7083 matches found
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2022-24816 GeoSolutionsGroup JAI-EXT Code Injection Vulnerability CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability CVE-2020-13965 Roundcube Webmail...
F5 BIG-IP Exploited in Three-Year Espionage Campaign by Velvet Ant
...
WordPress Book Landing Page Theme <= 1.2.3 is vulnerable to Cross Site Request Forgery (CSRF)
Software Book Landing Page Type Theme Vulnerable versions = 1.2.3 Fixed in 1.2.4 OWASP Top 10 A1: Broken Access Control Classification Cross Site Request Forgery CSRF CVE CVE-2024-37230 Patch priority Low CVSS severity Low 4.3 Developer Claim ownership PSID b75fbc99c1f0 Credits Dhabaleshwar Das...
EZ-Suite EZ-Partner Security Vulnerability
EZ-Suite EZ-Partner is a customer management system from EZ-Suite, Inc. A security vulnerability exists in EZ-Suite EZ-Partner 5. An attacker exploited the vulnerability to perform a cross-site scripting attack...
CVE-2024-36680
In the module "Facebook" pkfacebook =1.0.1 from Promokit.eu for PrestaShop, a guest can perform SQL injection. The ajax script facebookConnect.php have a sensitive SQL call that can be executed with a trivial http call and exploited to forge a SQL injection...
CVE-2024-36289
The FreeFrom - the nostr client app for Android and iOS is vulnerable in versions prior to 1.3.5 due to the reuse of a nonce and key pair during encryption (CWE-323). This flaw allows an attacker to perform a man-in-the-middle attack to manipulate the content of direct messages (DMs) between user...
CVE-2024-5659 Rockwell Automation Multicast Request Causes major nonrecoverable fault on Select Controllers
Rockwell Automation was made aware of a vulnerability that causes all affected controllers on the same network to result in a major nonrecoverable faultMNRF/Assert. This vulnerability could be exploited by sending abnormal packets to the mDNS port. If exploited, the availability of the device wou...
CVE-2024-28995
creationtimestamp| type| source ---|---|--- 2024-06-14 04:14:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7647 2024-06-14 08:12:01+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/7651 2024-06-14 09:48:38+00:00| published-proof-of-concept|...
Update now! Google Pixel vulnerability is under active exploitation
Google has notified Pixel users about an actively exploited vulnerability in their phones firmware. Firmware is the code or program which is embedded into hardware devices. Simply put, it is the software layer between the hardware and the applications on the device. About the vulnerability, Googl...
CISA Adds Three Known Exploited Vulnerabilities to Catalog
CISA has added three new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-32896 Android Pixel Privilege Escalation Vulnerability CVE-2024-26169 Microsoft Windows Error Reporting Service Improper Privilege Management Vulnerability...
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities Catalog, based on evidence of active exploitation. CVE-2024-4610 ARM Mali GPU Kernel Driver Use-After-Free Vulnerability CVE-2024-4577 PHP-CGI OS Command Injection Vulnerability These types of vulnerabilities are freque...
Black Basta Ransomware May Have Exploited MS Windows Zero-Day Flaw
Threat actors linked to the Black Basta ransomware may have exploited a recently disclosed privilege escalation flaw in the Microsoft Windows Error Reporting Service as a zero-day, according to new findings from Symantec. The security flaw in question is CVE-2024-26169 CVSS score: 7.8, an elevati...
CVE-2024-28022
A vulnerability exists in the UNEM server / APIGateway that if exploited allows a malicious user to perform an arbitrary number of authentication attempts using different passwords, and eventually gain access to other components in the same security realm using the targeted account...
CVE-2024-4190
Stored Cross-Site Scripting XSS vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited...
CVE-2024-4190 OpenText ArcSight Logger Stored XSS
Stored Cross-Site Scripting XSS vulnerabilities have been identified in OpenText ArcSight Logger. The vulnerabilities could be remotely exploited...
CVE-2024-2461
If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessible...
CVE-2024-2461
CVE-2024-2461 affects Hitachi Energy XMC20 devices. The reported issue is a file-system traversal vulnerability that could allow an attacker to access files/directories normally inaccessible. The entry lists a CVSSv4 base score of 6.9 (MEDIUM) with Network attack vector, low attack complexity, no...
CVE-2024-2461
If exploited an attacker could traverse the file system to access files or directories that would otherwise be inaccessible...
Arm Warns of Actively Exploited Zero-Day Vulnerability in Mali GPU Drivers
Arm is warning of a security vulnerability impacting Mali GPU Kernel Driver that it said has been actively exploited in the wild. Tracked as CVE-2024-4610, the use-after-free issue impacts the following products - Bifrost GPU Kernel Driver all versions from r34p0 to r40p0 Valhall GPU Kernel Drive...