PT-2024-35947 · Eddi · Eddi

Name of the Vulnerable Software and Affected Versions: EDDI Enhanced Dialog Driven Interface versions prior to 5.4 Description: A path traversal vulnerability exists in the backup export functionality of EDDI, as implemented in RestExportService.java. This vulnerability allows an attacker to acce...

E.D.D.I 路径遍历漏洞

E.D.D.I is a LABS.AI open source middleware for connecting and managing LLM API robots. E.D.D.I suffers from a path traversal vulnerability that stems from a path traversal vulnerability in the backup export function. An attacker could use this vulnerability to access sensitive files on the serve...

PT-2024-34167 · Advantech · Advantech Eki-6333Ac-2G +1

Name of the Vulnerable Software and Affected Versions: Advantech EKI-6333AC-2G versions 1.6.3 and earlier Advantech EKI-6333AC-2GD versions 1.6.3 and earlier Advantech EKI-6333AC-1GPO versions 1.2.1 and earlier Description: A hard-coded credentials issue affects the backup configuration...

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller (NDFC) involves improper authorization, allowing a malicious individual to disclose protected information.

The vulnerability of the application software interface of the Cisco Nexus Dashboard Fabric Controller NDFC is related to improper authentication. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information by downloading configuration files or full backup files...

Exploit for Deserialization of Untrusted Data in Veeam Veeam_Backup_\&_Replication

CVE-2024-40711-poc CVE-2024-40711 is a serious vulnerability...

CVE-2024-1868

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-1868

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-1867

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-1867

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-1868 G DATA Total Security Link Following Local Privilege Escalation Vulnerability

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

CVE-2024-1868

CVE-2024-1868 affects G DATA Total Security, specifically the G DATA Backup Service . The root cause is a symbolic link abuse in the backup service that allows a local attacker to overwrite a file, enabling privilege escalation to SYSTEM after gaining low-privilege code execution. Impact describe...

CVE-2024-1867

CVE-2024-1867 affects G DATA Total Security, targeting the G DATA Backup Service. The vulnerability arises from the ability to create a symbolic link in the Backup Service, which can be abused to delete a file and escalate privileges to SYSTEM by exploiting local code execution with low privilege...

CVE-2024-1867 G DATA Total Security Link Following Local Privilege Escalation Vulnerability

G DATA Total Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the target system in orde...

QNAP Systems Notes Station 安全漏洞

QNAP Notes Station 3 is a private cloud notes software that runs on QNAP NAS devices and supports real-time multi-person collaboration, version control, data encryption and snapshot backup. QNAP Notes Station 3 suffers from an authentication missing vulnerability that stems from the inclusion of ...

QNAP Systems Notes Station 安全漏洞

QNAP Notes Station 3 is a private cloud notes software that runs on QNAP NAS devices and supports real-time multi-person collaboration, version control, data encryption and snapshot backup. QNAP Notes Station 3 suffers from a command injection vulnerability, which stems from the application faili...

Malicious code in my-wallet-backupt-decryption-tool (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 27ce6fe7581d2cdb10673965b6fefaeef4f33c8ae7f8ab0f45e5e3341065620e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

November 21, 2024—KB5046714 (OS Build 19045.5198) Preview

None None...

PT-2025-3322

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the handling of plane refcount in the Linux kernel's drm/amd/display module. The mechanism to backup and restore plane states does not maintain the refcount, whic...

Important: Red Hat Security Advisory: OpenShift API for Data Protection (OADP) 1.3.4 security and bug fix update

OpenShift API for Data Protection OADP 1.3.4 is now available. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...

Unable to Interact with Some Hypervisors and Cloud Platforms

Veeam Backup & Replication 13.0.1 Upgrade Warning During the upgrade to Veeam Backup & Replication 13.0.1 or higher, the following warning may be displayed: Incompatible backup server certificate The certificate does not support child certificates creation and must be replaced for virtualization...