CVE-2024-24698 Zoom Clients - Improper Authentication

Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access...

CVE-2024-24697 Zoom Clients - Untrusted Search Path

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access...

CVE-2024-24697 Zoom Clients - Untrusted Search Path

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access...

PT-2024-2684 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom versions prior to the fixed version Description: The issue is related to an untrusted search path in some Zoom 32-bit Windows clients. This allows an authenticated user to conduct an escalation of privilege via local access...

Do Any HTTP Clients Not Support SNI?

In this blog post, we’ll share the results of an internal research project we conducted on our CDN customers focused on websites that are getting non-Server Name Indication SNI traffic. The goal of our research was to answer the following questions: How much non-SNI traffic is seen? What is the...

CVE-2023-45718

Sametime is impacted by a failure to invalidate sessions. The application is setting sensitive cookie values in a persistent manner in Sametime Web clients. When this happens, cookie values can remain valid even after a user has closed out their session...

CVE-2024-25452

creationtimestamp| type| source ---|---|--- 2024-02-09 16:27:20+00:00| seen| https://t.me/ctinow/182125 2024-02-13 02:16:36+00:00| seen| https://t.me/ctinow/183552 2024-03-03 08:41:47+00:00| seen| https://t.me/ctinow/198606...

Huawei EulerOS: Security Advisory for samba (EulerOS-SA-2024-1163)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-20903

creationtimestamp| type| source ---|---|--- 2024-02-06 18:41:41+00:00| seen| https://t.me/ctinow/180228 2024-02-17 03:26:35+00:00| seen| https://t.me/ctinow/186741...

CVE-2024-24939

creationtimestamp| type| source ---|---|--- 2024-02-06 11:26:56+00:00| seen| https://t.me/ctinow/179915 2024-03-01 09:41:46+00:00| seen| https://t.me/ctinow/197441...

Security Bulletin: There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2023-25194)

Summary There is a vulnerability in kafka-clients-2.8.2.jar used by IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2023-25194 DESCRIPTION: Apache Kafka could allow a remote authenticated attacker to execute arbitrary code on the system, caused by an...

CVE-2019-8784

creationtimestamp| type| source ---|---|--- 2024-01-31 08:41:50+00:00| seen| https://t.me/ctinow/176553 2024-01-31 14:42:04+00:00| seen| https://t.me/ctinow/176784 2024-01-31 15:41:39+00:00| seen| https://t.me/ctinow/176833 2024-01-31 17:17:18+00:00| seen| https://t.me/ctinow/176902 2024-02-01...

Important: tigervnc security update

Virtual Network Computing VNC is a remote display system which allows users to view a computing desktop environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. TigerVNC is a suite of VNC servers and clients...

CVE-2024-1021

creationtimestamp| type| source ---|---|--- 2024-01-29 23:31:10+00:00| seen| https://t.me/ctinow/175601 2024-02-05 23:16:07+00:00| seen| https://t.me/ctinow/179575 2024-02-21 13:36:47+00:00| seen| https://t.me/ctinow/189581 2024-02-27 20:08:53+00:00| seen| https://t.me/arpsyndicate/4091 2026-06-2...

CVE-2019-8803

creationtimestamp| type| source ---|---|--- 2024-01-29 19:51:41+00:00| seen| https://t.me/ctinow/175500 2024-01-31 08:41:42+00:00| seen| https://t.me/ctinow/176546 2024-01-31 10:36:52+00:00| seen| https://t.me/ctinow/176632 2024-01-31 12:37:19+00:00| seen| https://t.me/ctinow/176701...

Maliciously crafted Git server replies can cause DoS on go-git clients

...

Maliciously crafted Git server replies can lead to path traversal and RCE on go-git clients

...

[SECURITY] Fedora 39 Update: freeipa-4.11.1-1.fc39

IPA is an integrated solution to provide centrally managed Identity users, hosts, services, Authentication SSO, 2FA, and Authorization host access control, SELinux user roles, services. The solution provides features for further integration with Linux based clients SUDO, automount and integration...

CVE-2024-23655

Tuta is an encrypted email service. Starting in version 3.118.12 and prior to version 3.119.10, an attacker is able to send a manipulated email so that the user can no longer use the app to get access to received emails. By sending a manipulated email, an attacker could put the app into an unusab...

CVE-2024-22211

FreeRDP is a collection of remote desktop protocol library and client software that is both free and open source. An integer overflow within freerdpbitmapplanarcontextreset results in a heap-buffer overflow. This impacts clients built on FreeRDP. However, server implementations and proxies based ...