8688 matches found
Exploit for Improper Privilege Management in Coign
CVE-2023-43317 A normal user can elevate their privileges vi...
US Agencies Urged to Patch Ivanti VPNs That Are Actively Being Hacked
Plus: Microsoft says attackers accessed employee emails, Walmart fails to stop gift card fraud, “pig butchering” scams fuel violence in Myanmar, and more...
RPi-Jukebox-RFID Security Vulnerability
RPi-Jukebox-RFID is a contactless jukebox for the Raspberry Pi from the German individual developer Micz Flor. It plays audio files, playlists, podcasts, web streams and spotify triggered by the RFID card. A security vulnerability exists in MiczFlor RPi-Jukebox-RFID version 2.5.0 and earlier, whi...
E-Crime Rapper ‘Punchmade Dev’ Debuts Card Shop
The rapper and social media personality Punchmade Dev is perhaps best known for his flashy videos singing the praises of a cybercrime lifestyle. With memorable hits such as "Internet Swiping" and "Million Dollar Criminal" earning millions of views, Punchmade has leveraged his considerable followi...
The vulnerability of the Git-based software platform for collaborative code development on GitLab stems from improper verification of certificates during authentication using smart cards. This allows a perpetrator to impersonate another user and pass identity verification.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to improper verification of the certificate during authentication using smart cards. Exploiting this vulnerability allows a malicious actor, operating remotely, to bypass the authenticity...
Memory corruption
An attacker with network access to the affected PLC CJ-series and CS-series PLCs, all versions may use a network protocol to read and write files on the PLC internal memory and memory card...
CVE-2022-45794
CVE-2022-45794 affects Omron CS/CJ Series PLCs (CJ-series and CS-series, all versions). The underlying issue is missing authentication for a critical function, enabling a remote attacker with network access to read/write files on the PLC internal memory and memory card via the network protocol. D...
QEMU: e1000e: heap use-after-free in e1000e_write_packet_to_guest()
A DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service...
CVE-2023-48248
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file...
CVE-2023-48248
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file...
Code injection
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file...
CVE-2023-48248
The vulnerability allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session via a crafted URL, HTTP request, or simply by waiting for the victim to view the poisoned file...
CVE-2023-48248
Summary (CVE-2023-48248): The vulnerability affects Bosch Nexo cordless nutrunner devices and allows an authenticated remote attacker to upload a malicious file to the SD card, enabling execution of client-side script code inside the victim’s session via a crafted URL, HTTP request, or when the p...
PT-2024-13559 · Rexroth +1 · Nexo Cordless Nutrunner Nxa011S-36V +8
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue allows an authenticated remote attacker to upload a malicious file to the SD card containing arbitrary client-side script code and obtain its execution inside a victim’s session...
Bosch Nexo cordless nutrunner security breach
Bosch Nexo Cordless nutrunner is a series of cordless tightening wrenches with integrated controls from Bosch Germany. A security vulnerability exists in Bosch Nexo cordless nutrunner. The vulnerability allows an authenticated, remote attacker to upload a malicious file containing arbitrary...
January 9, 2024—KB5034129 (OS Build 20348.2227)
None None...
January 9, 2024—KB5034127 (OS Build 17763.5329) - EXPIRED
None None...
January 9, 2024—KB5034122 (OS Builds 19044.3930 and 19045.3930) - EXPIRED
None None...