PT-2024-33139 · Unknown · Xiao He Smart

Name of the Vulnerable Software and Affected Versions: XIAO HE Smart version 4.3.1 Description: The issue is related to incorrect access control, allowing attackers to access sensitive information by analyzing the code and data within the APK file. Recommendations: For XIAO HE Smart version 4.3.1...

Understanding the Initial Stages of Web Shell and VPN Threats: An MXDR Analysis

While cyberattacks that employ web shells and VPN compromise are not particularly novel, they are still prevalent. The recent incidents that Trend Micro MXDR analyzed highlight the importance of behavioral analysis and anomaly detection in security measures...

PT-2024-33144 · Wear Sync · Wear Sync

Name of the Vulnerable Software and Affected Versions: Wear Sync version 1.2.0 Description: The issue is related to incorrect access control in the firmware update and download processes. This allows attackers to access sensitive information by analyzing the code and data within the APK file...

CVE-2024-48538

CVE-2024-48538 affects Neye3C v4.5.2.0, where incorrect access control during firmware update and download enables an attacker to access sensitive information by inspecting code/data inside the APK. Root cause is improper access control in the update/download workflow; impact is exposure of confi...

CVE-2024-48540

Incorrect access control in XIAO HE Smart 4.3.1 allows attackers to access sensitive information by analyzing the code and data within the APK file...

CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024-38094)

A high-severity flaw impacting Microsoft SharePoint has been added to the Known Exploited Vulnerabilities KEV catalog by the U.S. Cybersecurity and Infrastructure Security Agency CISA on Tuesday, citing evidence of active exploitation. The vulnerability, tracked as CVE-2024-38094 CVSS score: 7.2,...

Exploit for Cross-site Scripting in Netgate Pfsense

This post is a research article published by EQSTLabhttps://g...

MAL-2024-9460 Malicious code in sling-sdk (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 71488d197d0f61aaf0b4572ea62c47f0735db314374038355cbdf5735e7ca1b1 The OpenSSF Package Analysis project identified 'sling-sdk' @ 9.8.0 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9454 Malicious code in ohcm-polymerase (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c32ed5d7615b41cea1ded4a590d20e42f353b3a6e43315a2eac25a8c63ab6607 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-9452 Malicious code in pwn2day-shell (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 0511d29fc5da2e5b913f1015e3a397abcd973ec98bffbff3b41a857ba68dab31 The OpenSSF Package Analysis project identified 'pwn2day-shell' @ 1.0.1 npm as malicious. It is considered malicious because: - The package...

MAL-2024-9450 Malicious code in @wf-wfmfe/pxp (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis b9fe18a3d9fa1111ff6b8067d5506179c0ddfa8365404a2b5ee147b523086df3 The OpenSSF Package Analysis project identified '@wf-wfmfe/pxp' @ 99.0.0 npm as malicious. It is considered malicious because: - The package...

Exploit for Unrestricted Upload of File with Dangerous Type in Git

CVE-2024-32002 Versions 1.0.0https://github.com/grec...

Malicious code in mcroutingservice (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 15262556e3b11cafe3a148da26c5ca6a92e8ad98b01bf2f4c5deb6a26cdda697 The OpenSSF Package Analysis project identified 'mcroutingservice' @ 4.9.9 npm as malicious. It is considered malicious because: - The package...

CVE-2024-50021

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icedpllinitrclkpins This patch addresses a reference count handling issue in the icedpllinitrclkpins function. The function calls icedpllgetpins, which increments the reference count of t...

CVE-2024-50020

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50021

Technical details for CVE-2024-50021 are not publicly disclosed in the provided Connected documents. Monitor for updates from vendor/security advisories.

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50020 ice: Fix improper handling of refcount in ice_sriov_set_msix_vec_count()

In the Linux kernel, the following vulnerability has been resolved: ice: Fix improper handling of refcount in icesriovsetmsixveccount This patch addresses an issue with improper reference count handling in the icesriovsetmsixveccount function. First, the function calls icegetvfbyid, which...

CVE-2024-50005

In the Linux kernel, the following vulnerability has been resolved: mac802154: Fix potential RCU dereference issue in mac802154scanworker In the mac802154scanworker function, the scanreq-type field was accessed after the RCU read-side critical section was unlocked. According to RCU usage rules,...