Don’t share the viral Instagram Meta AI “legal” post

A new variation of a hoax that has been doing the rounds on Facebook for years has crossed over to Instagram. We’re seeing this post on Instagram Stories a lot suddenly over the last few days. The post is usually posted as a shareable screenshot on Instagram Stories, but it’s also been spotted on...

Cisco Catalyst Center 安全漏洞

Cisco Catalyst Center Cisco DNA Center is a network management system from Cisco USA. A security vulnerability exists in Cisco Catalyst Center that stems from the use of a static SSH host key...

Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution Risk

A critical security flaw has been disclosed in the Microchip Advanced Software Framework ASF that, if successfully exploited, could lead to remote code execution. The vulnerability, tracked as CVE-2024-7490, carries a CVSS score of 9.5 out of a maximum of 10.0. It has been described as a...

DoS (Denial of Service) decode-uri-component Dependency in Confluence Data Center

This High severity decode-uri-component Dependency vulnerability was introduced in version 7.0.1 of Confluence Data Center. This decode-uri-component Dependency vulnerability, with a CVSS Score of 7.5, allows an unauthenticated attacker to expose assets in your environment susceptible to...

BASM (Broken Authentication & Session Management) browserify-sign Dependency in Confluence Data Center

This High severity BASM Broken Authentication & Session Management vulnerability was introduced in version 7.11 of Confluence Data Center. This BASM Broken Authentication & Session Management vulnerability, with a CVSS Score of 7.5, allows an unauthenticated attacker to exploit a cryptographic...

CVE-2024-46717

creationtimestamp| type| source ---|---|--- 2024-09-18 10:01:33+00:00| seen| https://t.me/cvedetector/5916 2025-12-03 14:14:49+00:00| seen| https://vulnerability.circl.lu/bundle/816dcc8e-f25a-4895-9b59-1bbd9caeccb8 2026-03-19 00:00:00+00:00| seen|...

The vulnerability of the Admin Center remote management tool for Windows operating systems allows a perpetrator to disclose sensitive information or cause service failures.

The vulnerability of the Admin Center remote management tool for Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or cause service failures...

About the security content of iOS 18 and iPadOS 18

About the security content of iOS 18 and iPadOS 18 This document describes the security content of iOS 18 and iPadOS 18. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...

About the security content of macOS Ventura 13.7

About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

About the security content of iOS 17.7 and iPadOS 17.7

About the security content of iOS 17.7 and iPadOS 17.7 This document describes the security content of iOS 17.7 and iPadOS 17.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches ...

About the security content of watchOS11

About the security content of watchOS11 This document describes the security content of watchOS 11. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

The vulnerability of the software for continuous integration and deployment of Bamboo Server and the Bamboo Data Center continuous delivery pipeline lies in insufficient validation of input data, allowing a perpetrator to execute arbitrary code.

The vulnerability of software for continuous integration and deployment of Bamboo Server and the Bamboo Data Center continuous delivery pipeline is related to insufficient validation of input data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

HPESBHF04705 rev.2 - Certain HPE StoreEasy Servers Using Certain Intel Processors, INTEL-SA-01097, 2024.3 IPU - Intel Processor Advisory, Local Denial of Service Vulnerability

Potential Security Impact: Local: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE StoreEasy 1660 Storage - Prior to v2.2008-07-2024 U46 ROM Family HPE StoreEasy 1670 Expanded Storage - Prior to v2.2008-07-2024 U50 ROM Family HPE StoreEasy 1860 Storage -...

Scammers advertise fake AppleCare+ service via GitHub repos

Weve uncovered a malicious campaign going after Mac users looking for support or extended warranty from Apple via the AppleCare+ support plans. The perpetrators are buying Google ads to lure in their victims and redirect them to bogus pages hosted on GitHub, the developer and code repository...

The vulnerability of the Windows operating system’s update center allows a hacker to execute arbitrary code.

The vulnerability of the Windows operating system’s update center is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VICIdial 2.14-917a Remote Code Execution

KL-001-2024-012: VICIdial Authenticated Remote Code Execution Title: VICIdial Authenticated Remote Code Execution Advisory ID: KL-001-2024-012 Publication Date: 2024-09-10 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2024-012.txt 1. Vulnerability Details Affected Vendor:...

VICIdial 2.14-917a SQL Injection Vulnerability

An unauthenticated attacker can leverage a time-based SQL injection vulnerability in VICIdial version 2.14-917a to enumerate database records. By default, VICIdial stores plaintext credentials within the database. Title: VICIdial Unauthenticated SQL Injection Publication URL:...

VICIdial 2.14-917a Remote Code Execution Vulnerability

An attacker with authenticated access to VICIdial version 2.14-917a as an agent can execute arbitrary shell commands as the root user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective. Title: VICIdial Authenticated Remo...

CVE-2024-43475 Microsoft Windows Admin Center Information Disclosure Vulnerability

...

CVE-2024-43475

CVE-2024-43475 is a Microsoft Windows Admin Center information-disclosure vulnerability. Connected sources describe a memory-corruption issue (buffer overflow) affecting Windows Admin Center-related functionality that can lead to sensitive data disclosure. CVSS details from the initial document i...