PT-2024-17756 · Delta Electronics · Drasimucad

Name of the Vulnerable Software and Affected Versions: Delta Electronics DRASimuCAD affected versions not specified Description: This issue allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required, as the target must...

PT-2024-17711 · Delta Electronics · Dtm Soft

Name of the Vulnerable Software and Affected Versions: Delta Electronics DTM Soft affected versions not specified Description: The issue allows an attacker to execute arbitrary code due to the deserialization of objects. This could potentially lead to remote code execution. The estimated number o...

Delta Electronics DTM Soft BIN File Parsing Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DTM Soft. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

PT-2024-17754 · Delta Electronics · Drasimucad

Name of the Vulnerable Software and Affected Versions: Delta Electronics DRASimuCAD affected versions not specified Description: This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required, as the...

(0Day) Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Delta Electronics DRASimuCAD ICS File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Delta Electronics DRASimuCAD STP File Parsing Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Delta Electronics DRASimuCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CISA Releases Eight Industrial Control Systems Advisories

CISA released eight Industrial Control Systems ICS advisories on December 19, 2024. These advisories provide timely information about current security issues, vulnerabilities, and exploits surrounding ICS. ICSA-24-354-01 Hitachi Energy RTU500 series CMU ICSA-24-354-02 Hitachi Energy SDM600...

DEBIAN-CVE-2024-56169

A validation integrity issue was discovered in Fort through 1.6.4 before 2.0.0. RPKI Relying Parties such as Fort are supposed to maintain a backup cache of the remote RPKI data. This can be employed as a fallback in case a new fetch fails or yields incorrect files. However, the product currently...

io.kestra.plugin:plugin-databricks (>=0.11.0 <=0.17.0), org.finos.legend-community:legend-delta (>=0.1.5 <=0.1.10) +92 more potentially affected by CVE-2024-49194 via com.databricks:databricks-jdbc (>=2.6.25 <=2.6.40-patch-1)

com.databricks:databricks-jdbc MAVEN version =2.6.25, =0.11.0, =0.1.5, =0.0.8, =0.1.1, =4.55.0, =4.55.0, =3.6.1, =3.17.0, =4.7.1, =4.42.3, =4.47.0, =4.47.0, =release-4.114.0 - org.finos.legend.engine:legend-engine-pure-runtime-java-extension-shar...

Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10923 Malicious code in delta-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a63f8d77e78e8b2cbc3bc3bfa80ee50373c5e9eb8cd9962c51a4a0ebec4b7cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in delta-test (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 4a63f8d77e78e8b2cbc3bc3bfa80ee50373c5e9eb8cd9962c51a4a0ebec4b7cd Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-10922 Malicious code in delta-downloader (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware b7d26055bd3522d0ee0e99be091c1c9091ebc165f47a807c39261ddbac77ad67 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Exploit for Improper Control of Dynamically-Managed Code Resources in Lightningai Pytorch_Lightning

RCE Caused by Attribute/Class Pollution: Lightning AI’s PyTo...

PT-2024-35682

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A vulnerability in the Linux kernel has been resolved, related to the handling of NONHEAD !delta1 lclusters in the erofs filesystem. The issue was reported by syzbot, which found a WARNI...

CVE-2024-47131

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code...

CVE-2024-47131

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetObjectInfo can be exploited, allowing the attacker to remotely execute arbitrary code...

CVE-2024-39605

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code...

CVE-2024-39605

If an attacker tricks a valid user into running Delta Electronics DIAScreen with a file containing malicious code, a stack-based buffer overflow in BACnetParameter can be exploited, allowing the attacker to remotely execute arbitrary code...