CVE-2024-38643

creationtimestamp| type| source ---|---|--- 2024-11-26 16:25:54+00:00| seen| https://mstdn.ca/users/rfwaveio/statuses/113550186886529518 2024-11-26 17:52:20+00:00| seen| https://t.me/itsecnews/4826 2026-06-28 01:07:07+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpcruxtgsp22...

Drupal 7.x < 7.102 Multiple Vulnerabilities

According to its self-reported version number, the detected Drupal application is affected by multiple vulnerabilities : - Drupal uses JavaScript to render status messages in some cases and configurations. In certain situations, the status messages are not adequately sanitized. - Drupal core...

CVE-2024-9755

Tungsten Automation Power PDF JP2 File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Tungsten Automation Power PDF. User interaction is required to exploit this vulnerability in tha...

CVE-2023-52333

creationtimestamp| type| source ---|---|--- 2024-11-22 20:57:54+00:00| seen| https://infosec.exchange/users/cve/statuses/113528607479224384...

Fraud Prevention in Online Payments: A Practical Guide

Learn how to prevent payment fraud with effective fraud detection, online prevention solutions, and secure payment orchestration strategies.…...

Exploit for Code Injection in Geoserver

CVE-2024-36401-WoodpeckerPlugin Introduction CVE-2024-36...

Fedora: Security Advisory (FEDORA-2024-d20a106350)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

What's new in Spring Modulith 1.3?

After half a year of development, Spring Modulith 1.3 GA has been released. It is packed with new features, improvements, and – best of all – community contributions. Let me walk you through some of the most interesting ones. Baseline Upgrades As usual, a new minor version of Spring Modulith...

Bidirectional communication via polyrhythms and shuffles: Without Jon the beat must go on

Welcome to this week's edition of the Threat Source newsletter. Bidirectional communication is foundational to a well-built team regardless of environment. It's critical in information security to be able to drive a conversation up the ladder and down and not lose the critical elements. One of th...

CVE-2024-51337

creationtimestamp| type| source ---|---|--- 2024-11-21 18:26:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113522350650502738...

BELL-CVE-2024-50286

Bulletin has no description...

"Failed to publish malware detection metadata to the catalog"

Challenge A backup job's task is completed with the warning: Failed to publish guest file system index to the catalog The warning above appears at the task level when a machine is selected in the Statistics window. An additional message will appear in the Statistics window at the job summary leve...

SquareX Brings Industry’s First Browser Detection Response Solution to AISA Melbourne CyberCon 2024

Palo Alto, California, 20th November 2024, CyberNewsWire...

CVE-2024-52598

creationtimestamp| type| source ---|---|--- 2024-11-20 14:20:42+00:00| seen| https://infosec.exchange/users/cve/statuses/113515721004503367 2024-11-20 17:05:23+00:00| seen| https://t.me/cvedetector/11612...

NHIs Are the Future of Cybersecurity: Meet NHIDR

The frequency and sophistication of modern cyberattacks are surging, making it increasingly challenging for organizations to protect sensitive data and critical infrastructure. When attackers compromise a non-human identity NHI, they can swiftly exploit it to move laterally across systems,...

AI Granny Daisy takes up scammers’ time so they can’t bother you

A mobile network operator has called in the help of Artificial Intelligence AI in the battle against phone scammers. Virgin Media O2 in the UK has built an AI persona called Daisy with the sole purpose of keeping scammers occupied for as long as possible. Basically, until the scammers give up,...

PT-2024-40635 · Git +1 · Ndpi

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided description. Description: A heap-buffer-overflow read issue is identified, potentially causing a crash. The crash involves functions such as zoom search again, ndpi detection...

CVE-2024-53072 platform/x86/amd/pmc: Detect when STB is not available

In the Linux kernel, the following vulnerability has been resolved: platform/x86/amd/pmc: Detect when STB is not available Loading the amdpmc module as: amdpmc enablestb=1 ...can result in the following messages in the kernel ring buffer: amdpmc AMDI0009:00: SMU cmd failed. err: 0xff ioremap on R...

CVE-2024-51865

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in leroysabrina Simple Social Share Block simple-social-share-block allows Stored XSS.This issue affects Simple Social Share Block: from n/a through = 1.0.0...

CVE-2024-11036

creationtimestamp| type| source ---|---|--- 2024-11-19 11:11:01+00:00| seen| https://infosec.exchange/users/cve/statuses/113509312850861765 2024-11-19 13:27:56+00:00| seen| https://t.me/cvedetector/11443...