The vulnerability of the netfilter component in the Linux operating system’s kernel allows a hacker to induce a service failure.

The vulnerability of the netfilter component in the Linux operating system’s kernel is related to a break in the memcpy function when connlimit is used in elements of the set. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

CVE-2024-30799

An issue in PX4 Autopilot v1.14 and before allows a remote attacker to execute arbitrary code and cause a denial of service via the Breach Return Point function...

ppsedu.com Cross Site Scripting vulnerability OBB-3919222

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Hyperledger: Code exec on Github runner via Pull request name

A command injection vulnerability was discovered in the GitHub Actions workflow of the Hyperledger Cacti repository. The vulnerability allowed an attacker to inject arbitrary commands and execute them on the GitHub runner by crafting a malicious pull request title. The vulnerability was present i...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner from an individual developer in Hayden, USA. A security vulnerability exists in Mealie versions prior to 1.4.0, which stems from a safescrapehtml function that utilizes a user-controlled URL to make a request to a remote server, which can be...

Mealie 安全漏洞

Mealie is a self-hosted recipe manager and meal planner from an individual developer in Hayden, USA. A security vulnerability exists in Mealie versions prior to 1.4.0, which stems from a lack of rate limiting on the endpoint also allows an attacker to generate persistent requests to any target of...

WeBid 安全漏洞

WeBid is an open source auction website building solution. A security vulnerability exists in WeBid v1.2.1, which stems from the presence of an insecure direct object reference and access control corruption vulnerability...

Mental health company Cerebral failed to protect sensitive personal data, must pay $7 million

The Federal Trade Commission FTC has reached a settlement with online mental health services company Cerebral after the company was charged with failing to secure and protect sensitive health data. Cerebral has agreed to an order that will restrict how the company can use or disclose sensitive...

TotalCloud Insights: Safeguarding Your Cloud Database from SQL Server Threats and Lateral Movement Risks

Introduction In todays tech-driven world, cloud computing has completely changed how businesses store and manage their data. It offers many advantages, like flexibility, scalability, and cost savings, making it a go-to choice for organizations of all sizes. Keeping your data secure, especially in...

Improper Authentication

org.keycloak:keycloak-services is vulnerable to Improper Authentication. This vulnerability is due to improperly enforcement of token types, allowing an authenticated attacker to exchange a logout token for an access token, potentially accessing data beyond permitted permissions...

The vulnerability in the implementation of the Secure Boot protocol for operating systems with security features allows a perpetrator to circumvent security restrictions.

The vulnerability of the Secure Boot protocol for operating systems running Windows is related to a breach in the data protection mechanism. Exploiting this vulnerability could allow an attacker to circumvent security restrictions...

The vulnerability of the “Enter Package Data” component of the SAP Group Reporting Data Collection software allows a perpetrator to enhance their privileges and compromise the integrity of the data.

The vulnerability of the “Enter Package Data” component in the SAP Group Reporting Data Collection software relates to deficiencies in authentication procedures. Exploiting this vulnerability can allow attackers to enhance their privileges remotely and compromise the integrity of data...

Tolgee 安全漏洞

Tolgee is an open source multilingual translation and localization platform designed to help development teams easily manage and maintain multilingual software applications and websites. A security vulnerability exists in Tolgee version v3.57.2, which stems from a vulnerability that allows an...

CVE-2024-3841

Insufficient data validation in Browser Switcher in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to inject scripts or HTML into a privileged page via a malicious file. Chromium security severity: Medium...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou ET Technology CmsEasy. A security vulnerability exists in CmsEasy version 7.7.7.9, which stems from the presence of a code execution vulnerability...

Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System CCMS is a cyber cafe management system by the individual developer Anuj Kumar. A security vulnerability exists in phpgurukul Cyber Cafe Management System Using PHP & MySQL v1.0, which originates from a SQL injection vulnerability in file /edit-computer-detail.php...

CmsEasy 安全漏洞

CmsEasy is a content management system CMS for creating responsive websites from China's Jiuzhou Yitong Technology CmsEasy. A security vulnerability exists in CmsEasy version 7.7.7.9, which originates from vulnerability to arbitrary file deletion attack...

Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System CCMS is a cyber cafe management system by the individual developer Anuj Kumar. A security vulnerability exists in phpgurukul Cyber Cafe Management System Using PHP & MySQL version 1.0, which originates from a SQL injection vulnerability in the manage-Computer.PHP page...

Cyber Cafe Management System 安全漏洞

Cyber Cafe Management System CCMS is a cyber cafe management system by the individual developer Anuj Kumar. A security vulnerability exists in version 1.0 of the PHPGurukul Cyber Cafe Management System, which originates from a vulnerability that allows an attacker to perform SQL injection attacks...

CVE-2024-21020

Vulnerability in the Oracle Complex Maintenance, Repair, and Overhaul product of Oracle E-Business Suite component: LOV. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...