface for 3D printer.s OctoPrint versions up until and including 1.9.3 contain a vulnerability that allows malicious admins to change the password of other admin accounts, including their own, without having to repeat their password. An attacker who managed to hijack an adm...
CVE-2019-8811
creationtimestamp| type| source ---|---|--- 2024-01-31 07:37:11+00:00| seen| https://t.me/ctinow/176518 2024-01-31 09:11:49+00:00| seen| https://t.me/ctinow/176570 2024-01-31 10:11:26+00:00| seen| https://t.me/ctinow/176609 2024-01-31 16:12:18+00:00| seen| https://t.me/ctinow/176848 2024-01-31...
Malicious Google Ads Target Chinese Users, Covertly Delivering RATs
Summary: Chinese-speaking users are being targeted in an ongoing malvertising campaign that leverages Google ads. The threat actor employs Google advertiser accounts to create deceptive ads that lure users into downloading Remote Administration Trojans RATs. The malicious ads are designed to mimi...
CVE-2019-8798
creationtimestamp| type| source ---|---|--- 2024-01-29 20:21:12+00:00| seen| https://t.me/ctinow/175512 2024-01-31 08:41:49+00:00| seen| https://t.me/ctinow/176552 2024-01-31 11:07:10+00:00| seen| https://t.me/ctinow/176650 2024-01-31 14:41:59+00:00| seen| https://t.me/ctinow/176780...
Sheer: Cleartext Transmission of password via Email
The password was sent to the user's email in cleartext after successful signup as a fan...
CVE-2024-0930
creationtimestamp| type| source ---|---|--- 2024-01-26 17:31:31+00:00| seen| https://t.me/ctinow/174352 2024-01-28 10:11:24+00:00| seen| https://t.me/arpsyndicate/3265 2024-02-01 17:16:35+00:00| seen| https://t.me/ctinow/177689 2024-02-19 09:51:25+00:00| seen| https://t.me/ctinow/187543...
CVE-2024-21985
ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include...
CVE-2024-21985 Privilege Escalation Vulnerability in ONTAP 9
ONTAP 9 versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10 and 9.13.1P4 are susceptible to a vulnerability which could allow an authenticated user with multiple remote accounts with differing roles to perform actions via REST API beyond their intended privilege. Possible actions include...
Malicious Ads on Google Target Chinese Users with Fake Messaging Apps
Chinese-speaking users have been targeted by malicious Google ads for restricted messaging apps like Telegram as part of an ongoing malvertising campaign. "The threat actor is abusing Google advertiser accounts to create malicious ads and pointing them to pages where unsuspecting users will...
NetApp ONTAP Security Vulnerability
NetApp ONTAP is a proprietary operating system from Network Appliance NetApp, Inc. It is used for storage disk arrays. A security vulnerability exists in NetApp ONTAP versions prior to 9.9.1P18, 9.10.1P16, 9.11.1P13, 9.12.1P10, and 9.13.1P4, which stems from a vulnerability that allows an...