RockOA Security Breach

RockOA Xinhu is an open source office OA system. A security vulnerability exists in Xinhu RockOA version v2.6.3, which originates from the inclusion of a Reflected Cross-Site Scripting XSS vulnerability via the /chajian/inputChajian.php component...

The vulnerability of the mlx4_en_try_alloc_resources() function in the driver for Mellanox Technologies’ 1/10/40Gbit core operating system for Linux allows a attacker to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the mlx4entryallocresources function in the drivers/net/ethernet/mellanox/mlx4/ennetdev.c file of the Mellanox Technologies networking adapter driver for Linux-based systems is related to the reutilization of previously freed memory. Exploiting this vulnerability could allow ...

The Algorithms security breach

The Algorithms is a library of The Algorithms open source. It is a collection of open source implementations of various algorithms. A security vulnerability exists in The Algorithms that stems from the presence of a deeply recursive segmentation error...

Truist bank confirms data breach

On Wednesday June 12, 2024, a well-known dark web data broker and cybercriminal acting under the name "Sp1d3r" offered a significant amount of data allegedly stolen from Truist Bank for sale. Truist is a US bank holding company and operates 2,781 branches in 15 states and Washington DC. By assets...

Location Tracker Firm Tile Hit by Data Breach, Hackers Access Internal Tools

Millions of Tile users' data potentially exposed in a data breach. Hackers accessed internal tools, but no financial info or location data compromised. Be cautious of phishing attempts...

Aegon Life Security Breach

Aegon Life is an application from Aegon Life, Inc. A security vulnerability exists in Aegon Life v1.0 that originates from allowing an attacker to execute arbitrary code by uploading a crafted image file...

Nextcloud Security Breach

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Deck versions prior to 1.6.6, prior to 1.7.5, prior to 1.8.7, prior to 1.9.6, prior to 1.11.3, and prior to...

Huawei Cell Phone Security Breach

Huawei cell phones are smartphones from Huawei, a Chinese company. A security vulnerability exists in the Huawei phone that originates from an insufficient privilege checking vulnerability in the Star Flash module...

LB-LINK BL-W1210M Security Breach

LB-LINK BL-W1210M is a wireless router from China Bilink LB-LINK. A security vulnerability exists in LB-LINK BL-W1210M version v2.0, which stems from the presence of a clickjacking vulnerability via the administrator login page...

Nextcloud Security Breach

Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud Server that originates from an attacker with read-only access to a file being able to restore an older version...

CVE-2024-38280 Cleartext Storage in a File or on Disk in Motorola Solutions Vigilant Fixed LPR Coms Box (BCAV1F2-C600)

An unauthorized user is able to gain access to sensitive data, including credentials, by physically retrieving the hard disk of the product as the data is stored in clear text...

CVE-2024-2098

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected fil...

CVE-2024-2098 Download Manager <= 3.2.89 - Improper Authorization via protectMediaLibrary

The Download Manager plugin for WordPress is vulnerable to unauthorized access of data due to an improper authorization check on the 'protectMediaLibrary' function in all versions up to, and including, 3.2.89. This makes it possible for unauthenticated attackers to download password-protected fil...

cri-o: malicious container can create symlink on host

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal “../“. This flaw allows the container to read and write to arbitrary files on the host system...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a type confusion in the handleinit module of goodix/main/main.c, where memory corruption may occur...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, Inc USA. A security vulnerability exists in Google Pixel, which stems from an integer overflow in the prepareresponse module of lwisperiodicio.c, where out-of-bounds writes are possible...

Google Pixel Security Breach

Google Pixel is a smartphone from Google, an American company. A security vulnerability exists in Google Pixel, which stems from a competing condition in the secmediaprotect module of media.c, where a privilege bypass is possible...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from improper use of encryption and possible elevation of privilege...

Google Pixel Security Breach

Google Pixel is a smartphone from the American company Google Google. Google Pixel has a security vulnerability that stems from privilege bypass...

Google Pixel Security Breach

Google Pixel is a smartphone from Google USA. Google Pixel suffers from a security vulnerability that stems from a side channel information disclosure, which may have information leakage...